Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/74FA7403B361BD3A6DCE3695CF0EA21AFC15A0C5.cer
File:                     74FA7403B361BD3A6DCE3695CF0EA21AFC15A0C5.cer (raw, json)
Hash identifier:          Rag1gj5vewLG1sompeHfuUoMaZ2k2cKGf2aslBPlyh0=
Subject key identifier:   74:FA:74:03:B3:61:BD:3A:6D:CE:36:95:CF:0E:A2:1A:FC:15:A0:C5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6ADE552DE14FCCC14F67DFBFCF10EF6EC31F7FEE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/74FA7403B361BD3A6DCE3695CF0EA21AFC15A0C5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 20 Jun 2025 16:02:34 +0000
Certificate not after:    Fri 19 Jun 2026 16:07:34 +0000
Subordinate resources:    AS: 264479
                          IP: 45.165.90.0/23
                          IP: 131.255.120.0/22
                          IP: 138.117.32.0/22
                          IP: 2804:203c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Jun 2025 20:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:de:55:2d:e1:4f:cc:c1:4f:67:df:bf:cf:10:ef:6e:c3:1f:7f:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 20 16:02:34 2025 GMT
            Not After : Jun 19 16:07:34 2026 GMT
        Subject: CN=74FA7403B361BD3A6DCE3695CF0EA21AFC15A0C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e9:b8:47:70:c2:5f:13:df:0b:4b:cc:c4:0e:
                    8f:fe:62:ac:20:cf:24:68:d0:85:0e:0b:2d:59:68:
                    01:fd:93:98:ac:b7:07:44:c8:cc:5b:f2:b9:e2:22:
                    fb:85:f3:77:49:8a:07:e5:f6:a4:4f:a6:7f:51:19:
                    42:81:c5:b3:b9:03:02:4d:fc:5f:ee:29:f7:52:e5:
                    32:30:2f:3a:2b:1a:59:55:e4:9a:da:ff:08:2f:2d:
                    f2:ad:65:ff:09:4d:30:96:87:f9:ba:db:23:c4:17:
                    de:38:f5:41:66:8b:61:70:b5:22:05:88:f5:22:e9:
                    6f:20:68:31:8c:43:12:68:bc:da:7a:95:ee:93:06:
                    d7:1d:d6:c8:65:0b:d1:74:18:45:70:e1:91:eb:44:
                    36:eb:d3:d4:65:fa:cd:29:48:21:18:7d:1e:85:ea:
                    61:4a:6c:55:8e:96:94:a5:78:b9:66:45:b0:b2:28:
                    5b:1e:e0:5c:9b:a4:66:64:42:cf:b7:f5:d7:0e:94:
                    1a:33:e2:23:55:cc:b2:70:00:84:b0:8a:c0:c6:6d:
                    c0:09:18:9b:fa:12:61:7f:5a:27:cb:f7:36:b8:d9:
                    ef:df:df:d1:1d:ca:b1:b5:11:2c:11:14:aa:6a:5d:
                    2f:e6:ec:9e:91:4e:b9:46:40:39:66:fd:0b:72:dd:
                    ad:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                74:FA:74:03:B3:61:BD:3A:6D:CE:36:95:CF:0E:A2:1A:FC:15:A0:C5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/74FA7403B361BD3A6DCE3695CF0EA21AFC15A0C5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.90.0/23
                  131.255.120.0/22
                  138.117.32.0/22
                IPv6:
                  2804:203c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264479

    Signature Algorithm: sha256WithRSAEncryption
         95:1b:75:a4:0a:35:76:e4:05:f1:8c:74:2e:c0:54:a8:93:b4:
         6c:d4:b1:a4:52:b8:e4:72:2e:6c:0b:e4:bf:5c:4f:d3:1c:82:
         a3:9a:4d:9b:80:ad:fc:5e:da:7c:06:61:d5:82:3b:6d:91:43:
         9d:d9:ce:91:71:7f:ca:3c:0a:37:dc:ff:96:07:c4:db:9e:84:
         23:10:de:9d:87:04:0c:83:38:0f:54:bd:c6:39:d9:7d:c2:f7:
         5e:02:95:96:b8:a0:ac:13:f4:d6:38:fc:8c:53:70:e9:92:2d:
         24:49:f0:9d:31:b3:b3:37:39:38:bd:71:d3:bf:b6:ed:6a:48:
         bf:d4:b9:74:73:71:82:02:dd:46:99:b9:40:34:85:b6:0e:89:
         92:94:b2:11:e9:c8:52:e9:c2:db:73:a6:46:e3:94:79:a1:b2:
         f9:30:e5:ac:23:07:4b:97:43:2f:a8:7b:3a:15:22:90:1c:ac:
         60:d6:90:ef:9e:6a:39:7a:f0:df:46:51:5f:e8:e2:e8:12:0b:
         88:d1:c7:66:98:4a:f6:43:15:77:1f:61:77:d5:71:29:74:ad:
         b0:ee:88:2d:a0:08:2f:11:88:60:c2:dd:8e:80:50:7e:b8:88:
         c4:1e:44:e3:eb:83:b7:b7:f0:c4:03:b8:e4:7e:89:f4:f1:71:
         57:9e:1c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 23:31:56 2025 by rpki-client