Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.cer
File:                     E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.cer (raw, json)
Hash identifier:          /42ugZQlTc/cF0Kk4794xe8Nax1hZdQHYNXQgXbyU+8=
Subject key identifier:   E6:9E:BB:EF:4F:3E:B2:DE:9A:36:8F:10:8A:81:94:F2:D4:12:59:79
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       721782C472082D67CB03F441A09EFF66159236DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 05 Jun 2025 06:00:53 +0000
Certificate not after:    Thu 04 Jun 2026 06:05:53 +0000
Subordinate resources:    AS: 52956
                          IP: 168.181.56.0/22
                          IP: 170.79.56.0/22
                          IP: 177.22.96.0/20
                          IP: 177.67.40.0/21
                          IP: 2804:390::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 16 Jun 2025 05:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:17:82:c4:72:08:2d:67:cb:03:f4:41:a0:9e:ff:66:15:92:36:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  5 06:00:53 2025 GMT
            Not After : Jun  4 06:05:53 2026 GMT
        Subject: CN=E69EBBEF4F3EB2DE9A368F108A8194F2D4125979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a0:1a:ba:05:4e:5d:7e:a2:75:17:47:3c:3e:
                    07:54:b8:bb:ef:84:43:e3:ce:b4:a2:d3:53:89:43:
                    bc:b6:0a:e6:25:c1:f3:53:42:c5:17:46:e1:28:3a:
                    41:17:34:65:9c:15:79:96:e4:dc:f3:aa:2f:ad:1d:
                    8f:5f:c7:fd:7e:9d:90:4d:7d:04:80:57:fb:96:f1:
                    3e:0f:30:12:6d:25:7c:51:b1:27:fc:28:d6:d7:65:
                    ca:24:72:20:63:e3:1b:c1:26:75:f1:1f:c5:91:4a:
                    08:f2:c2:ed:bd:8e:2d:ab:2c:f1:e0:b5:47:d0:f5:
                    62:39:35:bf:69:ad:27:04:c2:df:5e:28:50:da:88:
                    16:cf:fd:f8:f2:32:1e:27:0a:63:94:e0:c8:6b:4b:
                    42:1e:70:f5:1b:6d:60:da:12:89:e9:45:62:21:00:
                    33:bd:c7:5b:18:61:c0:36:81:24:0b:4c:74:da:f4:
                    7f:a1:05:76:f4:aa:b7:57:94:66:22:23:a6:3e:5e:
                    6f:22:7a:7d:c7:f8:89:27:b9:90:d6:52:30:86:67:
                    52:76:14:cf:cd:d1:1d:47:97:b8:ea:46:84:a5:d3:
                    d8:2a:b6:91:f5:8e:60:32:e9:3d:5a:ff:b7:0c:a0:
                    2b:2b:d5:1b:b1:03:e7:a6:b6:21:57:2b:84:26:10:
                    2d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E6:9E:BB:EF:4F:3E:B2:DE:9A:36:8F:10:8A:81:94:F2:D4:12:59:79
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.56.0/22
                  170.79.56.0/22
                  177.22.96.0/20
                  177.67.40.0/21
                IPv6:
                  2804:390::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52956

    Signature Algorithm: sha256WithRSAEncryption
         5a:75:6d:95:89:b5:e2:97:2f:e9:37:5c:6b:ce:6d:f1:75:3b:
         cd:68:cf:72:c1:7b:4d:a2:eb:65:c0:9d:92:68:d4:72:91:ec:
         92:b8:4a:5a:ee:e5:c6:98:ca:43:26:bd:49:1f:5e:ab:26:08:
         ed:19:1b:99:77:35:3f:d5:bd:ec:af:cc:2c:da:f0:f0:23:bd:
         3f:c1:f2:4a:d1:d9:5a:21:ac:c4:5f:21:aa:4d:30:f3:8d:fe:
         cb:49:ee:f6:d0:5c:fb:d6:25:bc:87:53:6d:73:f2:83:dd:3c:
         6a:d5:89:7f:54:56:d9:4a:42:f1:cb:57:3d:ab:c6:4b:75:c8:
         45:b3:0d:8f:7c:82:0b:70:34:c0:9e:10:c3:8f:be:60:5e:03:
         e9:20:b4:c9:1c:57:d3:b2:30:26:80:89:fa:09:44:6b:fb:b3:
         fd:f9:20:fb:e0:0e:91:f8:7d:6a:fa:df:1b:7e:97:ae:e4:27:
         de:23:a5:b9:73:6f:53:33:df:08:f7:e4:9e:58:38:c6:44:d9:
         6d:66:4d:7c:e9:05:a6:08:f0:e3:b2:9f:fc:cd:8f:57:88:e1:
         d3:35:18:2f:dd:24:b5:d1:d9:eb:a4:24:90:9d:fd:14:6c:78:
         f0:1b:f4:6c:b3:d9:16:ab:3e:8b:60:b0:e1:8d:a3:23:f0:3a:
         c6:bf:83:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:27:57 2025 by rpki-client