Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C37D443ACE2088B9542008EA9127A8D95802391D.cer
File:                     C37D443ACE2088B9542008EA9127A8D95802391D.cer (raw, json)
Hash identifier:          nO8lxyU4mgaguYOI6sCWN4jLUZg6Uh9PsHbQPAS8q1M=
Subject key identifier:   C3:7D:44:3A:CE:20:88:B9:54:20:08:EA:91:27:A8:D9:58:02:39:1D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       21EA1CD1E919FBB0953077C99F848F37BFD71EE1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/C37D443ACE2088B9542008EA9127A8D95802391D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 15 Sep 2025 20:22:18 +0000
Certificate not after:    Mon 14 Sep 2026 20:27:18 +0000
Subordinate resources:    AS: 269103
                          IP: 45.179.212.0/22
                          IP: 2804:5f7c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ea:1c:d1:e9:19:fb:b0:95:30:77:c9:9f:84:8f:37:bf:d7:1e:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 15 20:22:18 2025 GMT
            Not After : Sep 14 20:27:18 2026 GMT
        Subject: CN=C37D443ACE2088B9542008EA9127A8D95802391D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5c:43:15:41:21:e5:09:8a:1b:00:87:3b:17:
                    ce:b9:bf:d1:04:63:ee:69:d2:44:2b:b8:c3:0c:c5:
                    62:35:e9:73:f8:5e:70:07:d2:85:53:8b:c8:6b:62:
                    b2:d1:0a:35:b6:a3:c9:ff:59:0a:ce:11:73:3f:0d:
                    ff:74:a4:8e:1e:10:5b:ae:88:91:f0:fa:bf:4d:00:
                    23:4f:b2:83:c2:d6:f0:3c:62:f6:fd:d5:55:a1:7e:
                    bc:5c:63:b2:5c:5d:1c:12:72:0e:e6:bf:53:be:c2:
                    6b:fb:df:db:65:5f:bd:74:c2:f7:4f:70:7d:f4:20:
                    8c:90:14:d7:6c:fd:56:21:37:d1:b8:3a:ac:61:6d:
                    64:d8:a4:da:8b:2a:cb:8f:ea:4d:18:b4:5e:82:67:
                    91:46:9e:5a:e1:3b:c8:66:9b:dc:ce:c3:87:85:b0:
                    7e:d9:6d:d4:53:d6:25:b2:21:36:5c:c1:ca:29:2e:
                    f1:df:0c:dd:e6:7a:37:2b:27:53:e5:61:1c:90:7b:
                    a9:3d:06:d1:ca:df:aa:8f:c3:77:ef:eb:ec:be:92:
                    9f:da:f6:28:b6:9a:2a:de:9f:46:62:44:c2:27:b7:
                    37:b3:1f:8c:16:2f:9f:1c:d6:2f:42:77:89:d0:c9:
                    d2:a7:1c:af:e4:b8:32:88:1c:ee:d8:4d:6e:7a:f7:
                    11:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C3:7D:44:3A:CE:20:88:B9:54:20:08:EA:91:27:A8:D9:58:02:39:1D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/C37D443ACE2088B9542008EA9127A8D95802391D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.212.0/22
                IPv6:
                  2804:5f7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269103

    Signature Algorithm: sha256WithRSAEncryption
         63:03:75:85:02:79:ec:fc:d3:a7:18:f4:88:3e:14:fd:04:21:
         58:63:63:c0:17:43:22:5f:a6:9c:a5:0b:9f:71:db:24:37:cb:
         d7:57:76:13:41:47:1f:39:c6:39:ea:4d:31:f6:69:7c:d4:c5:
         cb:4e:2f:af:1e:0f:2b:4e:77:0e:6f:95:b0:f3:ea:df:b8:5a:
         97:62:c3:09:e6:77:89:b2:0c:84:bf:82:14:2e:c6:4c:0e:f1:
         33:33:ff:8a:64:89:c1:11:d4:30:3f:d0:1f:fb:77:e6:c1:58:
         3c:e7:09:e1:e5:87:62:30:38:bd:2b:2f:40:5a:1f:9a:19:e2:
         b5:13:91:7a:ba:48:fb:b6:32:ee:b6:7c:4d:ae:98:9f:3b:79:
         92:6f:33:ac:10:62:de:51:af:a3:bf:0f:64:5c:bc:ca:d2:1a:
         64:67:25:7b:6a:74:4e:56:88:b2:1a:71:f3:99:95:f3:eb:f8:
         e1:62:89:66:ac:a3:9b:b1:c3:64:f4:c5:8c:de:ba:97:7f:ac:
         4b:7d:92:9d:13:c9:05:a7:b5:9d:17:c8:e3:fc:79:81:d9:45:
         4c:c8:f0:81:30:bd:42:4d:7d:0f:39:98:a3:ca:07:e7:63:c1:
         20:2c:98:fd:29:5e:3d:cd:81:c2:8c:a3:fd:89:1c:c1:5b:de:
         4d:da:96:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:51:49 2025 by rpki-client