Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.cer
File:                     725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.cer (raw, json)
Hash identifier:          KldRtC4UYe0nMm5MdD7K1lvLC1deuhMnmxfJUL/WIgo=
Subject key identifier:   72:5C:FB:34:4D:3B:C8:D4:D1:28:A6:DE:8A:52:7D:9D:1E:3C:70:A5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       71420B50307E51026594FD983415B4FBBCD702FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 30 Apr 2025 20:24:36 +0000
Certificate not after:    Wed 29 Apr 2026 20:29:36 +0000
Subordinate resources:    AS: 262764
                          IP: 186.226.192.0/21
                          IP: 2804:1b8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 May 2025 11:43:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:42:0b:50:30:7e:51:02:65:94:fd:98:34:15:b4:fb:bc:d7:02:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 30 20:24:36 2025 GMT
            Not After : Apr 29 20:29:36 2026 GMT
        Subject: CN=725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a5:45:c4:40:44:0c:be:b7:24:85:f5:1a:29:
                    36:80:8b:cc:b8:c2:22:98:1e:ab:b1:b3:fb:46:2b:
                    a8:32:76:ab:78:f7:7b:87:ab:a0:9e:12:05:a1:51:
                    75:98:03:d0:53:c4:b9:bc:fc:e7:de:88:33:6c:af:
                    38:c8:fc:4f:30:48:a3:35:17:d9:ba:b2:66:1e:cb:
                    88:d3:1b:8b:03:92:1b:94:91:ef:f2:3e:8f:bf:bc:
                    9a:90:6e:92:30:3a:26:e3:bd:74:74:aa:fa:56:26:
                    e9:12:63:ec:e9:63:43:56:d2:ba:fc:96:2c:89:20:
                    73:9b:a1:d5:ca:ce:d5:6f:47:09:a3:69:22:25:48:
                    14:f3:c7:a4:68:26:f7:10:c1:ec:15:84:a9:3a:e2:
                    0b:0f:fa:0e:79:86:ee:cc:3b:a4:e5:4f:17:10:52:
                    a2:c2:28:af:7d:87:03:0a:d7:0b:b6:ff:ac:23:54:
                    64:f2:58:4b:e2:4b:e7:ec:35:4e:3b:bc:53:81:8d:
                    3e:b8:b1:bc:4e:48:28:6d:8e:b7:7d:f4:72:33:de:
                    d0:ce:51:36:aa:dd:64:ff:51:91:66:1c:de:af:96:
                    62:6c:d9:2f:d9:31:f8:f0:20:45:33:e5:a3:97:89:
                    8a:a7:ca:cc:6a:11:f9:58:4f:6d:a3:7d:7f:47:64:
                    80:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                72:5C:FB:34:4D:3B:C8:D4:D1:28:A6:DE:8A:52:7D:9D:1E:3C:70:A5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.192.0/21
                IPv6:
                  2804:1b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262764

    Signature Algorithm: sha256WithRSAEncryption
         c4:5f:13:5c:cf:1a:e4:4f:d0:da:8e:c3:14:9f:41:27:8c:05:
         64:62:cd:93:82:32:3d:5c:60:41:01:72:72:ed:ac:31:26:3a:
         97:cf:e9:83:46:a0:64:de:3e:47:00:24:f6:ed:93:ed:5a:9e:
         1b:83:99:1e:4b:31:24:e2:7d:a6:12:32:d8:54:f0:fb:6e:f7:
         e7:1b:a6:d1:ee:b2:e2:cd:0e:6b:c3:51:85:e2:a0:e6:0b:3b:
         c2:32:b4:81:f8:be:95:03:59:9f:3a:5c:60:9e:b7:79:8c:00:
         0e:87:90:bf:dc:e5:23:67:55:0a:19:3c:f2:e9:d9:c8:40:94:
         6f:19:1c:ad:45:af:d4:cf:06:ee:a4:5a:47:89:5d:32:d8:f7:
         9a:cc:15:1d:2d:21:07:38:14:12:de:28:de:f9:5b:53:11:f0:
         c3:ac:b4:71:a0:45:6d:a7:e3:d4:7a:5e:27:70:8c:41:ab:91:
         59:41:40:47:73:7a:46:70:fe:b5:b3:70:bc:b0:41:cc:60:d8:
         1e:53:09:bb:26:0c:e1:1d:67:53:70:15:5a:9c:e7:04:22:ac:
         10:54:ae:8f:03:ce:2d:f9:f6:75:0e:21:79:c1:e1:33:c8:8c:
         70:13:0f:ca:ee:44:84:95:cc:22:88:83:d7:d7:c4:57:7e:41:
         45:0d:e9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 11:28:35 2025 by rpki-client