Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5CB149AF86F89858ADCF9D29260F704D0BB85911.cer
File:                     5CB149AF86F89858ADCF9D29260F704D0BB85911.cer (raw, json)
Hash identifier:          pJEA0tsb5EfEc3TTk8+rCl6V1KU6VeGCqnjwsJhFcP4=
Subject key identifier:   5C:B1:49:AF:86:F8:98:58:AD:CF:9D:29:26:0F:70:4D:0B:B8:59:11
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       55D06FC3E74A88284699728ED1C0A127FF4F7D22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/5CB149AF86F89858ADCF9D29260F704D0BB85911.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 24 Jun 2025 17:26:22 +0000
Certificate not after:    Tue 23 Jun 2026 17:31:22 +0000
Subordinate resources:    AS: 266036
                          IP: 45.4.28.0/22
                          IP: 2804:3990::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Jun 2025 20:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d0:6f:c3:e7:4a:88:28:46:99:72:8e:d1:c0:a1:27:ff:4f:7d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 24 17:26:22 2025 GMT
            Not After : Jun 23 17:31:22 2026 GMT
        Subject: CN=5CB149AF86F89858ADCF9D29260F704D0BB85911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6b:1f:7d:4f:db:b3:27:f3:eb:b2:69:b4:60:
                    7e:23:1e:9a:28:ad:dd:6d:28:56:28:8a:6c:24:60:
                    9d:ee:67:6d:be:71:b3:62:64:a9:8d:a1:1d:91:73:
                    1a:8c:39:02:3c:ab:f9:aa:da:73:d1:ce:e6:f3:53:
                    3b:43:85:66:a6:a9:c9:43:44:89:98:d3:14:c5:87:
                    6a:c9:bd:c0:0e:97:83:7c:8c:4e:06:09:1b:c2:5b:
                    21:45:8f:24:5d:96:a9:30:ec:bf:c7:42:91:bc:a7:
                    4e:aa:03:da:d2:84:92:73:96:ed:77:8c:fc:24:10:
                    f9:88:fd:c6:6a:6b:92:00:08:0f:71:15:9f:93:b2:
                    3b:7f:c4:31:0e:96:90:c5:6f:fd:95:53:bf:09:0f:
                    0e:1e:ac:d3:dd:31:a7:78:08:d3:4d:3d:74:5e:37:
                    60:72:6e:16:e0:da:5c:b8:e3:77:33:db:23:23:8e:
                    a8:e7:43:60:2e:27:51:c0:9d:aa:5f:55:6f:3b:a6:
                    e7:0a:d8:ed:ff:e2:74:e7:cd:f2:21:03:63:94:2d:
                    c7:d4:19:e9:e8:0f:d0:e3:29:19:d1:f1:fe:4f:1b:
                    9f:04:12:d1:fc:b3:e0:b7:c7:33:07:00:71:5c:5d:
                    7d:4d:5f:b9:24:0a:c9:6b:08:bf:09:20:58:83:d8:
                    33:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5C:B1:49:AF:86:F8:98:58:AD:CF:9D:29:26:0F:70:4D:0B:B8:59:11
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/5CB149AF86F89858ADCF9D29260F704D0BB85911.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.28.0/22
                IPv6:
                  2804:3990::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266036

    Signature Algorithm: sha256WithRSAEncryption
         08:e6:73:bc:6a:80:f8:ec:a3:c3:04:4a:23:3c:ee:8a:65:92:
         5c:ea:fe:a1:9a:34:5c:99:c2:19:01:43:65:cb:95:2f:c7:9f:
         cf:fb:08:8a:9c:eb:56:1d:7b:bb:d3:3e:a6:86:60:c2:f7:c1:
         e0:b6:d4:38:86:0f:b6:56:37:12:d0:92:17:dc:15:36:4a:8e:
         f4:6d:53:91:c4:86:7d:f2:e4:35:9a:7e:ff:2a:cb:8e:66:7c:
         0e:71:7c:86:85:5b:93:e5:05:14:64:ae:63:d5:d0:42:89:66:
         3e:f7:34:94:24:14:f6:6c:06:7d:c8:84:ad:87:55:37:cc:66:
         d6:cf:b4:fd:b8:c3:bf:94:23:8e:66:d1:87:7d:09:c6:f0:af:
         b9:c6:bd:44:d2:eb:10:aa:42:d5:ca:a1:63:4c:a8:85:12:2a:
         47:5a:7c:13:52:d7:81:f8:d8:b0:8f:9b:ef:e5:fc:f4:28:9f:
         11:8a:43:73:f1:a9:ef:44:10:aa:30:3d:57:be:b6:e9:ce:eb:
         70:a2:9c:cd:30:14:48:6d:26:27:15:e9:fe:28:bd:a9:98:0e:
         d9:52:32:f0:20:cc:9a:e1:6f:a0:e9:d0:63:7b:66:81:e4:80:
         0b:dd:72:1f:cd:50:8a:c9:f7:ee:a8:a2:92:93:35:9d:84:34:
         3e:ac:71:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 22:18:17 2025 by rpki-client