Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.cer
File:                     3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.cer (raw, json)
Hash identifier:          T0LskCNLDKTMnz9fkxK5c5Uuy8JHqcO0FfC49/K6L3c=
Subject key identifier:   3B:DC:BF:73:A9:FD:02:DE:55:AD:C9:07:7B:21:6E:28:EC:64:59:2A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4927976A4B00869CA04375428A6A8E6D5C9B3F21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 20 Jun 2025 05:35:28 +0000
Certificate not after:    Fri 19 Jun 2026 05:40:28 +0000
Subordinate resources:    AS: 265915
                          IP: 131.196.168.0/22
                          IP: 2804:3fcc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Jun 2025 20:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:27:97:6a:4b:00:86:9c:a0:43:75:42:8a:6a:8e:6d:5c:9b:3f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 20 05:35:28 2025 GMT
            Not After : Jun 19 05:40:28 2026 GMT
        Subject: CN=3BDCBF73A9FD02DE55ADC9077B216E28EC64592A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b2:48:34:26:28:40:4b:56:67:b9:2b:83:c2:
                    d7:d4:8c:49:6e:d5:9e:62:02:57:cc:75:c4:88:e6:
                    21:36:97:ca:16:b3:1a:62:07:85:22:23:28:6b:26:
                    e3:f4:c0:ea:7a:69:23:c5:e5:9a:14:b0:36:af:52:
                    6a:fe:cf:f9:00:11:0e:cb:80:85:06:5f:39:b8:03:
                    e2:db:98:08:24:e3:6c:33:0f:e7:d9:ee:c9:b3:b2:
                    62:c1:51:36:6e:a6:12:09:ec:ec:17:3f:52:18:52:
                    89:a6:55:8b:f0:31:ea:22:b8:64:0e:29:8a:a1:84:
                    35:ef:a9:51:49:cb:6f:7e:18:83:a3:48:22:02:f4:
                    3d:51:fd:28:ed:cc:3f:8f:c8:00:a2:4e:ad:59:08:
                    58:71:04:0e:5d:a2:e9:43:51:ea:0e:2a:21:87:fe:
                    92:fa:56:da:0f:06:d3:ba:46:d0:eb:c6:b6:67:f4:
                    71:85:29:83:ee:a9:23:ee:36:82:d0:e1:bb:b9:16:
                    74:2f:4e:80:36:ea:b9:46:01:6c:97:d2:04:b0:e4:
                    d8:90:39:69:c6:ca:0f:96:25:f8:1e:be:c3:96:9e:
                    8d:d5:36:04:bd:33:e6:68:fa:51:88:b0:0a:63:da:
                    a8:8a:33:a5:9f:c7:86:de:7a:41:48:d1:bd:94:fd:
                    5c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3B:DC:BF:73:A9:FD:02:DE:55:AD:C9:07:7B:21:6E:28:EC:64:59:2A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.168.0/22
                IPv6:
                  2804:3fcc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265915

    Signature Algorithm: sha256WithRSAEncryption
         14:fd:c2:1f:5e:d4:32:35:1c:9c:8c:1d:20:e6:64:29:c7:7b:
         09:2c:27:24:4f:21:60:b5:59:83:44:0b:fa:f8:c9:0d:b4:a0:
         95:f3:17:0d:82:a6:9c:d4:a2:d9:7e:0c:7e:c5:c9:97:4d:e9:
         39:f3:23:23:b5:ba:20:67:97:4a:a1:4b:32:b0:eb:73:5e:4e:
         b6:87:b6:75:4e:7f:34:1f:8c:7c:73:2f:fe:78:a3:cf:5f:4d:
         72:3a:51:1e:37:f8:a7:65:76:29:94:d4:94:0a:13:cd:f2:8c:
         c7:74:d5:50:bf:ed:37:b1:47:ec:2f:ef:a1:26:63:32:fa:3f:
         77:85:54:d3:da:8e:98:48:78:f9:42:2a:66:46:fc:44:3d:59:
         d6:e2:ad:69:58:2f:c7:53:ea:d9:e4:76:87:5f:56:9d:2b:d8:
         e1:d2:a4:15:c7:d2:ed:c2:04:ef:3e:28:1d:7d:65:2e:14:8a:
         71:c0:6d:ae:72:a4:60:e2:55:03:78:bd:f5:7f:f2:96:b8:57:
         91:41:f4:a1:3d:20:3d:bd:fe:9f:a2:1c:7c:47:fd:61:a8:39:
         f4:9a:f7:ff:11:7b:52:97:3f:e7:06:f2:d0:cc:a3:04:e9:b7:
         7e:6d:f5:68:d3:26:c5:2a:4c:b5:58:a6:d0:5f:c5:3e:5c:18:
         76:94:e1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 23:30:46 2025 by rpki-client