Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.cer
File:                     8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.cer (raw, json)
Hash identifier:          8q7Tnb135txDtVzIJsGeb3FmpmP12yV5THB2+A9RsdQ=
Subject key identifier:   8C:CB:AD:4C:CA:17:0E:31:C6:A6:E2:2B:17:2F:88:4B:22:4E:3C:49
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7D2D137EBC2BB05C81D5496EE8FA52E549C261D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 31 May 2025 00:58:53 +0000
Certificate not after:    Sat 30 May 2026 01:03:53 +0000
Subordinate resources:    AS: 271196
                          IP: 179.49.132.0/22
                          IP: 2804:77bc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Jun 2025 18:55:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:2d:13:7e:bc:2b:b0:5c:81:d5:49:6e:e8:fa:52:e5:49:c2:61:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 31 00:58:53 2025 GMT
            Not After : May 30 01:03:53 2026 GMT
        Subject: CN=8CCBAD4CCA170E31C6A6E22B172F884B224E3C49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:24:37:fb:be:f5:b2:a9:76:50:92:e1:f1:61:
                    6d:ab:db:17:7e:c3:02:3d:cf:5a:28:fb:75:d2:3c:
                    f0:48:74:e6:f9:e4:e8:fe:d7:41:e0:9e:a1:ac:82:
                    1e:ad:47:51:18:bc:db:dc:79:09:c3:54:23:16:fd:
                    8d:bf:09:56:96:83:e5:1d:ec:db:41:b5:36:92:94:
                    e7:33:46:eb:79:46:46:4d:cb:6a:45:4c:f0:53:53:
                    8a:38:ff:9a:e7:42:9c:f7:e8:94:db:24:e1:60:86:
                    1a:46:1b:83:29:77:fb:71:81:17:72:76:6d:87:0e:
                    4c:80:87:b9:3c:ab:b0:8d:47:18:93:40:b5:85:0c:
                    01:d7:fa:4b:3f:3d:ff:d6:82:b1:86:1b:97:dc:00:
                    50:b6:0d:b7:61:eb:4b:b3:fb:77:f8:27:23:40:b0:
                    b3:f1:b7:c8:ad:7a:11:f7:fb:70:a2:3c:2c:1a:bd:
                    24:f5:53:9e:70:02:bb:66:6f:3f:ed:1b:99:2a:de:
                    e8:ef:bb:71:58:0b:b2:a9:6f:8e:d3:6c:9b:b9:19:
                    6b:8c:c6:0c:6e:c2:8e:27:35:78:ac:25:52:73:a4:
                    e0:3f:42:9b:fa:72:1b:20:b5:0d:19:65:39:0c:28:
                    ae:13:49:ec:34:82:de:51:77:c3:b9:b8:2c:21:5a:
                    2d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:CB:AD:4C:CA:17:0E:31:C6:A6:E2:2B:17:2F:88:4B:22:4E:3C:49
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.132.0/22
                IPv6:
                  2804:77bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271196

    Signature Algorithm: sha256WithRSAEncryption
         a8:71:58:5f:b0:fe:bb:a5:b5:11:c6:7c:15:c0:ed:7f:0d:c2:
         91:9b:e6:63:ca:0f:b3:9e:8e:e9:be:b8:41:86:19:06:e6:ae:
         9f:5c:99:bc:f5:15:bf:27:a0:88:19:df:75:c1:02:7b:f7:bf:
         9a:98:11:b7:96:e0:57:2a:d9:52:b4:5a:4d:fe:5f:c1:8b:db:
         c7:5b:a7:87:89:08:ce:9e:62:3b:cc:fb:2d:3c:f6:a8:1d:ed:
         40:c3:fe:b7:5d:49:b8:2d:61:1b:6a:7a:d0:26:ad:d8:06:d8:
         31:83:2f:ac:88:29:92:ae:36:c9:38:54:df:b1:0c:ee:f5:7d:
         99:1f:f7:0b:ef:21:93:3f:ed:fc:d9:9d:50:46:e4:92:5b:29:
         ad:0c:4a:db:eb:10:4e:00:06:72:22:04:c5:72:c7:36:24:01:
         71:91:62:ba:80:a4:9a:97:af:c4:4c:e0:c0:39:30:ed:43:01:
         4b:cc:a5:e6:b1:7c:c9:5c:e3:ab:77:ff:e3:b7:e0:80:e7:b0:
         ce:32:16:46:0b:26:ba:2e:b1:ed:4a:ae:71:ea:5a:d5:4b:24:
         ed:45:28:eb:e6:0f:63:b2:d7:7a:5c:69:be:2a:57:85:83:7d:
         78:92:af:f6:7b:ce:ee:30:36:75:7c:46:78:93:85:80:b6:1f:
         9d:94:12:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 18:16:43 2025 by rpki-client