Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.cer
File:                     F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.cer (raw, json)
Hash identifier:          f9L4KB+1QMLSl/KAY1x4kLO0PWg/zGP4jdMZbRhyh54=
Subject key identifier:   F3:AE:CC:A1:DA:CF:7A:DB:0F:3C:DD:C2:E4:82:6B:18:F3:6A:78:CF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       09EEC98044CC043DFADDCC2F1238A617DA667463
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 02 May 2025 19:54:00 +0000
Certificate not after:    Fri 01 May 2026 19:59:00 +0000
Subordinate resources:    AS: 264591
                          IP: 138.36.200.0/22
                          IP: 2804:2218::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 06 May 2025 18:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ee:c9:80:44:cc:04:3d:fa:dd:cc:2f:12:38:a6:17:da:66:74:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  2 19:54:00 2025 GMT
            Not After : May  1 19:59:00 2026 GMT
        Subject: CN=F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c7:85:eb:bb:90:39:ee:0f:09:ff:bc:2a:2f:
                    52:a9:31:be:e1:06:ca:33:c5:b1:1a:ef:90:73:94:
                    c3:ee:64:9f:01:f6:c3:36:c5:98:87:e3:41:89:33:
                    2a:fe:a6:5e:4d:dd:13:54:5f:16:d2:99:bd:28:a4:
                    05:a5:cb:48:70:be:14:ce:c5:f7:38:cc:c5:24:73:
                    fd:8e:e7:37:55:97:01:1b:5f:28:15:de:3b:14:dc:
                    86:b2:2b:3a:ed:67:13:15:df:1e:76:58:de:2a:fe:
                    7a:3a:11:32:c4:c0:fe:f0:7a:96:84:19:9d:e8:ca:
                    da:d5:17:df:c6:4f:29:8d:4b:a4:9c:4e:1f:07:ad:
                    5b:0b:8c:63:78:2e:64:fe:a0:e4:57:d4:38:12:06:
                    6e:03:aa:08:3e:3a:f0:db:a7:23:0d:4a:bc:86:a4:
                    1b:c0:80:50:4c:9a:c4:ee:ca:61:85:f5:5f:d6:9a:
                    da:83:ec:ae:98:71:57:0c:11:86:22:0c:00:4a:67:
                    8f:96:ad:35:ee:4c:8a:62:f2:85:0c:56:37:93:8c:
                    a0:62:97:46:f5:0b:4d:fa:21:1a:56:62:ab:59:34:
                    9d:78:ff:c1:ba:0f:ae:08:b1:c2:12:82:30:35:d1:
                    12:18:9a:4e:c6:86:ef:14:4c:ca:22:7a:42:b0:37:
                    fd:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F3:AE:CC:A1:DA:CF:7A:DB:0F:3C:DD:C2:E4:82:6B:18:F3:6A:78:CF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.200.0/22
                IPv6:
                  2804:2218::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264591

    Signature Algorithm: sha256WithRSAEncryption
         05:ed:c5:41:06:46:81:58:45:ee:dd:b4:7f:73:62:9d:6c:cf:
         51:5c:31:35:1f:b6:3f:3d:81:7f:aa:ac:b5:d2:53:ba:5a:e3:
         8f:1e:ad:af:8e:02:4b:53:91:61:10:2a:11:2c:f7:4d:c1:f7:
         46:b4:d2:60:73:6b:c4:4f:37:88:02:89:16:2a:c1:87:89:53:
         c0:57:66:20:56:1d:eb:60:ba:41:2f:54:39:99:11:c5:c5:5c:
         97:b6:e9:7d:a4:b9:89:f9:d8:cf:c7:2f:63:54:05:54:54:b3:
         56:b4:9d:42:d0:e6:df:2b:68:3c:b4:ea:0f:f5:aa:a4:9b:b5:
         7a:77:02:1a:77:59:d5:8e:b3:cc:b1:e9:86:09:bb:86:e9:0b:
         29:05:8c:1a:59:2c:4c:58:97:69:0f:43:0c:de:67:48:82:b3:
         91:db:71:f9:cc:73:b8:f8:bf:61:52:7f:92:e5:12:d8:d4:c0:
         54:4a:1a:23:cb:e3:a7:28:fe:1b:20:72:1a:cf:5c:f3:cb:53:
         be:5e:af:cf:ec:0a:33:db:9e:67:73:85:ca:b9:6e:5e:8c:71:
         ee:19:90:28:5a:98:bd:db:ee:6d:6a:fb:49:4f:53:1a:6d:71:
         43:5d:a7:ae:fb:f0:cb:73:a8:b1:79:21:43:19:7f:d6:b3:50:
         ad:77:af:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:24:29 2025 by rpki-client