Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/66A56D870457AAEA1EED831D71D318FB7DA99B42.cer
File:                     66A56D870457AAEA1EED831D71D318FB7DA99B42.cer (raw, json)
Hash identifier:          Rzc1XIPIdGyNAE1+KCvaVMCOGEj7bpUtblANiRRwync=
Subject key identifier:   66:A5:6D:87:04:57:AA:EA:1E:ED:83:1D:71:D3:18:FB:7D:A9:9B:42
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6A362BA94B07032D5A51602AEE1FC330EADC09B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/66A56D870457AAEA1EED831D71D318FB7DA99B42.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 22 Aug 2025 02:01:04 +0000
Certificate not after:    Fri 21 Aug 2026 02:06:04 +0000
Subordinate resources:    AS: 264315
                          IP: 138.122.44.0/22
                          IP: 2804:25f8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 04:52:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:36:2b:a9:4b:07:03:2d:5a:51:60:2a:ee:1f:c3:30:ea:dc:09:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 22 02:01:04 2025 GMT
            Not After : Aug 21 02:06:04 2026 GMT
        Subject: CN=66A56D870457AAEA1EED831D71D318FB7DA99B42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3b:29:a6:a4:a8:ca:2c:bb:b3:82:1b:3c:84:
                    b3:69:fd:2b:eb:39:a6:e0:81:21:16:3b:66:37:7a:
                    ca:96:a5:c4:7f:00:aa:be:50:b2:28:ee:06:c9:3e:
                    38:47:62:0b:e1:4f:65:93:20:9e:4a:6e:2f:2e:f9:
                    37:9f:b2:9a:91:50:ac:ba:1e:39:20:88:6e:94:e6:
                    41:f7:4e:f1:65:00:ef:81:5a:76:56:3f:96:0e:78:
                    cc:f9:6a:0b:6a:72:a8:fd:9a:7f:2f:2e:56:e9:fc:
                    92:43:9a:7b:1b:c8:89:a4:86:79:85:a6:72:0d:7c:
                    01:58:7d:d0:a4:b0:71:4a:84:6e:10:4b:05:1b:26:
                    fa:53:c9:5a:3e:b9:43:c6:8d:57:3d:ae:76:73:ee:
                    88:84:be:ca:63:2f:b4:e8:e5:a4:bb:f3:28:dd:33:
                    16:55:9a:c0:5b:45:a9:24:3c:97:d7:e7:87:5b:43:
                    fb:7d:37:00:0d:df:fa:ec:f3:e5:2b:75:17:c0:09:
                    b3:7d:21:c0:54:19:ad:44:56:b5:8c:fa:4a:17:f9:
                    e8:c6:40:5b:4e:78:3f:52:75:2e:2d:46:68:3e:02:
                    b5:45:25:56:1d:04:72:eb:77:24:38:79:02:2a:10:
                    6e:ef:f5:2c:e7:18:96:9c:ac:8d:4e:04:bc:da:87:
                    c9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                66:A5:6D:87:04:57:AA:EA:1E:ED:83:1D:71:D3:18:FB:7D:A9:9B:42
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/66A56D870457AAEA1EED831D71D318FB7DA99B42.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.44.0/22
                IPv6:
                  2804:25f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264315

    Signature Algorithm: sha256WithRSAEncryption
         04:ab:93:58:5d:49:99:c6:18:bf:47:27:2a:46:39:7d:85:32:
         67:4a:7a:14:3d:0b:81:5c:58:46:6d:90:5d:a8:82:5d:9e:70:
         f6:a0:b1:59:ad:72:c0:01:1b:0b:e4:3d:26:b2:0a:01:d9:4d:
         38:d2:73:9a:14:de:68:1d:77:d9:3e:d8:c5:b5:35:9e:dc:96:
         8a:36:6b:cb:4b:59:ae:6b:f3:11:12:ec:ff:50:0e:a7:3b:66:
         34:87:9c:00:85:3c:5a:7f:f2:b0:54:c7:f8:82:a5:4a:ec:6f:
         40:ee:da:79:af:50:4b:72:46:75:01:6c:55:de:86:dd:66:f0:
         ee:bb:3a:02:da:0b:b6:d1:c6:14:7b:82:d8:ae:c0:8e:b9:cf:
         de:57:39:53:6f:9f:6d:53:3b:64:b8:98:91:cb:4e:a6:7b:13:
         c6:34:50:3e:97:e0:e2:0b:e8:32:e5:bf:8b:b4:3f:82:2b:0a:
         6a:57:d7:9f:d8:40:1a:03:a0:6c:66:da:16:a7:0c:84:89:28:
         85:d5:91:1c:d9:4e:27:72:a4:18:99:71:e8:1b:ed:a4:e2:b9:
         a9:22:69:69:8a:31:5a:a1:34:2d:dc:cd:53:5c:fc:91:a0:8c:
         15:6f:90:89:9e:18:8b:50:62:90:a9:96:a2:c8:5c:4f:35:d3:
         9b:dd:50:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:05:22 2025 by rpki-client