Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/205BDAA59440034C4D1BF95271B3B291B494E890.cer
File:                     205BDAA59440034C4D1BF95271B3B291B494E890.cer (raw, json)
Hash identifier:          TF0jN9Co+o/tcs7qZ4W/PPlFbg5NpxygFw80YxCxpBM=
Subject key identifier:   20:5B:DA:A5:94:40:03:4C:4D:1B:F9:52:71:B3:B2:91:B4:94:E8:90
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       13AAF54EA8ABFFD83B0587EA3443ADC5BCA01BD7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E6FrUm25nbQVYhe16vy99irty7wUHQ5WY5XMaCaYt3BR/0/205BDAA59440034C4D1BF95271B3B291B494E890.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E6FrUm25nbQVYhe16vy99irty7wUHQ5WY5XMaCaYt3BR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 28 Jul 2025 14:21:48 +0000
Certificate not after:    Mon 27 Jul 2026 14:26:48 +0000
Subordinate resources:    AS: 270849
                          IP: 190.115.212.0/22
                          IP: 2804:7264::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 05:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:aa:f5:4e:a8:ab:ff:d8:3b:05:87:ea:34:43:ad:c5:bc:a0:1b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 28 14:21:48 2025 GMT
            Not After : Jul 27 14:26:48 2026 GMT
        Subject: CN=205BDAA59440034C4D1BF95271B3B291B494E890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:59:c1:6a:93:df:ff:28:70:c4:df:be:24:dd:
                    9d:88:70:dc:db:bc:72:2a:68:39:0b:19:8a:8f:d3:
                    51:89:4d:4b:f9:6e:5f:a0:3c:79:f6:73:98:80:63:
                    3e:f3:d9:7c:a4:c1:40:bb:48:3c:6a:44:e1:93:d6:
                    2f:97:d2:1a:01:38:d3:d3:21:d6:04:74:1d:46:65:
                    cd:d2:1b:1d:75:f7:40:09:92:f9:c4:ba:c1:e1:03:
                    80:99:3e:bb:f0:2c:51:d1:40:17:6f:30:df:50:d4:
                    fd:8f:8f:0b:57:3d:6f:b5:c3:70:99:78:d4:58:46:
                    11:d2:77:eb:b0:c8:ed:6c:32:a5:d6:1c:b3:8e:9f:
                    07:f2:64:c2:52:bd:14:02:79:23:d6:9a:b2:46:0f:
                    2b:04:bc:57:ce:4f:7a:e5:92:18:d6:21:4c:a0:08:
                    da:ef:10:68:52:3c:67:97:38:bd:b9:f9:9b:47:b6:
                    e9:77:30:e1:4e:6c:3d:4b:f3:72:d6:ac:0a:fe:dc:
                    7a:a1:65:29:45:47:64:c4:40:f4:ca:83:35:a9:0f:
                    75:54:7c:59:65:3e:67:79:28:2a:e9:99:66:b7:ea:
                    c6:0e:a6:b5:66:99:b1:5e:82:d8:9b:70:2f:e7:58:
                    6c:01:ad:8f:e3:4a:e5:a2:04:6f:3f:6a:80:96:0d:
                    80:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                20:5B:DA:A5:94:40:03:4C:4D:1B:F9:52:71:B3:B2:91:B4:94:E8:90
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E6FrUm25nbQVYhe16vy99irty7wUHQ5WY5XMaCaYt3BR/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E6FrUm25nbQVYhe16vy99irty7wUHQ5WY5XMaCaYt3BR/0/205BDAA59440034C4D1BF95271B3B291B494E890.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.212.0/22
                IPv6:
                  2804:7264::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270849

    Signature Algorithm: sha256WithRSAEncryption
         af:44:a2:2e:16:b9:bb:2c:f8:84:fe:6f:f8:d8:ef:00:0c:2b:
         7e:64:bd:8e:c9:5a:ac:9c:db:9c:74:2a:ff:50:78:6b:0f:c1:
         16:dc:ef:55:05:39:01:74:bf:59:4b:67:c2:9e:8b:15:0d:95:
         a8:4a:d5:28:81:35:ae:84:06:8b:67:80:01:18:b3:40:e8:60:
         83:c7:f1:d9:d6:37:eb:bb:1c:4f:2c:f7:f2:59:77:7a:e7:49:
         3c:81:7d:b6:42:c7:ad:22:14:d4:40:0b:e2:0c:5c:cc:ed:a2:
         4f:cf:dc:72:c3:47:7b:de:98:a9:1e:ae:2d:1f:d7:40:26:ca:
         ee:e9:a7:69:90:2d:07:45:cc:06:c9:5b:26:ad:a9:b0:43:b0:
         62:92:e7:e3:ea:5e:5c:fb:b5:c1:a9:e2:b8:83:9c:ab:2a:b3:
         47:10:d5:ff:45:14:2c:e9:a0:df:a7:1e:9a:4e:f4:45:48:19:
         cc:a9:9a:f1:89:07:8e:b4:24:c6:47:57:7d:62:c5:9d:ab:25:
         69:08:23:03:99:2c:0c:6b:7a:bb:da:c2:49:74:f1:0d:42:9c:
         86:79:bf:dd:91:f9:b9:ae:f9:da:78:b1:51:72:7f:ad:35:22:
         c3:7c:f7:79:f7:39:34:70:0c:a5:1c:72:f2:e8:17:7b:bd:cb:
         9a:a8:71:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:07:44 2025 by rpki-client