Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3921558C04D37C64DA2CBC9D86CFF035672C152F.cer
File:                     3921558C04D37C64DA2CBC9D86CFF035672C152F.cer (raw, json)
Hash identifier:          U2art1wxey+TU/fv34v0tiXFZvYhzBoeBIUEf+Z2DS0=
Subject key identifier:   39:21:55:8C:04:D3:7C:64:DA:2C:BC:9D:86:CF:F0:35:67:2C:15:2F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       76057D34C81C2714BF9A42A2FC49663B60CA80BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/3921558C04D37C64DA2CBC9D86CFF035672C152F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Aug 2025 18:37:20 +0000
Certificate not after:    Thu 20 Aug 2026 18:42:20 +0000
Subordinate resources:    AS: 265446
                          IP: 2804:3444::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 04:52:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:05:7d:34:c8:1c:27:14:bf:9a:42:a2:fc:49:66:3b:60:ca:80:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 21 18:37:20 2025 GMT
            Not After : Aug 20 18:42:20 2026 GMT
        Subject: CN=3921558C04D37C64DA2CBC9D86CFF035672C152F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c5:d1:25:39:1a:5b:96:5e:f1:65:34:24:4f:
                    ae:62:b0:7f:7a:01:dd:4d:82:49:47:55:8e:ed:38:
                    3c:93:cb:05:f8:ec:6a:00:10:fb:1f:e9:35:4a:98:
                    8c:29:8e:e9:09:86:45:9e:44:b0:e5:6b:7d:a6:f7:
                    27:de:29:44:20:2d:b2:f8:66:2f:6c:65:20:d2:8c:
                    00:99:3e:5b:4b:95:08:42:45:e6:f0:eb:84:71:78:
                    e0:92:4d:80:02:42:e5:08:83:32:1b:bb:80:ae:ab:
                    11:84:7a:2b:0f:c2:a0:4b:5b:55:61:79:44:df:e2:
                    6d:d3:e1:2c:9e:b2:23:84:85:f3:01:f3:1c:f3:ce:
                    b5:cd:4a:0b:a4:13:4b:a2:ab:e2:c8:01:f9:c9:9a:
                    b3:f4:00:b6:30:ad:8b:d1:d1:e9:35:21:1b:e2:e3:
                    22:69:2b:e7:44:fb:a7:2d:d9:65:2c:5d:45:16:29:
                    d2:0b:cd:cc:cf:80:8f:4d:d7:6e:89:0b:7e:75:53:
                    ef:eb:a1:93:a9:9d:c1:24:f6:02:d1:60:d2:3b:f1:
                    5b:35:31:48:d1:9b:4c:12:32:27:92:0b:2a:a8:0f:
                    5f:c4:7c:41:59:df:c6:f6:e6:74:5d:f9:65:3f:56:
                    f5:2f:85:49:c0:0e:ac:a6:6c:ab:a4:80:13:59:2c:
                    5c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                39:21:55:8C:04:D3:7C:64:DA:2C:BC:9D:86:CF:F0:35:67:2C:15:2F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/3921558C04D37C64DA2CBC9D86CFF035672C152F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3444::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265446

    Signature Algorithm: sha256WithRSAEncryption
         c9:50:20:a0:ee:ee:ce:f2:30:7c:5e:ca:44:ab:db:40:a4:ac:
         71:46:1d:4b:99:92:ac:62:cf:df:55:1f:42:58:8a:ed:7a:21:
         26:d9:82:87:12:e2:80:1c:5b:21:5e:f2:56:8c:39:88:b7:4e:
         1c:3c:bd:e9:3e:5f:78:25:d0:29:d5:67:f1:58:6e:1d:31:fc:
         12:75:b1:4f:e4:fd:9d:7e:55:fb:31:a1:8e:64:1f:65:0a:9e:
         b1:c2:aa:c3:29:8c:9a:37:17:a7:0f:b2:b5:1d:3e:3a:84:90:
         3d:97:a5:8d:da:f9:43:95:85:5d:8f:09:d2:06:cd:6f:ea:15:
         e1:38:b8:31:fe:e9:fb:a5:c9:a1:10:73:f7:87:38:5f:f0:52:
         03:32:e5:a2:3d:62:51:42:46:1f:74:62:26:15:1b:8f:0f:06:
         4e:59:2e:a7:9a:a2:81:69:1a:04:cd:df:5c:aa:f4:a0:3b:62:
         54:78:80:fb:70:0a:f1:6c:9c:aa:af:a3:9e:24:ef:ad:cf:e2:
         25:2c:45:0a:aa:ef:c6:43:d2:2b:34:17:6f:24:16:12:63:8f:
         b0:3e:8c:25:c6:db:d2:aa:cb:a6:d9:3f:0e:88:16:60:8a:67:
         96:c0:89:41:40:77:fc:8f:81:aa:2f:74:79:29:f4:2f:f3:6b:
         e9:0e:f7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:58:24 2025 by rpki-client