Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/390FF40DE6479BF9F8455EB5A28A3C6AD87E3E2A.cer
File:                     390FF40DE6479BF9F8455EB5A28A3C6AD87E3E2A.cer (raw, json)
Hash identifier:          JWh72j2fJa2P7Le8gxXvxht5mZ8SGPCwXCzzJaQS5S0=
Subject key identifier:   39:0F:F4:0D:E6:47:9B:F9:F8:45:5E:B5:A2:8A:3C:6A:D8:7E:3E:2A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       650EA21C872B3C97FA0EA501826239DFC1C0F606
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GJbkMPE6VVsZL7VVDTWfebsrETv8Tfxe7rHDW2KAw1rC/0/390FF40DE6479BF9F8455EB5A28A3C6AD87E3E2A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GJbkMPE6VVsZL7VVDTWfebsrETv8Tfxe7rHDW2KAw1rC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 19 Aug 2025 20:45:05 +0000
Certificate not after:    Tue 18 Aug 2026 20:50:05 +0000
Subordinate resources:    AS: 262737
                          IP: 186.195.128.0/20
                          IP: 2804:848::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 04:52:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:0e:a2:1c:87:2b:3c:97:fa:0e:a5:01:82:62:39:df:c1:c0:f6:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 19 20:45:05 2025 GMT
            Not After : Aug 18 20:50:05 2026 GMT
        Subject: CN=390FF40DE6479BF9F8455EB5A28A3C6AD87E3E2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a8:b9:70:b8:06:e3:c6:a9:42:05:c7:84:c0:
                    55:0a:99:4a:0f:0b:23:6c:2b:b0:4b:84:fc:7b:2a:
                    57:14:95:d8:ec:7e:ff:e8:98:14:6c:93:18:82:d9:
                    26:4e:6b:d6:3a:1a:48:d3:9c:f8:e6:c0:0b:b5:f8:
                    b1:57:2e:52:17:e8:74:7a:fd:a1:4b:6b:b0:41:3c:
                    11:28:6b:5e:0c:91:28:b8:f3:be:67:3d:f7:b5:3a:
                    83:65:3e:8b:a7:ef:7b:40:95:71:d1:33:e3:b3:c3:
                    07:bf:fa:c3:4e:4d:8e:4f:b4:97:56:91:c0:b3:0c:
                    bc:39:93:50:d5:cf:2c:3a:7c:5d:ae:81:e2:c6:20:
                    83:74:f2:9e:46:43:f2:34:bf:66:b6:72:1a:71:a3:
                    09:5e:dd:b7:c6:58:92:71:23:d3:4d:d4:f0:af:ef:
                    eb:2e:a7:88:fe:3f:3b:06:01:d2:5d:9d:8c:67:55:
                    78:c9:65:5e:05:3e:a8:67:7b:20:58:7c:85:2a:bc:
                    7a:72:9c:d0:6c:27:02:7d:cc:52:2d:35:38:49:cc:
                    b6:ff:3e:4f:07:3b:a8:f8:e7:48:d9:a2:ee:39:c8:
                    1a:d0:bf:8c:bc:1c:b5:ba:37:90:de:b6:f2:5f:98:
                    55:93:6c:42:a6:7b:41:c7:3e:23:b7:c3:01:1b:94:
                    b0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                39:0F:F4:0D:E6:47:9B:F9:F8:45:5E:B5:A2:8A:3C:6A:D8:7E:3E:2A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GJbkMPE6VVsZL7VVDTWfebsrETv8Tfxe7rHDW2KAw1rC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GJbkMPE6VVsZL7VVDTWfebsrETv8Tfxe7rHDW2KAw1rC/0/390FF40DE6479BF9F8455EB5A28A3C6AD87E3E2A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.128.0/20
                IPv6:
                  2804:848::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262737

    Signature Algorithm: sha256WithRSAEncryption
         bb:0b:c6:86:81:4b:4f:db:08:1c:43:3f:79:14:df:fd:9b:3d:
         02:ea:73:eb:14:00:a3:0a:f8:44:17:25:f3:06:32:fd:5a:c6:
         a8:8d:5f:d0:77:b0:2b:08:66:38:b2:48:df:a8:21:69:09:2f:
         1d:f7:d9:b0:6e:ad:5d:ea:c1:29:e6:24:3e:0f:5e:d0:02:62:
         3f:71:0b:23:cf:8a:9a:96:11:7d:22:7b:03:52:a8:cc:d2:52:
         c8:5d:46:ca:fe:f7:17:22:c4:d5:2a:df:13:72:8e:61:96:53:
         e8:8b:f5:ee:3c:79:5b:50:5b:fb:92:4b:a1:36:42:c2:62:19:
         70:96:9b:5c:d7:cc:10:8b:64:5e:b4:21:5f:8b:fb:3e:90:fb:
         c5:19:d8:56:e5:5a:08:d0:7a:92:59:08:a5:4b:14:29:d0:86:
         80:22:83:32:9a:89:f7:33:87:39:fd:ba:d0:44:b2:bb:32:95:
         d7:45:82:ab:ff:7c:10:24:9e:02:76:1c:b0:7d:ea:86:e1:7a:
         3f:d3:75:c0:f3:5f:a1:61:56:f1:4a:e4:05:f6:19:26:38:1b:
         dd:fb:ff:8f:dd:28:71:4a:7f:97:1c:fd:38:40:3d:63:63:fc:
         ae:0b:1d:01:65:c5:af:c1:f6:f6:e9:ee:ab:35:37:75:31:ee:
         6b:bc:40:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:12:05 2025 by rpki-client