Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/211F3D420A136AE7395A367C0DC2C730D3B84CBE.cer
File:                     211F3D420A136AE7395A367C0DC2C730D3B84CBE.cer (raw, json)
Hash identifier:          oj7fK/LbSv+C+XNyGMzkfZTm7M70MtOY9YMHryNq6P0=
Subject key identifier:   21:1F:3D:42:0A:13:6A:E7:39:5A:36:7C:0D:C2:C7:30:D3:B8:4C:BE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3E673D47AE0E0A85661867A9B844EAD60091CA76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/211F3D420A136AE7395A367C0DC2C730D3B84CBE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 17 Jun 2025 22:56:34 +0000
Certificate not after:    Tue 16 Jun 2026 23:01:34 +0000
Subordinate resources:    AS: 270253
                          IP: 200.110.204.0/22
                          IP: 2804:692c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 10:48:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:67:3d:47:ae:0e:0a:85:66:18:67:a9:b8:44:ea:d6:00:91:ca:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 17 22:56:34 2025 GMT
            Not After : Jun 16 23:01:34 2026 GMT
        Subject: CN=211F3D420A136AE7395A367C0DC2C730D3B84CBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5a:e3:ed:f0:bb:74:dc:61:fc:76:9c:02:b3:
                    8a:e8:43:99:1a:81:2b:be:dd:aa:02:a2:71:65:3e:
                    54:df:88:da:35:a8:2d:8b:d0:ff:23:d7:c7:32:8c:
                    5c:3f:f2:d0:4c:1e:4e:b0:25:86:3f:eb:1a:40:ec:
                    71:ae:9a:cb:df:f8:f8:78:95:22:76:e7:ac:58:80:
                    69:0c:df:09:b1:67:79:06:77:a1:ab:fb:5a:f7:26:
                    80:4a:4e:a2:c3:aa:fb:75:ae:00:81:3b:54:a0:fd:
                    87:8f:47:f1:d0:76:7a:fa:c4:fc:44:c2:f5:1c:3c:
                    7c:2d:9c:bf:d9:83:b8:8a:41:f1:d9:b6:39:01:10:
                    68:fb:1f:d7:02:42:eb:b8:fc:9d:25:ca:a6:21:cd:
                    5d:72:2c:fa:66:bf:86:04:a5:b6:ca:e4:99:62:4d:
                    e0:fc:0e:f6:40:b3:d5:18:52:6b:c0:51:2b:0f:51:
                    2c:90:bb:6c:fd:80:e9:a7:fa:1c:a8:69:cd:ed:91:
                    11:fa:e7:92:8f:08:37:8b:b2:ec:97:66:85:68:d4:
                    2e:b6:d4:2d:d4:af:66:71:e5:e8:82:2a:15:0b:f9:
                    93:70:b1:e9:9e:9c:c8:d1:80:79:be:a6:8f:cd:6d:
                    38:c9:ad:8a:14:8d:e8:eb:1c:ce:0f:72:f9:54:04:
                    c6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                21:1F:3D:42:0A:13:6A:E7:39:5A:36:7C:0D:C2:C7:30:D3:B8:4C:BE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/211F3D420A136AE7395A367C0DC2C730D3B84CBE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.204.0/22
                IPv6:
                  2804:692c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270253

    Signature Algorithm: sha256WithRSAEncryption
         5e:d0:c7:d7:82:93:0d:86:36:63:47:f6:a7:c0:a1:c0:1e:23:
         e9:ef:3e:18:60:73:0d:30:5f:e1:c7:44:82:cf:8f:2b:d6:c6:
         95:0b:cd:2c:85:b6:97:c7:b6:1c:42:15:d9:e9:2a:91:d9:c1:
         71:fe:0c:95:e5:38:60:86:62:26:39:d8:7d:d6:ef:a7:04:19:
         75:7e:c7:2c:39:99:5b:de:cd:52:d5:7b:77:25:46:ff:30:00:
         c9:82:b0:bb:aa:6c:d0:8f:18:b9:99:81:2b:ec:4e:d0:9e:7d:
         22:f3:76:83:64:11:59:75:82:34:94:ed:0b:6d:52:4d:58:b1:
         a5:7c:44:28:3d:9e:e4:30:da:88:2d:91:b1:97:90:60:c6:81:
         68:36:4b:d3:80:08:4c:a9:0f:d2:40:c0:61:25:d7:98:c5:42:
         cb:91:c6:53:96:45:60:19:17:df:7c:fc:9d:9c:6c:75:7f:06:
         01:f8:1a:dc:4e:5c:ca:90:ad:e9:25:64:d2:40:90:10:84:16:
         0f:06:41:05:be:7c:52:a5:4c:16:d7:bb:24:05:69:91:c5:75:
         a5:c7:83:a0:ab:36:d4:5a:3b:72:59:22:6e:a1:15:a2:5a:ad:
         7d:09:06:24:f8:58:54:5b:79:b9:72:88:dd:04:98:6e:2a:cc:
         91:6c:23:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 09:43:25 2025 by rpki-client