Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/796A68FA93CF85A55F75079A8CE26E4D9CF1EC83.cer
File:                     796A68FA93CF85A55F75079A8CE26E4D9CF1EC83.cer (raw, json)
Hash identifier:          jKA1x2DWn200jo4Wfsijci/527AFwAtgGfIPXir+LNU=
Subject key identifier:   79:6A:68:FA:93:CF:85:A5:5F:75:07:9A:8C:E2:6E:4D:9C:F1:EC:83
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       16A636CC445A8A5DA47B8F445A649D875FD58C5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/796A68FA93CF85A55F75079A8CE26E4D9CF1EC83.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 27 Jun 2025 12:25:25 +0000
Certificate not after:    Fri 26 Jun 2026 12:30:25 +0000
Subordinate resources:    AS: 266021
                          IP: 170.245.36.0/22
                          IP: 2804:3940::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Jun 2025 20:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:a6:36:cc:44:5a:8a:5d:a4:7b:8f:44:5a:64:9d:87:5f:d5:8c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 27 12:25:25 2025 GMT
            Not After : Jun 26 12:30:25 2026 GMT
        Subject: CN=796A68FA93CF85A55F75079A8CE26E4D9CF1EC83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:24:d0:ef:12:76:39:7e:f1:60:5e:ce:14:94:
                    e1:9d:e5:a8:f7:0d:c5:4e:c0:0c:c4:89:e9:59:43:
                    fd:31:ce:96:b6:07:97:fb:29:69:42:b5:74:df:b9:
                    ec:6c:a0:06:85:df:e3:e2:c1:33:aa:e9:fc:3d:b6:
                    f4:67:3a:10:d1:92:d5:fc:5c:c1:6d:35:97:20:0d:
                    43:34:ad:33:fa:fe:f3:af:66:da:43:af:fa:1f:62:
                    43:3f:af:27:9d:ee:c1:65:69:6f:29:42:b0:f3:3e:
                    57:8c:9c:a4:2c:a3:01:d8:5c:e2:0e:09:2f:f3:1e:
                    b1:b2:55:ef:b5:91:ac:0c:36:6a:17:d8:70:07:53:
                    c0:cd:b0:ef:ba:64:9b:3f:b9:0a:d6:ff:0b:5e:1c:
                    9d:4b:b8:06:3a:f1:e7:e6:cf:a6:8a:eb:ed:31:52:
                    46:e7:51:af:ad:8c:ac:af:22:6d:2f:10:c3:a9:bb:
                    17:ae:92:a3:0f:83:69:e6:87:0d:cd:85:15:a3:81:
                    80:a5:09:4f:99:5e:00:d4:c4:07:d6:62:60:2c:61:
                    d9:4e:d1:37:b3:33:fa:ea:bc:2a:7f:77:98:49:9e:
                    2b:f7:7e:61:32:b8:7b:c5:18:63:b2:0f:9d:fc:d7:
                    67:40:4d:08:8f:63:91:0b:73:9e:a1:2d:0a:ae:72:
                    a0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                79:6A:68:FA:93:CF:85:A5:5F:75:07:9A:8C:E2:6E:4D:9C:F1:EC:83
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/796A68FA93CF85A55F75079A8CE26E4D9CF1EC83.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.36.0/22
                IPv6:
                  2804:3940::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266021

    Signature Algorithm: sha256WithRSAEncryption
         80:36:90:cf:f1:ac:3a:fe:5b:29:c7:86:9f:e6:f5:40:55:d4:
         da:39:21:4e:6e:f4:2c:9f:73:e8:c9:ad:b7:86:39:c6:a4:40:
         45:37:12:66:33:00:99:83:c6:e6:82:0d:8a:c4:aa:5a:84:6f:
         1c:39:ad:2b:a2:5f:f7:df:f8:00:26:18:68:ec:b2:fe:fd:e0:
         d4:50:d2:75:fc:b0:88:18:fd:d3:0a:f9:67:c5:25:07:62:28:
         dc:ae:c0:9b:17:89:ac:90:0a:11:aa:09:cd:58:73:d7:19:66:
         f1:16:0d:91:c9:5e:98:b6:56:0f:84:75:0e:34:6c:52:e8:42:
         ca:e0:7f:38:ba:2e:f0:5e:fa:08:01:33:a7:7d:81:48:6c:cf:
         2b:69:ae:41:50:54:86:3f:e0:f5:81:e6:19:e6:16:1c:fa:84:
         0f:04:d6:3f:99:af:4b:51:5f:19:4d:d1:c4:d1:ac:8b:f2:f7:
         34:b6:df:e4:5d:6d:ad:e6:1a:45:77:f9:10:e6:dd:aa:cf:cb:
         1d:ae:f0:6e:02:84:d1:4b:6e:10:bd:5c:ea:dc:8f:b9:68:f6:
         5e:d6:ee:a3:42:af:0f:ee:b9:f0:d3:8f:c0:9b:28:6a:03:8d:
         76:65:ef:e7:79:7d:f2:92:09:f4:f5:79:77:cd:89:0b:a2:27:
         af:05:ee:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 21:32:36 2025 by rpki-client