Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F45FA96D0B0E0D7BDB9C2E64F4834C234348A16C.cer
File:                     F45FA96D0B0E0D7BDB9C2E64F4834C234348A16C.cer (raw, json)
Hash identifier:          aMRplkOY3VhzYj/K1cjWeN4Zt1gEe1XvwUWCDUZji3k=
Subject key identifier:   F4:5F:A9:6D:0B:0E:0D:7B:DB:9C:2E:64:F4:83:4C:23:43:48:A1:6C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       518998F8970FDBBCF207D7CC37A7A67D9872570E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ALnzPiBEWdycb8GTYYxvMBYBLzRbRoodWNnwJrfTaqqS/1/F45FA96D0B0E0D7BDB9C2E64F4834C234348A16C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ALnzPiBEWdycb8GTYYxvMBYBLzRbRoodWNnwJrfTaqqS/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 04 May 2025 23:32:29 +0000
Certificate not after:    Sun 03 May 2026 23:37:29 +0000
Subordinate resources:    AS: 269663
                          IP: 45.190.156.0/22
                          IP: 2804:67fc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 May 2025 11:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:89:98:f8:97:0f:db:bc:f2:07:d7:cc:37:a7:a6:7d:98:72:57:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  4 23:32:29 2025 GMT
            Not After : May  3 23:37:29 2026 GMT
        Subject: CN=F45FA96D0B0E0D7BDB9C2E64F4834C234348A16C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a2:c8:97:ee:3f:e2:29:b5:93:7f:fb:ca:37:
                    69:96:1f:21:08:ce:9a:37:a9:f7:90:93:dc:a2:11:
                    a7:25:aa:c7:71:d7:35:71:d4:45:9a:5f:8f:fa:56:
                    bc:05:31:73:aa:a6:5d:45:fa:c0:4c:95:7f:a2:64:
                    11:35:e0:6e:cb:69:db:bf:41:cd:3d:d3:cf:82:af:
                    d8:98:39:ee:e8:68:8b:2c:28:d1:f7:88:46:1e:4a:
                    2a:d2:e7:3c:30:9f:01:4a:4b:75:82:1c:d5:ee:6f:
                    96:87:47:42:96:46:10:a0:8b:38:85:1f:78:0e:d4:
                    11:16:56:e3:9f:ac:3e:3b:2e:eb:d8:90:e4:77:1f:
                    1e:7a:c9:bb:10:ec:e5:dd:b3:3a:5a:78:a9:5d:7d:
                    fe:08:44:4a:8b:22:bb:8b:e2:fb:a0:7a:37:1d:85:
                    63:05:fd:cd:44:10:14:ac:87:f8:c5:97:52:60:0a:
                    ac:b4:72:5a:d9:7a:9f:76:5d:de:eb:90:92:b4:e7:
                    05:97:c3:21:35:67:2d:e3:22:98:a0:73:3c:4c:a4:
                    5a:3f:c2:c7:32:42:9e:d5:1f:10:24:0a:60:10:ef:
                    b6:e5:85:c2:48:2b:92:c7:5a:fb:a0:63:04:c8:fc:
                    50:79:e9:4a:cc:2d:a8:cc:1f:b6:50:79:7c:63:71:
                    a2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F4:5F:A9:6D:0B:0E:0D:7B:DB:9C:2E:64:F4:83:4C:23:43:48:A1:6C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ALnzPiBEWdycb8GTYYxvMBYBLzRbRoodWNnwJrfTaqqS/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ALnzPiBEWdycb8GTYYxvMBYBLzRbRoodWNnwJrfTaqqS/1/F45FA96D0B0E0D7BDB9C2E64F4834C234348A16C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.156.0/22
                IPv6:
                  2804:67fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269663

    Signature Algorithm: sha256WithRSAEncryption
         40:af:4c:3d:f9:ce:c2:b5:19:d8:e8:3c:2a:ce:9b:d6:ca:5d:
         a6:95:f9:8f:80:81:c1:3e:d3:98:60:27:ba:35:9e:61:49:ef:
         cd:86:51:21:2d:62:2b:f7:a6:08:6c:33:9c:1f:49:4f:82:3e:
         56:d0:5a:c4:9a:5f:c9:f9:e8:c8:64:ee:1c:88:cf:a9:19:ff:
         d5:73:ff:ab:b0:5c:57:9d:58:3f:90:d7:90:1a:9a:28:88:ae:
         01:8b:38:d8:bf:ea:5b:10:ff:0d:37:2b:18:34:c8:95:fe:d8:
         ab:92:d9:5d:b7:4d:64:8d:79:ad:84:c6:2b:06:de:47:0f:0c:
         91:c0:85:59:c6:92:84:39:05:5a:8b:eb:66:1d:06:bc:0f:da:
         49:6a:0f:d7:15:a6:be:d5:22:10:90:bd:2f:98:ec:6b:fc:9e:
         ff:41:31:8d:83:ef:fe:6e:f9:81:ea:11:c1:f8:0a:d4:9c:36:
         ed:8e:76:b5:1d:8c:a0:a4:69:9c:c1:d9:f3:36:6c:34:03:df:
         af:6e:3b:69:bc:50:a8:4c:52:a6:42:5e:6e:54:5c:76:dc:1d:
         27:79:1c:84:14:26:93:c4:16:16:8c:3a:2b:43:9e:ed:ce:af:
         01:80:a9:e3:53:b7:f0:ec:69:ec:55:5f:15:a8:e2:b5:bd:b1:
         27:45:79:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 11:47:29 2025 by rpki-client