Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/06349A469EC117DBF7704A58DBFDA72CD102D680.cer
File:                     06349A469EC117DBF7704A58DBFDA72CD102D680.cer (raw, json)
Hash identifier:          rg41EymirkY4wxA/A7dWrtkKBSgyHF12gIX7H+tSGFU=
Subject key identifier:   06:34:9A:46:9E:C1:17:DB:F7:70:4A:58:DB:FD:A7:2C:D1:02:D6:80
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6726E4EC45947F1EBDCFB300A77748F8E1A1A368
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6s1T4cJePUaspW8HK8CBD2eFDvGQxTxzPGAb8DqReJnZ/0/06349A469EC117DBF7704A58DBFDA72CD102D680.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6s1T4cJePUaspW8HK8CBD2eFDvGQxTxzPGAb8DqReJnZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 21 Mar 2025 15:53:34 +0000
Certificate not after:    Fri 20 Mar 2026 15:58:34 +0000
Subordinate resources:    AS: 264337
                          IP: 138.122.148.0/22
                          IP: 2804:2648::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Apr 2025 14:59:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:26:e4:ec:45:94:7f:1e:bd:cf:b3:00:a7:77:48:f8:e1:a1:a3:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 21 15:53:34 2025 GMT
            Not After : Mar 20 15:58:34 2026 GMT
        Subject: CN=06349A469EC117DBF7704A58DBFDA72CD102D680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:28:e1:2c:36:79:dd:e8:b7:4e:48:fb:8f:b7:
                    80:dc:b2:7d:9b:f6:07:08:f4:5e:5c:e8:9b:d1:48:
                    16:8a:16:69:7f:98:dc:a7:51:c9:fc:8d:ea:42:81:
                    d8:1a:07:68:cc:29:8f:47:56:f2:1a:b1:b8:3c:7c:
                    51:14:4e:19:02:26:f8:8a:1f:4e:e1:0e:6f:d4:50:
                    c6:8c:20:5b:d7:a8:74:62:53:2e:a6:1d:d6:74:0f:
                    c8:ab:ee:0e:fa:99:59:7a:81:c5:76:64:d7:76:c1:
                    1b:cc:58:1d:ae:a6:e1:79:37:e7:46:1c:21:0e:d3:
                    49:b9:ec:91:f9:ae:de:23:a0:54:1e:ff:9b:cd:74:
                    26:49:a0:ed:f6:a1:a7:49:65:3d:41:ad:cd:bf:81:
                    49:66:cd:b1:60:f9:3d:c1:33:ad:b1:2f:26:5a:5a:
                    ea:a3:85:38:57:93:46:9d:5b:83:fb:05:7b:ca:ac:
                    6c:5e:8d:77:51:ec:bd:91:60:05:a3:c6:65:ca:d4:
                    ba:d9:f4:b7:84:d6:68:43:a4:e8:3c:b6:27:08:df:
                    e8:51:e4:06:28:e6:98:40:c7:35:a2:92:45:eb:5d:
                    0d:28:68:ae:fa:a2:db:09:b2:8e:55:34:fa:6e:21:
                    a5:c3:67:dd:bb:a6:3e:62:44:74:6e:4d:14:98:f1:
                    11:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                06:34:9A:46:9E:C1:17:DB:F7:70:4A:58:DB:FD:A7:2C:D1:02:D6:80
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6s1T4cJePUaspW8HK8CBD2eFDvGQxTxzPGAb8DqReJnZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6s1T4cJePUaspW8HK8CBD2eFDvGQxTxzPGAb8DqReJnZ/0/06349A469EC117DBF7704A58DBFDA72CD102D680.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.148.0/22
                IPv6:
                  2804:2648::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264337

    Signature Algorithm: sha256WithRSAEncryption
         b2:7b:75:dd:9e:fd:bf:dc:1c:fd:f9:61:85:bf:1a:46:71:fb:
         f9:02:25:b9:40:85:ef:8a:7f:79:ba:ce:f0:ca:3f:6d:39:a9:
         97:02:57:d6:a6:7e:46:b0:56:4d:44:1a:66:66:2e:b0:8a:d7:
         f8:d8:c2:c7:b3:d1:71:a5:f8:59:8c:7e:1a:1e:3f:81:9a:39:
         d4:3e:63:e0:3b:97:97:5b:2c:42:40:44:1d:c9:d7:5d:a6:50:
         9e:be:8f:60:a5:22:ae:c6:f8:07:86:c5:85:19:90:c5:18:01:
         a8:f9:c4:d0:e9:32:88:2a:10:92:9a:9e:25:c6:f4:6d:ae:55:
         d7:3a:39:06:8d:a8:6e:5c:b6:1f:95:0c:81:11:80:96:65:42:
         90:48:40:91:12:05:ee:98:ae:3e:fb:64:8e:16:92:02:07:7d:
         6c:22:b2:21:25:78:1e:2a:10:83:7f:6b:4b:15:ff:a1:fb:69:
         ef:0c:32:9d:cf:60:15:68:93:12:be:29:07:ab:1c:65:a7:a8:
         e3:1d:b7:7f:8d:76:79:02:7a:02:40:94:c6:61:69:90:2b:82:
         be:03:32:81:6e:25:16:d0:26:90:8d:69:3c:ed:a1:3e:2c:1b:
         e7:b7:93:75:b2:33:d4:71:67:b0:f5:21:1f:b6:87:da:1e:f1:
         e0:74:8b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:33:29 2025 by rpki-client