Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/296C1957CA1EAD9BA9385FA528C36D900C425F48.cer
File:                     296C1957CA1EAD9BA9385FA528C36D900C425F48.cer (raw, json)
Hash identifier:          +cYi//kKpqGiIMSDggCE5k6BDn2oXhxFzL9Ky+KYGfA=
Subject key identifier:   29:6C:19:57:CA:1E:AD:9B:A9:38:5F:A5:28:C3:6D:90:0C:42:5F:48
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3D3A94ADC427D42AC6ADFF1B642CBC85757DB96C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 13 May 2025 15:25:30 +0000
Certificate not after:    Tue 12 May 2026 15:30:30 +0000
Subordinate resources:    AS: 270564
                          IP: 24.152.36.0/22
                          IP: 179.0.176.0/22
                          IP: 181.224.24.0/22
                          IP: 2804:6dec::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 16 Jun 2025 05:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:3a:94:ad:c4:27:d4:2a:c6:ad:ff:1b:64:2c:bc:85:75:7d:b9:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 13 15:25:30 2025 GMT
            Not After : May 12 15:30:30 2026 GMT
        Subject: CN=296C1957CA1EAD9BA9385FA528C36D900C425F48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cc:3f:45:b9:e7:83:ad:9e:e3:de:3f:aa:13:
                    0d:f6:dc:9a:5e:cc:9c:1e:6b:4c:5c:ed:ff:89:04:
                    9c:e1:61:8e:01:44:26:ac:b5:12:c4:18:6d:1a:81:
                    cf:84:a4:f5:e8:72:f0:dc:30:16:2c:b6:3d:22:0e:
                    77:30:ee:10:f3:78:a5:32:85:a6:51:90:32:b0:b2:
                    db:9e:d3:68:40:d4:9c:86:d1:a2:6c:52:17:7c:1a:
                    68:0f:7c:4f:a9:e4:0f:16:22:32:9c:06:c3:ec:97:
                    92:17:46:a6:8d:b8:72:ff:47:5e:71:7e:b4:2e:bd:
                    2d:28:e2:c2:82:68:38:f8:71:9b:0c:ae:b6:a3:24:
                    cd:d2:c0:79:0d:51:35:e5:5f:7f:99:2c:70:18:f0:
                    c6:4a:99:84:ab:74:2f:1e:d1:61:64:6c:a3:37:f9:
                    43:f3:55:88:d8:69:f6:01:ef:77:4f:2a:e9:d9:8a:
                    c1:8d:cc:f9:fc:cf:21:4f:80:04:32:2b:10:25:46:
                    9d:f1:8d:25:8b:ff:fa:77:b6:99:a3:13:8a:c0:3c:
                    bf:2b:60:73:d0:4f:5c:db:68:d5:a7:7c:b1:70:4e:
                    15:e3:b0:f1:87:76:49:c5:8f:fb:f0:c0:6e:3a:8c:
                    bb:fa:81:c6:95:7c:fa:92:4e:49:05:7b:fa:b7:8f:
                    32:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                29:6C:19:57:CA:1E:AD:9B:A9:38:5F:A5:28:C3:6D:90:0C:42:5F:48
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.36.0/22
                  179.0.176.0/22
                  181.224.24.0/22
                IPv6:
                  2804:6dec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270564

    Signature Algorithm: sha256WithRSAEncryption
         41:06:3b:49:d9:37:95:08:3a:58:31:1a:66:ba:88:ce:55:ee:
         0c:99:55:b6:20:f7:b3:d0:41:2f:19:e3:2b:4d:d7:36:7c:3f:
         06:1f:a0:75:4c:5d:6f:77:40:be:71:42:72:1f:db:75:b5:55:
         cc:5c:13:18:7e:5c:ad:62:73:a4:ca:7d:1f:a0:b0:ab:4a:22:
         ad:24:02:31:2e:f9:00:70:f5:2c:4f:58:b7:4d:f1:4b:6d:c2:
         41:93:95:94:87:76:e3:cb:2f:b0:88:06:ed:67:51:26:e2:49:
         41:57:2a:e8:ac:a1:92:9b:86:25:6e:d8:aa:2d:b6:de:24:fe:
         19:b5:43:5e:da:4e:ed:06:6b:be:8f:65:e0:1f:e2:d1:36:9b:
         05:34:ba:2a:92:71:8f:e2:d7:a5:d7:f2:8f:e3:ac:c6:c9:5a:
         df:c8:9d:94:ef:07:a9:8d:31:b5:68:74:23:45:34:7b:e1:1a:
         65:18:9a:50:5b:3f:99:20:a0:8f:7d:fc:19:b0:32:f9:db:16:
         80:d1:d5:1d:bb:de:9b:c3:66:f2:12:38:c1:c4:15:5c:bd:fb:
         22:5a:df:53:a0:74:a8:65:48:4b:7f:3b:ba:ad:f6:8b:17:7c:
         52:03:63:63:d0:79:30:6e:25:d4:7e:76:e7:2e:a5:ca:90:a6:
         05:d2:a0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:44:25 2025 by rpki-client