Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.cer
File:                     DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.cer (raw, json)
Hash identifier:          Di7m/JIMjkg4uoqr2MC846xumhPKYBy1WP5ivY9V8ig=
Subject key identifier:   DD:D2:FE:CE:1A:49:F1:54:6C:35:5A:F0:8B:4A:32:02:AC:6B:4C:C4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6B7D0D0D9B8C7C169575DAD18A116E871519F947
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 17 May 2025 02:30:03 +0000
Certificate not after:    Sat 16 May 2026 02:35:03 +0000
Subordinate resources:    AS: 265038
                          IP: 170.150.200.0/22
                          IP: 2804:31cc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 16 Jun 2025 22:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:7d:0d:0d:9b:8c:7c:16:95:75:da:d1:8a:11:6e:87:15:19:f9:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 17 02:30:03 2025 GMT
            Not After : May 16 02:35:03 2026 GMT
        Subject: CN=DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1a:97:fe:ff:fd:3d:b8:7d:fa:d7:9d:6c:09:
                    0c:77:ba:56:4f:10:54:35:e6:3b:ae:f4:1b:32:22:
                    6a:06:f9:cc:72:3f:19:cb:a3:6e:ce:9b:2d:e2:e9:
                    99:29:56:1b:ac:78:14:1a:d7:c7:24:67:5a:9e:ec:
                    cf:29:7b:c4:ca:7a:74:12:15:e5:65:14:56:5f:26:
                    21:87:c2:d1:88:94:fd:32:48:53:ca:b2:e6:83:4f:
                    3a:dc:03:e0:26:5a:8e:e5:52:e9:9a:91:e7:27:84:
                    1d:5e:12:ff:80:9f:5d:6a:8c:3d:f9:c1:6f:3c:7a:
                    b5:bc:81:1c:5e:24:74:28:e9:9c:ef:94:99:e3:53:
                    24:85:f2:8a:e9:b3:b3:19:12:d5:36:78:6f:98:e6:
                    87:c8:e4:e3:60:40:0b:34:d6:31:68:f4:0b:bf:4f:
                    e0:5f:98:31:a4:db:66:07:10:35:55:cf:ed:c6:ad:
                    9c:5f:c5:ed:6c:60:d7:02:a8:50:d2:95:53:ee:6f:
                    04:31:a3:11:44:bc:f6:d0:15:9f:9b:6f:29:7d:20:
                    f9:5c:69:3e:c2:8a:f0:05:84:e0:07:da:60:02:9e:
                    6f:fa:aa:9f:21:12:96:ad:e1:f4:59:2f:d9:6e:e3:
                    96:b8:60:d5:4d:f3:6b:08:52:9c:aa:23:68:d3:b4:
                    56:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DD:D2:FE:CE:1A:49:F1:54:6C:35:5A:F0:8B:4A:32:02:AC:6B:4C:C4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.200.0/22
                IPv6:
                  2804:31cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265038

    Signature Algorithm: sha256WithRSAEncryption
         31:e2:80:ac:8f:bc:c2:04:1b:69:df:56:4b:82:f5:9a:94:90:
         2f:42:35:d5:d6:3a:63:8c:3b:c8:00:47:fe:8b:fd:c7:04:92:
         ff:7c:31:e4:f7:9c:e2:4f:6a:d9:7a:6e:7b:86:0f:4c:b7:81:
         9b:d3:44:c8:c0:ae:d7:36:e5:7b:8a:16:2a:c7:51:c8:43:a2:
         83:61:4b:79:a9:75:be:c6:6d:a4:8e:6d:cb:82:89:a9:18:d5:
         d3:99:01:66:24:30:36:15:4c:bc:f9:fe:4d:f1:a0:85:28:92:
         98:8d:a8:9b:18:74:bb:f0:c6:8e:88:a6:b9:d7:f1:d2:16:d8:
         46:2c:7a:2e:d1:0e:26:63:e7:5a:bf:40:88:ca:d7:71:c0:5b:
         33:a1:c4:5d:bf:c8:8a:80:e9:70:2f:a0:86:20:35:b8:e7:18:
         62:68:3f:bb:0b:71:87:b0:42:4b:68:5f:f3:d8:6c:7c:b1:64:
         06:d4:b4:66:4b:c0:44:25:c2:ac:c9:f2:4e:4d:77:1a:65:6c:
         d3:ac:ca:af:d5:83:a4:59:4c:53:67:cb:50:93:e1:64:a7:87:
         8e:da:ea:df:cd:14:68:fd:c7:9d:03:b4:be:23:b0:90:ae:7a:
         e6:3f:16:dd:87:ed:56:d1:ce:89:b2:1c:1c:b6:1a:78:bd:1f:
         13:2b:a1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:00:09 2025 by rpki-client