Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/ACD48B6E7C519F43E7540B9C9895DC4F5EB6C3B5.cer
File:                     ACD48B6E7C519F43E7540B9C9895DC4F5EB6C3B5.cer (raw, json)
Hash identifier:          r0Vo7JadC9SnoavcCC2i1XZItRyHGAVmb6WbwbqUIUk=
Subject key identifier:   AC:D4:8B:6E:7C:51:9F:43:E7:54:0B:9C:98:95:DC:4F:5E:B6:C3:B5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       684AB5119164DAFED63FB2E1CC8CCCF034047FCD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/ACD48B6E7C519F43E7540B9C9895DC4F5EB6C3B5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 May 2025 19:04:10 +0000
Certificate not after:    Fri 15 May 2026 19:09:10 +0000
Subordinate resources:    AS: 266438
                          IP: 170.82.48.0/22
                          IP: 2804:37d4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 16 Jun 2025 05:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:4a:b5:11:91:64:da:fe:d6:3f:b2:e1:cc:8c:cc:f0:34:04:7f:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 16 19:04:10 2025 GMT
            Not After : May 15 19:09:10 2026 GMT
        Subject: CN=ACD48B6E7C519F43E7540B9C9895DC4F5EB6C3B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:04:47:ca:15:9d:f1:79:25:6f:07:8a:b0:28:
                    1b:c3:9c:80:a2:a6:33:af:8f:56:e4:39:6e:45:21:
                    58:59:bb:58:47:82:82:a5:f1:5a:a3:35:0c:5c:fa:
                    e3:44:67:29:84:2e:db:e7:49:73:88:ae:3a:ff:cf:
                    85:aa:bf:48:0d:27:05:ce:eb:a4:21:ac:4c:7c:fb:
                    6c:1a:eb:42:0d:6c:b1:2d:03:af:6a:51:16:dc:f5:
                    d2:a1:21:28:93:a0:1a:f0:6b:c3:14:5e:ed:dc:61:
                    97:97:59:12:53:7d:63:43:de:c6:b1:bf:2d:4c:c4:
                    60:49:c3:e3:1b:11:e2:43:eb:df:65:a6:7e:4e:bf:
                    3f:bd:58:32:e4:19:64:ba:e7:80:5e:42:4e:7c:69:
                    0d:40:fe:2c:f9:80:4b:2d:6a:ff:c9:94:90:7d:28:
                    29:25:ce:18:15:cb:db:5a:e4:e6:f5:7d:b0:cb:d7:
                    20:09:9b:c7:5a:3c:17:b7:02:66:3e:63:de:4d:32:
                    d7:9b:95:b9:00:db:1e:6e:86:f9:ba:3b:19:46:23:
                    5d:c9:d6:97:a5:c0:49:1f:64:3a:56:10:13:dc:63:
                    9b:f8:0a:a2:3c:83:ae:8b:7e:ca:b6:6d:ce:c6:bd:
                    4d:71:6a:49:ff:86:1a:31:7e:9e:f1:9d:e4:d0:ba:
                    7c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AC:D4:8B:6E:7C:51:9F:43:E7:54:0B:9C:98:95:DC:4F:5E:B6:C3:B5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/ACD48B6E7C519F43E7540B9C9895DC4F5EB6C3B5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.48.0/22
                IPv6:
                  2804:37d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266438

    Signature Algorithm: sha256WithRSAEncryption
         06:85:db:d0:44:ed:97:5c:4d:60:ef:78:45:c6:f4:3f:c7:df:
         88:39:93:0e:7d:f6:05:20:04:d0:d6:5a:8b:b8:15:62:d3:b4:
         98:22:ee:27:25:50:65:67:64:bc:09:b6:48:14:e4:e4:2b:51:
         0a:0b:d3:5e:49:58:ce:39:b3:ae:fa:cd:93:b4:db:94:59:4b:
         38:1f:83:af:38:3d:60:21:7f:6c:ab:f1:68:45:44:40:58:d2:
         04:3c:24:f9:c2:bf:e8:63:2a:6d:55:c8:de:19:d7:43:9b:b5:
         a8:4f:79:46:e3:f6:44:a1:a5:4c:8c:c3:07:00:a1:cf:b0:60:
         4e:d2:17:84:9a:e1:d9:34:2a:8d:17:59:3a:a5:1c:f5:a4:cc:
         a7:6f:44:4f:2f:64:0e:61:0b:0b:17:24:c6:30:14:55:b9:6c:
         1d:1a:b3:4b:8e:0e:c9:f4:27:f7:8b:08:81:5f:4a:6c:ad:6e:
         e7:fa:4d:fe:d5:53:00:d4:2a:b0:dc:25:0b:be:60:36:47:6b:
         57:3d:b4:e4:31:8e:9a:c0:3b:fb:96:b7:ec:dd:18:29:67:a0:
         82:da:51:de:a0:a9:c5:7a:e8:39:47:22:29:30:13:b9:b4:0c:
         e7:f9:5d:e7:e5:d4:08:52:96:72:7d:88:cb:0a:0a:24:fb:4a:
         f8:86:f1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:27:58 2025 by rpki-client