Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8A6FD0B797ED6A627290062BC40CB751266060C8.cer
File:                     8A6FD0B797ED6A627290062BC40CB751266060C8.cer (raw, json)
Hash identifier:          gwbLgieczaNkOqgajCRtG2rHmFQtaJNuWVgi4U8RaZk=
Subject key identifier:   8A:6F:D0:B7:97:ED:6A:62:72:90:06:2B:C4:0C:B7:51:26:60:60:C8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       67DEDAAA15D629CA010EC0478B76652E50712A8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/8A6FD0B797ED6A627290062BC40CB751266060C8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Aug 2025 04:20:14 +0000
Certificate not after:    Wed 05 Aug 2026 04:25:14 +0000
Subordinate resources:    AS: 262417
                          IP: 45.164.206.0/24
                          IP: 131.255.132.0/22
                          IP: 168.90.28.0/22
                          IP: 168.195.228.0/22
                          IP: 177.37.64.0/19
                          IP: 177.125.181.0/24
                          IP: 177.129.200.0/22
                          IP: 177.200.128.0/22
                          IP: 179.43.4.0/22
                          IP: 179.63.176.0/23
                          IP: 186.219.56.0/22
                          IP: 2804:e24::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 08 Aug 2025 04:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:de:da:aa:15:d6:29:ca:01:0e:c0:47:8b:76:65:2e:50:71:2a:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  6 04:20:14 2025 GMT
            Not After : Aug  5 04:25:14 2026 GMT
        Subject: CN=8A6FD0B797ED6A627290062BC40CB751266060C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ab:cd:37:91:7d:1c:a7:ac:f0:e1:9d:04:ed:
                    ce:22:97:e0:34:83:5c:da:c7:9e:a7:ec:93:fd:48:
                    61:ab:a2:98:a5:17:82:58:6c:fb:ee:a5:7c:14:9a:
                    e6:64:dd:35:c0:74:e3:e3:2c:79:a1:2d:e7:6a:9e:
                    4d:ad:80:60:c4:ba:c3:d3:3a:9c:89:fe:34:34:da:
                    ae:06:81:ac:19:20:2a:df:c0:ad:eb:0a:5f:37:60:
                    1b:26:f3:5e:41:1d:95:bb:e7:e6:7d:b2:c5:9c:34:
                    2c:3f:86:bb:2c:e8:3b:20:9e:04:9e:03:60:fb:b2:
                    ce:65:ad:06:f2:7d:59:ce:ec:07:18:9a:c1:2f:75:
                    82:a8:f7:fd:1e:7e:5f:6d:23:05:37:41:88:c1:3a:
                    fd:02:ac:d2:a1:eb:5c:bc:47:eb:a2:32:c6:ee:9e:
                    c4:83:fe:f5:91:2e:3a:0c:22:76:6c:33:22:e5:06:
                    48:4d:71:72:99:b5:25:48:ac:33:3f:73:f1:b4:e2:
                    c8:53:9e:02:05:54:df:04:f0:c3:1b:c1:81:4c:be:
                    cd:a2:51:46:85:fe:1d:8e:da:30:ca:c7:09:35:0e:
                    cf:f0:ea:f8:2d:7e:e9:46:b6:6a:87:bf:e5:22:d1:
                    be:30:20:23:d4:47:61:82:18:09:6c:c2:93:88:fd:
                    8c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8A:6F:D0:B7:97:ED:6A:62:72:90:06:2B:C4:0C:B7:51:26:60:60:C8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/8A6FD0B797ED6A627290062BC40CB751266060C8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.206.0/24
                  131.255.132.0/22
                  168.90.28.0/22
                  168.195.228.0/22
                  177.37.64.0/19
                  177.125.181.0/24
                  177.129.200.0/22
                  177.200.128.0/22
                  179.43.4.0/22
                  179.63.176.0/23
                  186.219.56.0/22
                IPv6:
                  2804:e24::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262417

    Signature Algorithm: sha256WithRSAEncryption
         da:25:1c:03:56:04:38:7e:f7:b0:34:80:c4:d8:1b:7c:b2:3b:
         1a:19:9b:e7:32:81:9c:39:85:74:b0:17:87:bb:0f:b6:3e:67:
         9a:69:81:2d:e4:da:0d:19:b6:17:6a:1b:36:b0:7a:81:12:40:
         ce:70:06:ba:77:0e:e6:ab:fa:bf:05:d2:2b:d1:cb:7f:4e:f5:
         5f:8e:6b:c6:d6:2e:7d:99:90:52:e6:50:9e:9b:02:93:2d:bc:
         55:34:04:41:ea:c7:a9:19:1f:45:66:33:f2:d3:90:29:7c:d7:
         68:c2:fb:fd:f2:ce:85:2b:c1:0c:65:61:9a:e6:70:36:fd:9b:
         5a:e4:55:b5:9d:03:fb:4c:dc:24:02:06:75:d1:b3:f1:5e:22:
         e6:6b:7c:0a:7b:6c:28:65:5c:93:4f:e3:1a:22:1b:e0:fe:75:
         b0:c8:87:fe:a7:b5:c7:c0:90:b6:fe:bb:32:cf:d6:58:dd:ba:
         9e:a5:c4:c8:10:cb:e9:bf:3c:5b:b7:c3:5f:7f:12:68:21:b5:
         0a:cd:8e:b3:1a:1f:51:07:40:44:bb:27:4c:64:ff:c7:2e:7b:
         07:65:29:83:22:00:50:df:69:02:3b:c5:a1:9b:df:e3:2f:ec:
         87:18:d8:a7:1d:07:7d:71:7d:86:b1:c1:ab:53:34:99:52:e0:
         b3:e7:7d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:35:32 2025 by rpki-client