Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CC703E0228D3E2591CD7B21A9C27F1542E0DBD09.cer
File:                     CC703E0228D3E2591CD7B21A9C27F1542E0DBD09.cer (raw, json)
Hash identifier:          7wqtn+NNnrlXM3cpAllLoLGGSILgc7pG9KNhsKvWc0A=
Subject key identifier:   CC:70:3E:02:28:D3:E2:59:1C:D7:B2:1A:9C:27:F1:54:2E:0D:BD:09
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2EE452011466B473190F14698626AF42C142D950
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/0/CC703E0228D3E2591CD7B21A9C27F1542E0DBD09.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 27 Jun 2025 19:18:29 +0000
Certificate not after:    Fri 26 Jun 2026 19:23:29 +0000
Subordinate resources:    AS: 267055
                          IP: 45.227.76.0/22
                          IP: 2804:4774::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 02:28:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:e4:52:01:14:66:b4:73:19:0f:14:69:86:26:af:42:c1:42:d9:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 27 19:18:29 2025 GMT
            Not After : Jun 26 19:23:29 2026 GMT
        Subject: CN=CC703E0228D3E2591CD7B21A9C27F1542E0DBD09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:57:f8:66:f2:db:b3:b9:68:9b:54:94:fe:2c:
                    b0:2d:d5:05:6c:aa:ea:f3:6f:a2:39:af:1f:cc:b8:
                    fa:09:7c:24:07:4b:95:26:27:26:11:3b:52:24:f4:
                    bc:67:ca:4e:85:d4:21:e7:d9:10:f3:75:2e:5a:7c:
                    15:c9:70:67:0b:fc:bb:30:12:a9:dd:78:8c:26:d2:
                    27:fa:7e:60:f1:a7:c0:fa:12:c4:f2:1b:3e:72:8f:
                    fa:57:bf:60:9e:07:93:ad:bd:03:ea:d3:89:58:d4:
                    ee:63:90:1e:fe:b2:06:1a:75:5d:17:ea:46:68:28:
                    5e:28:56:b8:e5:3b:7b:ee:8d:b0:e7:9e:77:60:2c:
                    bf:25:9a:be:3a:45:dd:ff:50:b1:1c:85:26:6a:39:
                    4a:a7:2b:f3:61:df:c3:a7:5a:15:7b:b6:5d:8b:f8:
                    b8:51:8b:9d:a6:53:01:b0:0a:a8:a7:f3:1f:eb:62:
                    e1:59:65:ba:88:8d:7d:93:88:9e:d8:62:d8:85:89:
                    50:6c:49:8b:18:26:41:ef:d3:3d:85:9f:e4:e4:45:
                    9c:3c:25:bc:7c:c4:87:c2:fd:07:e6:18:0d:73:1a:
                    42:2e:6b:3f:c0:fa:3b:ea:b1:7f:da:33:34:f4:3d:
                    2c:d5:a8:40:92:19:92:65:ba:b5:f2:30:0b:14:50:
                    30:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CC:70:3E:02:28:D3:E2:59:1C:D7:B2:1A:9C:27:F1:54:2E:0D:BD:09
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/0/CC703E0228D3E2591CD7B21A9C27F1542E0DBD09.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.76.0/22
                IPv6:
                  2804:4774::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267055

    Signature Algorithm: sha256WithRSAEncryption
         03:1a:24:1d:fe:97:9a:17:f9:40:86:cb:7f:59:e9:79:6c:f6:
         27:4b:b5:a3:92:6c:cd:b1:64:ba:50:e9:8d:a4:72:cb:e1:e3:
         3d:fe:f0:27:e7:b2:98:02:13:dd:61:78:62:45:7c:51:e1:53:
         a4:d4:08:6a:ca:99:29:74:39:0e:d2:73:f0:71:ee:2c:93:eb:
         97:57:14:93:b0:e6:11:06:cc:a4:da:37:18:cf:2a:ca:52:43:
         17:f8:6f:13:25:ba:88:d2:4f:c3:f1:c5:aa:c7:2e:47:49:37:
         33:7d:71:84:57:03:e5:41:ae:82:11:4e:c6:d9:32:ed:e6:b5:
         6a:5b:cc:13:68:a3:be:07:b2:78:0a:4f:18:4b:4b:29:5f:49:
         fd:f7:f4:ff:27:93:5a:9b:78:64:4b:59:61:a4:64:52:c0:56:
         0e:6a:46:9d:f2:8a:32:72:a0:9b:65:82:6f:b2:27:a3:e7:c6:
         3a:6f:ce:5e:8c:67:8f:bc:37:73:f4:c5:47:4b:56:92:61:27:
         d9:c1:ca:2c:02:ce:0c:42:07:10:b0:12:cb:cf:6b:fc:a3:6a:
         08:74:aa:65:1e:68:6b:c7:2f:05:c6:60:cc:5f:5f:95:54:17:
         db:42:f3:16:4a:75:2f:5f:c6:85:c4:69:43:0a:b4:4d:fa:ec:
         c2:ca:dd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 06:50:12 2025 by rpki-client