Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4AF555507F76387C67C13DE0BC2B700D6D33121B.cer
File:                     4AF555507F76387C67C13DE0BC2B700D6D33121B.cer (raw, json)
Hash identifier:          syxCoZq9rYQIofU1Cl7OV+KiA95aMKafvBSzRdb5jD4=
Subject key identifier:   4A:F5:55:50:7F:76:38:7C:67:C1:3D:E0:BC:2B:70:0D:6D:33:12:1B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2A3FEDC2890CDEAD16B8A6468C7028E8E64B66FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/4AF555507F76387C67C13DE0BC2B700D6D33121B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Aug 2025 00:33:36 +0000
Certificate not after:    Wed 05 Aug 2026 00:38:36 +0000
Subordinate resources:    AS: 267316
                          IP: 45.232.60.0/22
                          IP: 2804:4b94::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 02:34:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:3f:ed:c2:89:0c:de:ad:16:b8:a6:46:8c:70:28:e8:e6:4b:66:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  6 00:33:36 2025 GMT
            Not After : Aug  5 00:38:36 2026 GMT
        Subject: CN=4AF555507F76387C67C13DE0BC2B700D6D33121B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:23:ac:39:65:83:a1:11:34:37:48:c6:39:6c:
                    b1:50:24:8e:1a:02:f8:0b:15:d1:b4:63:1f:a3:0a:
                    3d:22:2b:fa:cd:8b:b1:65:82:c8:a0:b0:d6:41:ae:
                    46:f4:f8:07:95:5f:ca:47:58:80:8e:97:ed:bb:b3:
                    c5:81:a6:92:f1:32:ce:66:9d:66:73:ad:14:35:fb:
                    17:36:f9:23:bf:a8:7a:4d:2c:5e:c2:03:1f:d1:bb:
                    4e:05:df:ae:cd:84:5f:6d:dd:93:77:d7:97:64:f8:
                    e9:b7:68:c5:8a:aa:46:5a:cb:0b:aa:0e:4e:03:7c:
                    24:e9:f7:ec:86:a9:ea:d2:3a:31:73:bd:87:1e:23:
                    3a:27:09:02:49:66:f3:93:d3:2c:74:21:5e:28:2d:
                    79:96:e7:3e:47:c3:ca:90:c2:73:70:1f:04:22:05:
                    42:33:49:2b:89:39:11:53:b1:39:1c:ae:b7:57:2b:
                    8e:93:fb:e7:c8:53:f3:bc:47:63:67:d3:6d:53:d1:
                    c5:ac:85:61:5d:68:f8:d1:d7:03:f7:3d:a5:1a:60:
                    87:67:6c:60:86:31:d6:6b:ad:56:b5:42:ab:96:8a:
                    43:b6:39:b1:26:31:65:6e:02:af:8e:6e:4d:77:a1:
                    d1:c1:02:0e:b3:b3:22:60:84:c1:32:a5:72:6f:fc:
                    49:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4A:F5:55:50:7F:76:38:7C:67:C1:3D:E0:BC:2B:70:0D:6D:33:12:1B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/4AF555507F76387C67C13DE0BC2B700D6D33121B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.60.0/22
                IPv6:
                  2804:4b94::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267316

    Signature Algorithm: sha256WithRSAEncryption
         90:09:eb:e7:ad:84:69:56:71:46:57:7b:31:33:4f:1d:cf:ad:
         90:72:e1:23:d8:00:87:05:68:77:02:ab:b6:f7:60:75:26:71:
         10:8d:a5:b2:8d:41:e1:4d:15:ef:a7:e9:23:aa:a2:06:6f:c9:
         2c:7b:0f:f3:0e:d7:08:57:27:07:3e:50:04:8c:a6:e1:16:10:
         c9:6d:87:83:90:30:d9:99:a7:81:43:1c:63:4f:1c:24:2e:c2:
         cd:31:6a:1c:bd:c1:ad:bd:1e:be:ef:51:1b:2e:80:f1:b2:1f:
         14:65:fa:f7:af:8f:52:60:35:4e:83:ac:81:62:1f:93:ee:9c:
         40:2b:db:62:16:e5:34:be:a4:fb:7f:31:55:6c:69:e5:cf:9a:
         9e:75:56:b0:40:c5:38:d9:ef:f0:b7:72:cf:0d:ab:50:a6:ce:
         2b:ac:ee:4f:8a:bb:4d:88:37:ff:00:44:10:3e:54:c9:b2:38:
         ec:b6:7c:b2:4e:74:94:3c:e6:f8:be:20:a1:83:85:f2:2a:76:
         d6:76:d0:46:43:f4:4d:a7:52:7e:bd:14:bc:15:7a:78:24:06:
         b3:a7:fc:c3:52:2e:35:61:b3:a3:d0:f3:c6:5c:45:51:38:61:
         9d:fa:98:cf:ea:8a:f0:8e:f2:93:5e:00:bf:d7:4b:c1:db:c4:
         a9:63:85:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:07:23 2025 by rpki-client