Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0ADD4EF72ADF2CFBB00EC3444EABD979E95DF8A2.cer
File:                     0ADD4EF72ADF2CFBB00EC3444EABD979E95DF8A2.cer (raw, json)
Hash identifier:          uR8pZQq2ZKLCzlF58zVPKGW9P+TyO/YNHRdBez5cByg=
Subject key identifier:   0A:DD:4E:F7:2A:DF:2C:FB:B0:0E:C3:44:4E:AB:D9:79:E9:5D:F8:A2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3AD6DFF3EA56F9C9AC4F1347FC38F6605DBEAB95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/0ADD4EF72ADF2CFBB00EC3444EABD979E95DF8A2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 12 Jun 2025 18:09:00 +0000
Certificate not after:    Thu 11 Jun 2026 18:14:00 +0000
Subordinate resources:    AS: 268402
                          IP: 45.160.16.0/22
                          IP: 2804:50a8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 16 Jun 2025 05:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:d6:df:f3:ea:56:f9:c9:ac:4f:13:47:fc:38:f6:60:5d:be:ab:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 12 18:09:00 2025 GMT
            Not After : Jun 11 18:14:00 2026 GMT
        Subject: CN=0ADD4EF72ADF2CFBB00EC3444EABD979E95DF8A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:95:1a:95:56:c7:90:94:9a:9a:b1:da:0c:a7:
                    2d:55:c2:02:a0:4c:8e:11:6c:1a:c2:4a:79:05:f6:
                    d8:de:32:8c:68:e3:ee:73:15:f7:4f:b3:dd:10:4a:
                    27:6e:41:c9:42:ff:6d:d2:39:dc:71:a9:a3:e0:dc:
                    75:4e:9d:49:0e:56:57:be:79:7c:cb:72:85:9f:2b:
                    ed:68:8a:c8:ad:ae:0e:0e:a0:21:cb:ce:1b:17:86:
                    87:7f:6d:9e:2c:6b:e6:f4:3e:06:df:70:d8:91:e1:
                    f8:82:8d:4f:33:1e:1e:b3:a8:c6:d8:e3:ba:b9:f1:
                    a1:9c:12:e2:d4:09:14:b9:83:c8:c3:2b:31:9a:44:
                    66:da:bc:d8:d0:06:e7:86:8b:0a:5c:e1:09:3d:38:
                    88:cb:d8:58:8b:84:28:4a:29:e8:bd:13:80:17:77:
                    aa:cd:85:ce:82:40:e2:b6:69:d7:c4:e3:1c:03:78:
                    22:7f:53:a9:8a:26:a8:5a:3f:2d:a1:0d:cb:c3:36:
                    04:3e:93:de:9e:a1:63:85:d5:1e:da:93:00:5b:1f:
                    4f:9d:44:06:b5:05:24:56:e8:e6:ed:c3:16:63:40:
                    cc:c7:b3:e7:07:fa:3c:27:56:dc:d9:98:b5:14:ad:
                    af:a0:9a:0d:b8:72:d7:ab:95:6d:16:90:66:c5:00:
                    e0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0A:DD:4E:F7:2A:DF:2C:FB:B0:0E:C3:44:4E:AB:D9:79:E9:5D:F8:A2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/0ADD4EF72ADF2CFBB00EC3444EABD979E95DF8A2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.16.0/22
                IPv6:
                  2804:50a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268402

    Signature Algorithm: sha256WithRSAEncryption
         34:e7:3c:7c:e9:72:a3:0d:35:f6:56:d4:cd:3e:6f:4c:0a:72:
         7f:68:99:95:2e:96:12:3b:d9:d7:77:81:75:fc:0c:6c:b5:8d:
         e0:94:9c:4f:e3:22:eb:16:57:5e:77:1c:b1:76:6c:ae:42:9e:
         7b:9c:22:40:0b:a8:41:8e:86:a8:a2:0b:9c:83:f3:ce:4c:e2:
         5b:96:c0:e8:27:95:ff:f7:2a:36:73:cb:1f:fa:ae:16:d5:31:
         fc:85:d4:41:2f:b5:fa:00:78:8c:8d:40:7b:fb:50:23:25:8a:
         68:b7:49:1c:d1:f3:1b:c1:2a:83:b6:65:61:32:da:81:e5:ac:
         ca:45:ae:24:1c:2d:24:e9:5c:dc:64:e0:d8:6a:e4:c4:b2:1a:
         22:ec:28:07:73:58:fc:60:30:02:ee:b3:af:0a:6a:7a:13:b6:
         ce:99:d3:e3:a4:0b:fb:4e:41:e2:e0:0a:7c:e3:09:91:09:84:
         20:46:3f:39:98:96:57:fc:df:aa:f2:8e:b5:42:4e:70:3b:3f:
         df:d5:33:ab:40:29:4f:83:ff:d7:fc:bf:df:c4:0d:07:ee:03:
         84:ae:7d:c9:66:e3:47:42:f7:cb:1f:1a:c3:22:54:97:01:b6:
         ed:99:e1:5e:59:41:e2:40:ae:a4:3d:3a:9a:41:56:a1:b8:4f:
         5f:ff:89:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:02:14 2025 by rpki-client