Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F6088D67AA9EAECE20D46E4D20E46A3447420A58.cer
File:                     F6088D67AA9EAECE20D46E4D20E46A3447420A58.cer (raw, json)
Hash identifier:          3YGEjyZyQVf8aMuUdVYM3JI4yM0Ok9XjLr9u6nEIoZc=
Subject key identifier:   F6:08:8D:67:AA:9E:AE:CE:20:D4:6E:4D:20:E4:6A:34:47:42:0A:58
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       443B8B59B342CA0C2492143DEF58DA12AB57C87C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/F6088D67AA9EAECE20D46E4D20E46A3447420A58.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 21 May 2025 19:46:38 +0000
Certificate not after:    Wed 20 May 2026 19:51:38 +0000
Subordinate resources:    AS: 266342
                          IP: 170.239.80.0/22
                          IP: 2804:3654::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 16 Jun 2025 22:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:3b:8b:59:b3:42:ca:0c:24:92:14:3d:ef:58:da:12:ab:57:c8:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 21 19:46:38 2025 GMT
            Not After : May 20 19:51:38 2026 GMT
        Subject: CN=F6088D67AA9EAECE20D46E4D20E46A3447420A58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:0e:b5:a4:65:37:cd:16:6d:24:04:50:e3:55:
                    70:89:b9:f3:43:61:38:37:8b:36:91:0a:18:16:fc:
                    84:e6:75:df:e2:26:b3:3b:85:6f:17:c2:98:cc:c9:
                    65:f3:11:c2:d7:85:65:f7:01:62:89:eb:d0:45:27:
                    b5:d2:64:21:b3:13:74:7c:2f:c2:fc:2d:9d:c6:3d:
                    4d:2d:b4:11:7c:19:ae:ad:65:78:5b:4c:ae:bd:bb:
                    77:7c:8c:2c:f5:ce:6e:91:88:5b:5e:3f:9e:e3:70:
                    be:77:08:7a:64:14:80:ad:82:34:14:88:f1:20:91:
                    df:91:d2:cd:cd:e4:cd:cd:48:fe:3b:64:10:79:5a:
                    94:91:00:81:d5:f4:85:be:57:c9:38:04:8a:31:58:
                    a2:0d:2e:7e:46:c1:8f:41:0c:0e:4a:57:ed:b5:2f:
                    86:fe:e8:3e:be:57:29:1f:6b:5e:eb:ee:73:25:ee:
                    5c:f3:b8:a7:f1:e7:b9:5d:25:92:2f:db:a5:0c:49:
                    f7:22:25:6b:71:da:55:25:7a:dc:d2:f8:c1:be:93:
                    0d:b9:fd:18:0d:d8:6d:f2:b6:5d:15:65:2a:00:78:
                    c4:c9:56:eb:85:a0:f6:2f:cf:95:80:20:e4:93:bb:
                    94:24:16:31:e9:57:df:bc:d0:fb:1e:82:15:dc:a0:
                    26:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F6:08:8D:67:AA:9E:AE:CE:20:D4:6E:4D:20:E4:6A:34:47:42:0A:58
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/F6088D67AA9EAECE20D46E4D20E46A3447420A58.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.80.0/22
                IPv6:
                  2804:3654::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266342

    Signature Algorithm: sha256WithRSAEncryption
         aa:96:40:27:fa:08:d2:b5:43:c0:fa:50:70:8f:9b:99:ea:eb:
         6e:27:74:7d:ee:c2:bc:60:11:8b:f5:d2:bb:5a:e8:7b:2c:fb:
         0e:03:5e:cc:b1:c7:a1:0d:f4:67:10:8c:8d:1e:77:49:09:5c:
         d6:7b:f9:38:b3:d6:45:53:15:ff:23:11:53:05:c3:0f:bb:f3:
         64:66:e7:cc:ae:50:80:38:ce:8d:f0:1f:dc:29:91:67:3a:0b:
         da:f6:8e:bd:d0:6a:41:c5:cd:5d:c0:21:43:88:27:72:c5:74:
         6c:cb:1f:58:e9:74:79:36:b7:ab:9a:bd:39:1d:ba:ed:22:d8:
         a4:57:5c:f9:ea:0d:2e:48:5b:56:e5:5f:c5:ff:c5:1c:c3:3d:
         07:25:c5:1b:cd:64:3d:2f:c5:58:43:24:ae:3a:a5:73:bb:07:
         ca:4a:70:b4:ca:67:d0:63:30:7f:55:03:b2:76:d2:38:ed:8a:
         24:b7:4e:f9:aa:63:37:f0:b3:d4:8d:03:9a:54:c4:04:40:29:
         5b:e1:b8:f2:be:e8:4d:09:8f:5d:92:49:85:72:57:5e:1e:b5:
         3d:2a:22:fd:b9:c2:49:a2:5a:1f:f5:50:cb:de:30:74:c6:37:
         3b:ec:63:cb:b2:7a:4c:13:2d:18:fe:38:f8:b1:3e:5d:fb:a1:
         f5:13:49:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:07:24 2025 by rpki-client