Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/301611F5C33A5D1B48E3E813ED7AA04F23EE16E3.cer
File:                     301611F5C33A5D1B48E3E813ED7AA04F23EE16E3.cer (raw, json)
Hash identifier:          GWxQtcEtRotGhVo20fC1gauWO258ZxmCQ7tEp8ldERk=
Subject key identifier:   30:16:11:F5:C3:3A:5D:1B:48:E3:E8:13:ED:7A:A0:4F:23:EE:16:E3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       30896ED8F1196A4149E44F4C0F8B0CAA074CF47D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6LJ8Nw7zCzsLwMW1EFV1HVYQi386ZpPpnTuW9ztwdp9u/0/301611F5C33A5D1B48E3E813ED7AA04F23EE16E3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6LJ8Nw7zCzsLwMW1EFV1HVYQi386ZpPpnTuW9ztwdp9u/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 02 May 2025 19:22:41 +0000
Certificate not after:    Fri 01 May 2026 19:27:41 +0000
Subordinate resources:    AS: 274808
                          IP: 2804:93e8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 May 2025 23:50:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:89:6e:d8:f1:19:6a:41:49:e4:4f:4c:0f:8b:0c:aa:07:4c:f4:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  2 19:22:41 2025 GMT
            Not After : May  1 19:27:41 2026 GMT
        Subject: CN=301611F5C33A5D1B48E3E813ED7AA04F23EE16E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:53:0b:a2:26:15:b9:d0:8e:83:81:da:5f:98:
                    62:56:62:0b:cc:6f:85:4c:59:79:ae:70:d9:3b:a9:
                    a2:1c:72:83:93:f2:1f:27:cb:17:82:d9:ce:c0:78:
                    5e:cc:4f:0e:00:02:20:1f:6e:0e:99:5b:89:93:c4:
                    11:1b:b0:c3:22:08:bb:da:7f:8c:6d:a1:d0:e6:b6:
                    33:b4:38:d9:de:e7:6f:df:49:39:71:d8:22:7a:5c:
                    3c:55:56:76:48:36:95:d7:15:c0:7a:d8:3c:16:08:
                    fc:9d:ae:62:b1:15:ab:6d:49:d9:21:99:9f:bd:25:
                    7b:98:fa:b4:df:c0:c7:5a:66:5f:3a:c9:da:8b:d8:
                    32:0a:b4:ee:da:27:d1:4f:ea:b2:08:2c:f3:2e:0f:
                    12:ed:dc:a5:11:91:43:74:c4:88:7d:17:87:1e:bc:
                    94:da:3d:83:0e:3f:a2:2f:fe:ee:ab:83:5a:42:e0:
                    6c:78:83:1e:87:79:a0:5b:8c:ff:d6:fa:9d:f1:71:
                    a2:09:e3:e8:f5:fd:3d:75:77:fe:ed:c5:26:c7:ba:
                    9d:9e:d5:7c:56:24:73:23:5b:f7:e7:16:98:98:51:
                    1b:a7:33:08:c8:ae:ea:bd:62:14:75:f5:36:d1:79:
                    13:2e:9e:5a:67:4a:a6:b3:b6:de:00:94:43:ed:a2:
                    54:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:16:11:F5:C3:3A:5D:1B:48:E3:E8:13:ED:7A:A0:4F:23:EE:16:E3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6LJ8Nw7zCzsLwMW1EFV1HVYQi386ZpPpnTuW9ztwdp9u/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6LJ8Nw7zCzsLwMW1EFV1HVYQi386ZpPpnTuW9ztwdp9u/0/301611F5C33A5D1B48E3E813ED7AA04F23EE16E3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:93e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  274808

    Signature Algorithm: sha256WithRSAEncryption
         b6:c2:07:7e:91:f3:c4:a0:c1:66:d7:ba:d7:9e:8f:31:3e:7b:
         d0:77:0d:8f:9f:ae:c9:cb:f5:32:c3:ca:9b:13:38:f7:9c:00:
         9b:23:a3:23:27:72:ff:d4:ce:ad:ce:a3:ce:2b:fa:7d:3c:86:
         ba:8d:ac:5c:d6:01:11:e5:e9:80:74:1d:25:6e:d2:fa:b5:d6:
         99:70:ff:ea:a0:fe:0a:cf:49:b9:c7:df:4a:cb:da:29:a4:b8:
         23:e5:89:f8:db:39:0b:a7:cd:d7:de:92:a9:d2:50:b4:0a:6c:
         8a:c7:9b:90:cf:e0:a4:76:24:df:8d:91:38:a6:56:c7:15:35:
         87:51:0a:ae:bc:27:2e:f7:3f:77:7c:b8:a8:47:9f:30:06:24:
         32:20:b6:c7:09:5e:dc:48:59:75:83:53:37:b4:d4:28:90:c7:
         1b:a5:9d:d8:1d:40:ed:34:f9:e2:cf:e2:4b:45:01:bd:55:45:
         58:ec:7b:b9:fe:ef:ba:73:2d:2c:59:9f:ae:6f:82:cb:7c:55:
         95:56:d5:55:39:19:8d:48:c3:c1:19:55:20:0d:dd:20:64:cd:
         92:7d:48:35:f5:73:3b:c7:88:d5:c9:bc:8c:15:7c:00:36:05:
         e7:3a:b4:87:96:d0:b6:c0:6d:77:f7:4d:05:a6:89:6a:af:af:
         23:fe:e3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:56:39 2025 by rpki-client