Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.cer
File:                     EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.cer (raw, json)
Hash identifier:          M8bs54S+QiXonMXBVBbBIsjJFBzHuHwTwb6o5zHeqQ8=
Subject key identifier:   EF:21:25:E5:4F:B1:A3:8B:58:02:EE:2C:F4:8F:C3:EA:E1:E0:36:5C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4566D18391507699287D9598B3CB28FCA309D3FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HUkVQ9Sd9hRFVJiZE5jPGPER95rqUeMD3sZCoXpVznQJ/0/EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HUkVQ9Sd9hRFVJiZE5jPGPER95rqUeMD3sZCoXpVznQJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 18 Jul 2025 03:12:22 +0000
Certificate not after:    Fri 17 Jul 2026 03:17:22 +0000
Subordinate resources:    AS: 268920
                          IP: 45.175.196.0/22
                          IP: 2804:5ca0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 16:33:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:66:d1:83:91:50:76:99:28:7d:95:98:b3:cb:28:fc:a3:09:d3:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 18 03:12:22 2025 GMT
            Not After : Jul 17 03:17:22 2026 GMT
        Subject: CN=EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:03:0c:75:29:cf:20:86:ad:d2:9c:da:ec:91:
                    96:ac:7c:1f:3c:45:f8:14:d4:a1:e3:17:b2:4c:86:
                    77:71:96:94:d1:cd:d1:c9:95:92:46:c5:cc:bf:46:
                    4b:7e:11:0e:fc:0e:34:aa:45:ea:26:4f:fd:69:93:
                    a2:74:4b:19:24:7b:16:87:1d:0d:bb:7a:14:89:68:
                    5e:0d:51:8d:d9:07:dd:1a:fd:59:9b:5e:a9:a8:ac:
                    cd:87:53:7b:7f:5f:8e:57:1e:db:fb:d3:69:7c:ae:
                    83:b9:3b:dc:97:12:2a:8c:fd:6a:b4:a1:a3:f4:48:
                    68:e1:50:27:45:02:36:8d:37:8d:d6:71:b5:37:f0:
                    13:d6:1e:df:59:09:b4:24:cb:18:c1:e1:64:63:d7:
                    e7:5f:7f:71:83:85:4c:bb:7b:24:d4:a3:44:00:48:
                    53:76:e4:57:82:6e:0f:84:78:03:90:a4:35:2e:49:
                    18:c9:87:66:e0:fa:d8:cf:04:37:e3:66:d0:72:26:
                    42:ae:77:95:9d:06:36:f4:35:a9:3e:64:72:67:14:
                    39:c5:bd:e9:fb:b2:8e:e6:ce:5b:dc:66:a4:07:3d:
                    14:75:a4:2d:e5:f9:da:f5:81:29:80:51:93:a6:cc:
                    2e:81:d4:70:80:7f:0a:72:45:fe:1f:13:60:7c:16:
                    ed:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EF:21:25:E5:4F:B1:A3:8B:58:02:EE:2C:F4:8F:C3:EA:E1:E0:36:5C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HUkVQ9Sd9hRFVJiZE5jPGPER95rqUeMD3sZCoXpVznQJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HUkVQ9Sd9hRFVJiZE5jPGPER95rqUeMD3sZCoXpVznQJ/0/EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.196.0/22
                IPv6:
                  2804:5ca0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268920

    Signature Algorithm: sha256WithRSAEncryption
         27:fd:6b:07:64:a9:42:fb:93:f4:95:7c:ed:0e:ce:9d:7f:3f:
         b7:1f:3d:26:5e:19:67:22:cc:d3:8a:c8:a5:d6:24:cb:81:05:
         2b:55:5b:b1:57:43:2d:b6:f6:52:4d:57:52:1a:3c:2f:6b:01:
         40:d7:83:ab:40:40:29:f1:31:c0:6e:4a:fd:d4:8f:0b:04:77:
         b6:50:31:0e:7d:a4:e5:2b:e8:b2:85:8d:37:ec:cf:42:49:73:
         76:77:ef:53:a5:23:b9:e3:bf:55:b3:ee:26:d6:b9:01:48:41:
         4b:f6:c5:36:7c:8d:24:08:69:e3:4c:ed:bc:21:ee:f6:f5:d8:
         8d:18:b0:64:2e:e9:c0:0a:74:70:48:cc:49:40:03:4f:d7:41:
         d0:d8:33:e0:c5:83:d2:47:d9:7d:14:0b:fe:80:cc:d6:7f:6c:
         cb:61:b0:9e:15:55:60:3c:39:b7:5a:94:88:68:0c:ea:10:70:
         b8:5a:a0:77:03:5e:ee:42:d2:b8:99:1a:ac:3e:aa:5e:7b:09:
         05:24:fe:3f:7d:6f:ec:07:77:7f:65:d9:c4:3e:5b:4c:06:25:
         10:1f:55:a9:5d:05:dc:7d:9d:a6:fa:fc:3e:ea:17:ab:91:7c:
         e4:00:5f:e5:63:c4:8f:bc:c8:6a:87:6e:40:5d:6c:21:c8:c4:
         4b:af:ac:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:24:24 2025 by rpki-client