Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1067154D7B30C41A8514DBD5BE78C166941715B0.cer
File:                     1067154D7B30C41A8514DBD5BE78C166941715B0.cer (raw, json)
Hash identifier:          CWSx+rlu4/QtuNe/rJSfQot1r9MrZsnAQwABoC2qjhU=
Subject key identifier:   10:67:15:4D:7B:30:C4:1A:85:14:DB:D5:BE:78:C1:66:94:17:15:B0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2CE1A32AFB967468B04D3635A220664201968C0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/1067154D7B30C41A8514DBD5BE78C166941715B0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 31 Jul 2025 14:34:04 +0000
Certificate not after:    Thu 30 Jul 2026 14:39:04 +0000
Subordinate resources:    AS: 264409
                          IP: 131.221.44.0/22
                          IP: 2804:1e20::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 06 Aug 2025 17:04:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:e1:a3:2a:fb:96:74:68:b0:4d:36:35:a2:20:66:42:01:96:8c:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 31 14:34:04 2025 GMT
            Not After : Jul 30 14:39:04 2026 GMT
        Subject: CN=1067154D7B30C41A8514DBD5BE78C166941715B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bf:8e:f5:bd:40:d5:3b:1f:14:b4:ef:51:5e:
                    8c:c6:dc:e1:eb:3b:0e:60:3d:d7:aa:64:d5:73:d2:
                    71:1f:88:f5:a6:cd:1f:f3:58:0f:f1:94:49:6d:db:
                    26:c7:b8:4b:fd:ce:ca:0d:17:d1:70:a0:f4:20:59:
                    b4:7f:9e:14:1b:26:02:d4:2f:db:f6:61:64:b0:02:
                    82:58:9e:25:89:e6:fa:89:15:c2:16:69:c0:5b:95:
                    fe:09:fd:b4:8a:96:d8:9e:72:fb:cd:d9:0a:55:5b:
                    9b:f1:c6:c9:f6:1e:88:3a:b2:34:e8:f7:fe:5e:5a:
                    3d:f3:3b:dc:49:e5:00:dd:8d:04:b5:f9:d6:bf:23:
                    9a:2c:bd:10:ee:78:bf:56:ac:f1:7d:1c:a7:0e:59:
                    0f:f5:7b:13:4b:58:cd:08:81:8d:11:72:a1:0f:1a:
                    15:90:48:04:bc:75:dd:c0:fb:fe:84:bb:e8:39:da:
                    6a:30:c3:d9:34:7e:af:ef:88:35:77:27:af:31:8c:
                    86:77:02:05:b0:38:ad:35:25:6e:e9:dc:f1:48:8c:
                    0b:5e:2a:57:a4:4f:2a:5d:a9:a7:05:ee:11:f3:39:
                    5b:74:0d:40:1d:45:32:ab:5a:d8:3a:f9:1a:92:ed:
                    8e:00:60:b6:4a:77:0c:38:52:5d:75:3c:79:e8:ed:
                    6b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                10:67:15:4D:7B:30:C4:1A:85:14:DB:D5:BE:78:C1:66:94:17:15:B0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/1067154D7B30C41A8514DBD5BE78C166941715B0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.44.0/22
                IPv6:
                  2804:1e20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264409

    Signature Algorithm: sha256WithRSAEncryption
         93:77:fb:54:ad:a9:14:e1:b3:40:ca:f1:ba:4d:24:89:66:05:
         bc:31:b2:72:f5:ad:92:8a:a1:7a:bb:3f:58:46:36:d6:93:a8:
         6f:cb:b1:4b:f1:d1:ac:d9:cf:cb:23:cf:f0:84:68:cb:e6:30:
         e8:cc:d4:1a:fe:1f:e0:49:f4:cc:db:3f:42:5f:ee:d1:49:61:
         df:91:8b:67:c3:c6:aa:e3:22:a8:c8:14:7a:6f:3b:7d:47:46:
         ac:9b:a8:0b:34:7c:6e:fd:f8:a9:f0:0b:17:34:e4:93:14:11:
         a6:5b:1f:88:51:a2:06:82:db:77:06:31:5e:5b:f6:fb:69:a2:
         ae:6b:2e:38:ec:f2:8b:96:5e:da:79:1f:e2:2b:f4:e4:03:91:
         34:c6:e9:ba:9e:80:99:4a:37:21:90:dd:f2:ed:8e:c1:97:e6:
         fc:8b:c4:bc:58:df:12:94:2c:c2:a0:1c:b8:d1:12:58:69:7f:
         29:31:2c:2c:66:00:70:41:aa:d1:f8:a9:4b:49:5e:a5:ac:85:
         67:40:d1:76:d2:0b:11:da:b0:57:59:1c:25:0d:80:f6:f3:3c:
         45:fd:16:92:82:6b:33:b7:72:99:46:b7:5f:5d:df:f2:d7:c2:
         fe:48:79:7b:89:f3:ac:f3:f2:77:b9:62:d3:9b:e9:37:40:ae:
         8c:c4:fc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:13:18 2025 by rpki-client