Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/536DE1C52594C50A13E5683BE9F9A3133E1884CE.cer
File:                     536DE1C52594C50A13E5683BE9F9A3133E1884CE.cer (raw, json)
Hash identifier:          hKAXC/vwA6lsTyc9Xww+yDMZjNLbpUCiFzL4rAo00+4=
Subject key identifier:   53:6D:E1:C5:25:94:C5:0A:13:E5:68:3B:E9:F9:A3:13:3E:18:84:CE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5B05CEEFA589A08C614383105BF0D0E024061B2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/536DE1C52594C50A13E5683BE9F9A3133E1884CE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 28 Jun 2025 18:58:26 +0000
Certificate not after:    Sat 27 Jun 2026 19:03:26 +0000
Subordinate resources:    AS: 266368
                          IP: 170.80.44.0/22
                          IP: 2804:36bc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 02:28:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:05:ce:ef:a5:89:a0:8c:61:43:83:10:5b:f0:d0:e0:24:06:1b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 28 18:58:26 2025 GMT
            Not After : Jun 27 19:03:26 2026 GMT
        Subject: CN=536DE1C52594C50A13E5683BE9F9A3133E1884CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5f:e1:b0:90:09:a2:c8:26:a7:38:5f:d9:e2:
                    a3:ba:b4:9b:19:ff:d8:0f:44:60:a9:b6:70:f5:73:
                    5a:e7:e2:54:c8:ed:3f:05:a5:50:d5:bc:eb:7f:a0:
                    fc:e1:58:ea:f8:6e:26:fc:9b:a6:72:25:c7:ca:87:
                    5a:b5:0f:be:72:60:e4:a0:f0:4e:16:4b:08:4f:90:
                    39:f6:b6:80:61:a8:da:48:4a:77:db:78:11:61:ca:
                    9e:bb:b4:9c:2e:46:56:d1:d2:96:f9:f8:c4:af:0a:
                    1f:37:d6:16:e1:08:1f:54:f5:38:c4:7b:e8:ec:22:
                    db:80:cc:e1:87:75:63:84:c9:e9:b7:10:d5:96:3e:
                    7e:c0:77:10:65:36:a3:41:19:9d:0d:27:9a:11:5a:
                    6f:fe:99:8f:00:70:df:d0:20:77:36:23:c5:e4:5f:
                    9f:25:c6:3c:66:2c:14:32:d5:2b:3c:13:a9:ab:ad:
                    b4:40:9f:48:8b:97:b5:57:be:76:35:9e:79:bb:d1:
                    66:3a:39:85:a5:af:2f:94:57:23:85:fa:c5:62:88:
                    3d:c3:fe:5d:56:df:91:2b:9a:c5:25:77:16:02:a9:
                    80:34:f4:6d:ac:15:69:fe:4c:bf:4b:1a:ef:49:33:
                    e9:3c:21:f4:ea:1f:a4:7a:c6:f6:54:68:cf:8a:88:
                    b0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                53:6D:E1:C5:25:94:C5:0A:13:E5:68:3B:E9:F9:A3:13:3E:18:84:CE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/536DE1C52594C50A13E5683BE9F9A3133E1884CE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.44.0/22
                IPv6:
                  2804:36bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266368

    Signature Algorithm: sha256WithRSAEncryption
         d7:1e:70:97:1a:a0:aa:db:79:bb:2e:e0:ea:6c:05:16:ab:22:
         e2:63:06:55:f6:c7:18:3c:47:8d:d3:aa:e7:54:5e:d5:ea:12:
         90:88:a3:cf:1f:c3:66:e3:81:5d:53:c2:ee:13:b7:33:15:4b:
         36:40:45:68:87:a6:68:75:ee:e8:4b:29:e9:a1:de:6f:f5:51:
         e5:82:a1:54:15:49:8b:9d:d9:66:a0:6e:37:25:7e:dc:5f:54:
         68:1d:96:5a:f3:77:cc:4b:85:1c:27:6b:33:d7:a0:e3:9c:d5:
         f4:24:d7:40:38:68:6c:6d:47:61:71:2b:20:b1:d5:1f:ba:ce:
         d6:fb:2c:b1:db:2d:29:a6:cb:eb:c0:67:ae:bf:97:ee:2f:d0:
         77:05:d5:65:03:15:bc:f4:23:89:85:95:3a:de:49:5b:87:d6:
         4a:17:b5:a4:89:57:7c:9a:75:9d:12:53:a0:2b:19:f0:ac:67:
         b8:38:a7:23:b3:c3:76:20:65:8f:5a:ba:bd:ff:87:74:3e:b2:
         f8:f6:d6:99:ce:80:0c:b3:47:c4:7e:01:05:05:cb:52:91:11:
         3b:43:1e:5b:b8:ce:49:52:6a:4c:dd:57:4e:71:35:54:ab:09:
         80:37:8b:45:f4:a1:a1:fa:a7:df:05:d8:e0:29:1e:6c:be:d3:
         7c:9e:3b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 06:58:13 2025 by rpki-client