Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/40B91035D3D0AD8E0DA3A7EDA90F706758E1D703.cer
File:                     40B91035D3D0AD8E0DA3A7EDA90F706758E1D703.cer (raw, json)
Hash identifier:          sajfq6HPF1z+1W6kj7wSNXpuzTtq5cnI4/woPOoOaNI=
Subject key identifier:   40:B9:10:35:D3:D0:AD:8E:0D:A3:A7:ED:A9:0F:70:67:58:E1:D7:03
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       360ECD87BB75063DBB92DFC07060BAD70C94B395
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/44A4UCMKnYS2beYXNszaSXVe2FjUbNcizRkqfyshYH6Q/0/40B91035D3D0AD8E0DA3A7EDA90F706758E1D703.mft
caRepository:             rsync://rpki-repo.registro.br/repo/44A4UCMKnYS2beYXNszaSXVe2FjUbNcizRkqfyshYH6Q/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 31 Jul 2025 17:52:33 +0000
Certificate not after:    Thu 30 Jul 2026 17:57:33 +0000
Subordinate resources:    AS: 273586
                          IP: 2804:892c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 08 Aug 2025 04:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:0e:cd:87:bb:75:06:3d:bb:92:df:c0:70:60:ba:d7:0c:94:b3:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 31 17:52:33 2025 GMT
            Not After : Jul 30 17:57:33 2026 GMT
        Subject: CN=40B91035D3D0AD8E0DA3A7EDA90F706758E1D703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2d:bd:35:f5:64:c6:de:3e:2f:76:52:66:3b:
                    b0:5d:85:db:63:d5:bd:e2:c5:41:d6:0a:b7:ca:c3:
                    50:59:33:ad:51:a1:d9:28:0c:0f:7d:6a:48:6f:32:
                    86:f1:61:e2:f8:a5:2b:06:af:18:3e:5c:8e:22:87:
                    1b:fc:0a:75:dc:e6:2e:87:35:55:ef:9f:c4:40:24:
                    13:f8:f8:7d:24:8a:90:bf:8a:5d:95:db:4f:c4:44:
                    8d:f9:37:78:a7:67:67:bf:ad:b0:16:8b:61:ae:6b:
                    3f:ba:cd:a9:69:bf:1e:c9:60:a4:25:b5:3c:ee:a2:
                    97:16:8a:f7:a3:0c:b3:8b:f0:c0:e5:e7:9c:c3:42:
                    a6:be:b4:d9:57:f1:c2:bc:d4:93:89:d8:11:67:a2:
                    02:33:90:87:b3:4e:d6:8d:cc:ac:d0:7e:dd:1c:e9:
                    af:c8:b0:96:8f:8e:1e:5d:31:db:95:d4:5e:1d:b0:
                    b7:4e:f0:11:55:34:79:ad:72:40:8c:12:5a:8f:03:
                    9a:53:b4:d4:34:e8:76:bb:24:97:c7:68:76:1d:f2:
                    ee:c8:70:5c:8c:bd:bc:3c:36:0f:5e:61:0d:10:bb:
                    d1:76:49:38:08:af:42:4c:e5:f2:c0:84:cf:59:ee:
                    b4:99:bc:d0:35:a6:b1:b5:d1:88:28:d6:6f:45:1d:
                    a5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                40:B9:10:35:D3:D0:AD:8E:0D:A3:A7:ED:A9:0F:70:67:58:E1:D7:03
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/44A4UCMKnYS2beYXNszaSXVe2FjUbNcizRkqfyshYH6Q/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/44A4UCMKnYS2beYXNszaSXVe2FjUbNcizRkqfyshYH6Q/0/40B91035D3D0AD8E0DA3A7EDA90F706758E1D703.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:892c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273586

    Signature Algorithm: sha256WithRSAEncryption
         0f:96:79:0a:49:2f:37:38:1e:8e:ab:2d:b9:94:1b:71:9f:88:
         b6:c3:fe:74:32:bd:b3:d1:7f:9d:f9:b2:ec:3e:7b:0c:27:a3:
         10:e5:6b:44:d3:b2:29:79:2b:f0:9d:6c:7e:91:9b:36:92:4c:
         d2:b1:36:7f:8d:c6:ef:a1:66:95:53:2a:9f:03:21:81:fc:6e:
         1b:0d:68:d5:9f:d1:6e:39:23:6e:20:b4:90:77:73:a9:47:fe:
         b7:ce:ac:ae:14:59:ca:2c:64:5a:4b:cc:7e:2e:8f:5c:03:37:
         50:17:e5:fa:e6:6a:36:9e:25:54:2b:9b:64:a5:e8:93:ae:13:
         5f:96:9a:80:f9:02:64:8a:06:53:a6:04:e1:35:00:41:1e:5a:
         3b:2f:95:bb:e5:27:3b:57:45:14:02:83:46:e9:83:08:99:63:
         49:ee:a3:0e:fd:d5:11:3e:86:89:73:27:cb:05:e0:3e:25:e8:
         03:b8:18:d9:07:67:5c:68:49:df:8e:80:01:b8:6f:c0:83:58:
         14:70:6d:73:79:f9:22:ac:02:d1:aa:26:7f:dd:01:73:4f:77:
         ec:08:5c:24:c9:f5:b6:97:46:25:a8:76:fe:ba:56:fc:21:4d:
         eb:0d:3c:6e:b3:1a:52:59:83:3e:3e:26:f7:60:48:c5:38:87:
         d3:4a:00:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:09:24 2025 by rpki-client