Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.cer
File:                     D45D3138F5EB85594C2205AF938DBA4D8D129CC4.cer (raw, json)
Hash identifier:          awwOVplbUf8PTe9dBQKNG+5t3m+HiK8oDwZVbfHLHaA=
Subject key identifier:   D4:5D:31:38:F5:EB:85:59:4C:22:05:AF:93:8D:BA:4D:8D:12:9C:C4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3494202A4F9EA158A6EFE307F344A2EC736211D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 09 May 2025 18:32:03 +0000
Certificate not after:    Fri 08 May 2026 18:37:03 +0000
Subordinate resources:    AS: 271383
                          IP: 200.36.212.0/22
                          IP: 2804:7aa4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 16 Jun 2025 22:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:94:20:2a:4f:9e:a1:58:a6:ef:e3:07:f3:44:a2:ec:73:62:11:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  9 18:32:03 2025 GMT
            Not After : May  8 18:37:03 2026 GMT
        Subject: CN=D45D3138F5EB85594C2205AF938DBA4D8D129CC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b1:10:1b:33:93:39:37:33:5c:8e:6c:4d:7a:
                    72:66:c2:cb:42:4e:82:40:45:04:92:dc:21:51:a0:
                    77:1c:e7:eb:45:d8:89:9f:ca:af:05:40:fc:eb:19:
                    aa:70:88:06:56:fc:83:3e:4d:30:07:79:e5:40:68:
                    08:20:8b:9d:a3:9f:ba:63:3d:f8:26:55:7f:60:cc:
                    fe:3f:7b:51:5d:b2:af:bd:0a:1a:76:37:70:98:fd:
                    20:87:ff:20:2c:e9:f0:e6:c7:9d:1e:b7:84:96:e8:
                    48:c5:a3:c9:0e:65:5f:a0:03:b9:8e:2d:6c:69:96:
                    4c:96:34:da:2b:9a:66:5f:bb:e7:f4:d6:00:2d:bd:
                    6e:9b:b3:13:1f:18:30:7b:6a:25:c4:a8:3e:e1:71:
                    81:f1:b7:00:9a:7f:ca:d1:8b:22:32:c3:93:ab:cf:
                    76:3f:88:c8:99:0e:e9:40:6a:77:c4:c8:59:97:f8:
                    f2:59:8c:45:a0:f3:99:cc:f2:da:7a:00:9e:0c:0b:
                    6a:59:96:f3:17:a2:11:b1:32:6d:3f:8b:d3:32:a8:
                    76:bc:a3:f7:b0:9e:46:4a:c4:cd:6c:b9:fb:38:d1:
                    39:13:77:cb:30:b0:63:37:47:30:27:c6:55:17:37:
                    cd:b5:11:aa:26:8f:1d:d3:cf:5c:df:0e:a2:14:71:
                    fb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D4:5D:31:38:F5:EB:85:59:4C:22:05:AF:93:8D:BA:4D:8D:12:9C:C4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.212.0/22
                IPv6:
                  2804:7aa4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271383

    Signature Algorithm: sha256WithRSAEncryption
         67:b8:29:5d:97:a6:4f:b7:8f:90:f6:04:39:95:4e:c8:f1:58:
         b2:de:2b:6e:52:94:81:7a:c0:82:97:c3:5b:ea:86:a9:7a:ab:
         a6:e7:83:7b:24:86:17:1f:26:f2:87:a0:1b:33:78:e5:d4:da:
         71:82:01:01:36:f8:a1:2f:41:a0:1c:a3:41:ee:7b:57:4f:62:
         e8:2d:d2:49:20:07:dd:65:47:60:46:f8:ca:c1:09:55:a1:25:
         ad:a7:0e:51:06:6d:86:4b:f8:38:dc:28:92:a8:2d:4e:bd:64:
         c5:b8:a2:86:af:e7:be:05:72:6b:e2:4b:70:f7:0d:72:9b:61:
         9c:c0:05:58:68:8f:60:80:50:4e:3b:37:2b:57:b2:3a:a7:9a:
         ed:f0:6f:96:10:28:a9:01:1a:1f:1e:19:ea:05:fd:d7:11:d5:
         87:be:e5:86:b9:b2:fb:a0:d5:57:a0:fd:99:14:24:65:ee:0f:
         44:e0:68:1c:38:cc:2a:b5:eb:94:ba:fc:61:e3:08:df:80:08:
         f5:d3:88:23:84:c4:6c:9b:fd:19:bd:62:3a:d9:67:12:a4:7d:
         b3:20:26:76:a9:c4:a8:a6:53:ee:23:f5:f6:b9:1a:a6:09:ff:
         47:8f:20:03:6c:a7:88:6e:9f:28:f5:0d:82:40:bb:86:bf:b1:
         4a:bb:a1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:02:45 2025 by rpki-client