Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AF30B745AAAF3F76FC8935B2EB95380C4EE824E7.cer
File:                     AF30B745AAAF3F76FC8935B2EB95380C4EE824E7.cer (raw, json)
Hash identifier:          BdouKkKI2h8TU9J9FJ2ajHOry3D7UwMWDjXXmHwhoF0=
Subject key identifier:   AF:30:B7:45:AA:AF:3F:76:FC:89:35:B2:EB:95:38:0C:4E:E8:24:E7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       29F4748FB598594662EC9939CF4D1D638C0BEF29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/AF30B745AAAF3F76FC8935B2EB95380C4EE824E7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 Sep 2025 20:42:19 +0000
Certificate not after:    Tue 29 Sep 2026 20:47:19 +0000
Subordinate resources:    AS: 52594
                          IP: 177.87.108.0/22
                          IP: 2804:8a04::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 07:33:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f4:74:8f:b5:98:59:46:62:ec:99:39:cf:4d:1d:63:8c:0b:ef:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 30 20:42:19 2025 GMT
            Not After : Sep 29 20:47:19 2026 GMT
        Subject: CN=AF30B745AAAF3F76FC8935B2EB95380C4EE824E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8f:81:72:44:fc:bc:4c:c1:5d:9a:a5:74:25:
                    4b:67:8a:46:11:6d:e8:aa:75:19:f8:70:85:ff:01:
                    bf:ce:67:33:0d:6f:17:3d:9a:1f:c5:b6:66:10:43:
                    cd:f1:31:65:1b:c8:8b:8c:2f:94:8c:97:66:33:81:
                    c6:73:5b:e0:25:7d:76:23:4d:fa:6d:02:b1:43:5a:
                    5b:ad:7c:3e:ae:61:37:a5:44:c0:cd:78:16:7e:d4:
                    08:6f:4b:12:ce:11:85:70:e6:3d:ef:36:8a:3c:2c:
                    5c:d0:e6:3a:68:10:71:21:92:b1:21:71:ff:33:af:
                    23:1d:54:ea:4d:cc:a4:32:98:f7:64:40:37:69:b5:
                    33:ca:ef:87:de:50:5f:76:d4:0b:3b:47:02:72:2c:
                    58:b0:b1:2c:f5:02:6c:c2:70:1b:7f:50:d4:3c:07:
                    db:79:2c:cf:73:3d:b1:7d:15:f7:0c:6c:d6:3a:2f:
                    67:52:64:d3:5f:89:70:5b:7e:8d:b1:31:9a:a9:8c:
                    87:8f:ae:60:3a:45:ba:2e:76:33:d6:b0:e4:b7:d2:
                    a1:17:80:9a:e5:77:a7:1b:51:7c:b6:89:29:b9:c9:
                    6f:3b:a8:0b:ad:9a:de:d8:27:d0:3e:90:19:9d:b4:
                    bf:65:a1:1c:1a:1c:9e:b4:6c:0d:20:e9:f6:71:80:
                    b8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AF:30:B7:45:AA:AF:3F:76:FC:89:35:B2:EB:95:38:0C:4E:E8:24:E7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/AF30B745AAAF3F76FC8935B2EB95380C4EE824E7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.108.0/22
                IPv6:
                  2804:8a04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52594

    Signature Algorithm: sha256WithRSAEncryption
         cb:31:b6:cb:e9:b7:07:31:4a:3f:d9:0f:b2:3b:df:2d:ff:59:
         1f:82:78:46:2f:c0:68:42:8f:c6:b1:93:4f:0c:cf:e7:55:d3:
         39:aa:0c:88:13:4c:6d:5a:a0:69:35:49:c9:10:72:ac:fc:62:
         d0:3a:b1:b0:8c:15:ed:45:f0:f5:65:ec:c6:be:fd:98:cf:60:
         fd:bd:d2:6f:c7:fb:c4:85:1f:2e:8e:c7:41:89:fc:e9:7a:31:
         45:a1:32:8d:68:72:cc:fd:e1:d5:46:0a:b7:60:cc:f3:31:00:
         50:37:b1:68:f9:6d:68:f8:2e:b9:e6:a6:90:f5:c0:bf:a6:58:
         8b:b4:d0:75:f1:bc:a5:69:c0:d1:01:69:c1:e7:ed:08:2b:a1:
         40:9c:d3:91:89:a6:7f:0e:1d:81:63:d8:c0:57:68:76:64:87:
         15:f5:ff:c4:eb:80:63:bd:3b:55:2e:f3:41:4d:ce:70:f5:f0:
         20:ae:76:a1:9c:25:be:01:0c:d8:90:e7:30:d0:a0:18:eb:dd:
         af:6e:65:cb:f3:85:ae:d4:60:6f:30:78:1d:8f:6e:02:3c:6e:
         c6:04:7f:98:f9:da:bd:3a:33:2e:cb:5c:bf:04:f4:ff:be:96:
         bd:b5:ee:cd:d8:01:f4:c7:e0:2f:74:1d:85:ee:d2:c4:02:51:
         d1:69:1b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:04:11 2025 by rpki-client