Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.cer
File:                     C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.cer (raw, json)
Hash identifier:          8i5p0pmdWKAfp334xg5m3yYNpR+oee+OUtH0XDYdtT4=
Subject key identifier:   C7:C5:FB:EC:3A:54:3A:98:78:99:FE:A8:6B:4E:C6:8B:B3:B7:85:C6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3EA18C76AA6EB287298114D4E909646F9307F085
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 07 Jul 2025 16:46:52 +0000
Certificate not after:    Mon 06 Jul 2026 16:51:52 +0000
Subordinate resources:    AS: 52898
                          IP: 168.227.156.0/22
                          IP: 177.184.64.0/20
                          IP: 2804:a9c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 17:47:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a1:8c:76:aa:6e:b2:87:29:81:14:d4:e9:09:64:6f:93:07:f0:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  7 16:46:52 2025 GMT
            Not After : Jul  6 16:51:52 2026 GMT
        Subject: CN=C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1e:49:d3:2c:59:7f:0b:20:c7:b8:7e:da:ff:
                    2d:10:32:15:84:92:3d:13:4e:cf:f3:ca:f1:26:a7:
                    b9:20:1c:de:9c:18:60:46:63:5a:1c:1e:33:06:b9:
                    f8:35:fd:a2:8f:30:bf:a1:0d:0d:62:02:7d:6c:66:
                    eb:16:17:9b:b4:dc:50:85:ce:64:bc:5a:a2:0e:e0:
                    09:22:85:f7:92:1e:16:e6:4b:c4:9f:b2:dd:ae:ce:
                    0e:98:67:7d:83:4a:12:0f:b9:06:a9:dd:31:85:04:
                    1c:0c:a1:6d:e6:aa:bc:03:62:34:2c:f8:bb:97:be:
                    d8:e5:42:10:2a:c4:05:7d:b0:fd:ab:68:bf:d2:0e:
                    56:8a:ec:9b:78:eb:d4:59:97:93:f1:5a:99:1c:36:
                    00:47:94:b1:cf:fa:86:f4:60:00:b2:ab:d3:c0:74:
                    aa:af:30:ac:46:73:1b:d5:f5:f2:36:7b:c5:57:75:
                    80:bc:b3:69:32:a9:8d:f6:83:bc:de:e8:2c:bf:1f:
                    c2:f8:c1:3a:55:38:3e:4a:22:db:84:38:6c:bc:e9:
                    29:53:a5:b0:c3:0b:42:45:d4:4c:32:30:9f:73:68:
                    c0:de:a1:d9:a2:6d:82:52:d2:46:1d:f0:77:64:58:
                    35:35:bf:5a:7e:99:23:b6:2a:30:fe:b2:56:29:02:
                    67:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C7:C5:FB:EC:3A:54:3A:98:78:99:FE:A8:6B:4E:C6:8B:B3:B7:85:C6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.156.0/22
                  177.184.64.0/20
                IPv6:
                  2804:a9c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52898

    Signature Algorithm: sha256WithRSAEncryption
         58:ce:50:66:be:65:57:7f:f4:90:c2:7f:aa:7b:40:5b:af:4e:
         ad:d2:2a:f4:64:ca:dd:53:5f:18:3b:fe:fd:7f:4a:c7:38:99:
         18:53:ee:3c:35:ce:cc:5e:a0:c8:bf:71:60:9b:1f:bd:f9:2d:
         0a:40:95:26:cc:0e:e3:ab:d4:f5:7d:fa:72:57:cd:f4:e8:e9:
         c4:84:d7:a7:b3:4c:9b:98:f4:59:82:5f:58:c1:e8:7d:a2:88:
         f3:05:a6:c1:69:5d:bd:4b:6e:ca:19:29:04:04:f6:78:a2:a9:
         85:24:0c:86:d4:d9:96:ab:52:69:69:85:cf:b7:3e:bd:ca:41:
         c6:2f:c5:bc:a5:5f:7a:c5:8d:27:68:27:91:4f:b3:46:30:25:
         72:88:8f:f5:5a:10:03:f1:b5:3c:0c:60:de:a6:0e:e5:2c:c8:
         9f:60:7c:0c:8c:d6:36:28:e5:13:6b:bf:f1:55:4e:c0:76:18:
         e7:44:a4:6a:2f:87:bd:d8:81:c8:83:1a:e8:56:b9:cc:df:36:
         10:a4:a7:ae:35:c2:f0:13:aa:a2:30:c2:a9:a9:79:01:e4:08:
         15:41:e1:10:1e:89:7e:25:c6:ce:52:e9:af:67:b2:2e:ec:27:
         05:81:5d:ec:f2:a7:42:81:8a:48:94:01:9e:2a:fe:6c:12:c2:
         36:05:3c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 16:21:46 2025 by rpki-client