Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer
File:                     CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer (raw, json)
Hash identifier:          h5YbbjBhFe5hvawA0zA86rBkboQ6pXTQFg4GFGp4zlk=
Subject key identifier:   CA:F8:83:95:E9:97:9E:FF:C0:33:51:30:7D:8C:D0:E5:45:54:BB:DB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       52D8ACCE4153613DC2F06F72846FD6DD06805A9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 20 Jun 2025 20:08:22 +0000
Certificate not after:    Fri 19 Jun 2026 20:13:22 +0000
Subordinate resources:    AS: 270483
                          IP: 200.73.216.0/22
                          IP: 2804:6ca8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Jun 2025 20:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:d8:ac:ce:41:53:61:3d:c2:f0:6f:72:84:6f:d6:dd:06:80:5a:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 20 20:08:22 2025 GMT
            Not After : Jun 19 20:13:22 2026 GMT
        Subject: CN=CAF88395E9979EFFC03351307D8CD0E54554BBDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1c:4c:3e:b6:b7:15:24:1b:79:51:2b:5c:2c:
                    ae:33:32:49:33:f2:21:4f:ab:8e:8a:14:58:1f:06:
                    95:28:49:36:db:d5:8c:20:6e:03:76:76:e9:79:a0:
                    5f:3b:61:26:de:c5:0c:7d:4c:b7:98:4b:08:0f:80:
                    13:8b:96:e7:78:21:ce:a5:f8:f8:af:4b:f2:1b:02:
                    e4:5d:96:60:b4:69:cd:60:76:37:da:36:b6:76:09:
                    74:44:b5:9b:80:79:98:39:1a:ac:e0:59:1c:71:85:
                    d2:ea:8c:a4:5d:c5:a3:ca:e1:e5:cf:1d:3c:53:be:
                    1d:88:a4:25:c2:19:ea:4a:88:bc:87:58:a9:95:0c:
                    ef:10:a5:95:eb:f8:ce:22:5c:e8:a6:68:55:f4:11:
                    cd:9a:33:62:91:7a:50:00:f2:3f:20:41:ef:ec:f7:
                    74:9d:13:02:52:08:6e:62:67:b9:36:ad:a5:4d:a3:
                    b9:d6:00:92:6d:ca:d2:5b:22:f1:64:7a:3d:71:e7:
                    59:bd:88:6e:4d:82:19:06:43:f1:2f:31:2e:92:69:
                    db:64:84:48:ba:86:f5:b5:ce:57:b2:a9:1d:85:7c:
                    54:ab:bd:aa:56:ed:08:98:8a:f3:ad:6b:a7:bd:ca:
                    51:d3:7b:cc:8b:e3:76:c9:5a:e3:30:12:96:9c:db:
                    c0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CA:F8:83:95:E9:97:9E:FF:C0:33:51:30:7D:8C:D0:E5:45:54:BB:DB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.216.0/22
                IPv6:
                  2804:6ca8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270483

    Signature Algorithm: sha256WithRSAEncryption
         03:3f:76:0a:db:08:ce:b8:e2:ed:ee:a7:a9:c7:e8:02:15:8a:
         6a:35:6c:dc:f8:f7:75:bb:6b:59:ea:1e:a4:a3:0b:8e:fd:0b:
         f8:dd:de:61:4f:de:ba:a3:8a:9a:5b:08:12:9b:87:cf:5a:65:
         87:d9:e2:3a:b1:83:d5:86:13:dd:e6:21:8f:70:9a:88:15:5c:
         5f:0e:7d:41:20:63:8b:77:89:67:8e:b2:9e:0a:22:43:34:7d:
         02:01:b3:8b:df:de:97:88:63:33:1e:20:ff:f2:ab:d7:34:98:
         93:1c:79:51:cb:39:35:a1:8e:f8:09:02:b1:2a:91:2f:0a:1b:
         00:28:14:d6:c3:32:16:12:05:60:82:57:bc:88:25:1f:7b:21:
         31:3a:33:b4:7c:60:7f:0d:14:c7:6c:e5:aa:00:47:e5:5e:f2:
         4a:b5:37:3e:ca:3b:04:dd:4b:48:27:6c:f3:76:1f:92:8d:79:
         d3:d1:88:90:4a:71:9f:48:cd:76:1d:4c:70:22:d8:3e:9f:85:
         96:55:9b:e1:75:95:d7:eb:a8:da:e5:f8:97:ad:d7:83:73:20:
         50:30:5b:64:1d:25:bd:c2:d0:30:cd:20:bc:b2:a8:84:91:ef:
         23:2c:ba:07:26:ff:bb:5c:c1:f6:b2:82:43:39:1e:40:09:c8:
         34:95:8d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:00:20 2025 by rpki-client