Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/07E62F47FC2B2973F1DE3D0BAE96308C20E5758C.cer
File:                     07E62F47FC2B2973F1DE3D0BAE96308C20E5758C.cer (raw, json)
Hash identifier:          gK9+kstk/N+nFuUh32AExe0aTq5VL1hc31zTMCz0vV8=
Subject key identifier:   07:E6:2F:47:FC:2B:29:73:F1:DE:3D:0B:AE:96:30:8C:20:E5:75:8C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3F6807DB0C72984AB091CEE9D1E42E0FB908ECB4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5qhpYNimS7SbDyhAb1SRjnBNuseBWPYbZF6eyvine43n/0/07E62F47FC2B2973F1DE3D0BAE96308C20E5758C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5qhpYNimS7SbDyhAb1SRjnBNuseBWPYbZF6eyvine43n/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 23 Jan 2025 19:08:57 +0000
Certificate not after:    Thu 22 Jan 2026 19:13:57 +0000
Subordinate resources:    AS: 269294
                          IP: 45.183.232.0/22
                          IP: 2804:6264::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 22:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:68:07:db:0c:72:98:4a:b0:91:ce:e9:d1:e4:2e:0f:b9:08:ec:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 23 19:08:57 2025 GMT
            Not After : Jan 22 19:13:57 2026 GMT
        Subject: CN=07E62F47FC2B2973F1DE3D0BAE96308C20E5758C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:aa:6e:eb:90:2c:98:a7:f8:de:d8:a3:a0:80:
                    e9:9b:5b:f9:2f:04:9d:a9:75:50:8e:e6:2f:b5:11:
                    1f:75:a2:9f:f8:59:83:81:54:5a:fc:93:d3:13:5d:
                    ab:e3:0a:71:1a:9f:17:2a:4e:c2:3d:05:ad:81:99:
                    47:2f:ed:92:60:0a:b1:63:7f:73:7c:c3:d7:b9:a6:
                    f1:a1:c1:61:75:f0:37:38:c5:bf:54:84:2a:76:37:
                    c5:ec:e2:27:61:ef:d8:8a:e9:d2:57:c3:17:fd:87:
                    45:a3:f2:a9:66:f8:e5:62:7b:4e:4b:a1:e2:a1:aa:
                    b1:cd:b5:81:27:cf:20:d2:ec:06:e2:ed:d7:d6:61:
                    d7:b6:44:0b:e7:17:e8:08:e6:3c:65:8e:02:31:9a:
                    69:67:30:7b:6f:59:81:98:9d:68:9d:55:14:63:02:
                    52:f8:28:cd:7e:96:73:30:0d:7f:8a:b2:39:d4:25:
                    85:ad:d7:b1:48:48:c9:67:07:78:20:c5:66:0f:e0:
                    1b:aa:b9:46:11:b5:1e:09:14:3c:4a:be:65:b2:18:
                    0e:c4:60:39:30:94:a6:5b:3e:de:5b:9b:1f:ea:8e:
                    49:47:e1:a5:8e:25:56:81:ca:d0:f7:8e:b9:90:56:
                    86:b7:2e:42:b0:b3:a5:69:ed:bc:b6:4b:56:4f:0b:
                    02:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                07:E6:2F:47:FC:2B:29:73:F1:DE:3D:0B:AE:96:30:8C:20:E5:75:8C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5qhpYNimS7SbDyhAb1SRjnBNuseBWPYbZF6eyvine43n/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5qhpYNimS7SbDyhAb1SRjnBNuseBWPYbZF6eyvine43n/0/07E62F47FC2B2973F1DE3D0BAE96308C20E5758C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.232.0/22
                IPv6:
                  2804:6264::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269294

    Signature Algorithm: sha256WithRSAEncryption
         b8:6f:cf:71:ca:a7:84:b9:63:a5:ee:00:2c:97:90:30:7c:07:
         8b:40:d0:62:bd:e7:43:3a:a3:28:50:7b:30:06:6c:7e:50:30:
         fb:7e:3c:e4:84:95:5b:fc:00:1d:e5:e5:8f:1d:bd:02:4b:e4:
         66:03:df:d4:50:a2:16:99:97:62:38:c7:bf:91:a9:69:85:f6:
         d2:61:dd:8b:ff:1d:f7:73:6e:8a:8d:95:da:12:f6:96:5d:49:
         ce:a1:fb:b2:40:2e:d7:3d:19:82:39:0d:69:a4:fd:f8:91:2d:
         a9:e1:ba:20:e3:48:65:63:95:50:45:00:e1:43:61:73:02:63:
         08:ea:1a:30:49:2b:1d:52:b5:58:8a:eb:d0:aa:b4:3c:e0:42:
         4d:a0:07:1c:e7:cf:e3:6f:a4:77:1b:5a:0a:e1:fd:96:e8:5e:
         dc:c4:78:88:51:21:42:b8:24:3d:a7:57:65:5c:25:eb:18:3e:
         26:fb:69:ba:d4:19:36:ed:8c:38:d4:35:01:ca:f6:3b:6c:8c:
         00:9a:39:a8:bb:1e:c8:a7:a7:36:62:10:02:1d:ed:b5:f9:66:
         fc:e1:da:dc:5a:00:48:f0:e5:ff:3d:02:4a:83:87:c0:8c:5d:
         61:a2:ec:0a:4f:5d:38:9c:e6:23:32:94:5a:80:ea:86:6f:2f:
         c0:ba:ec:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:49:41 2025 by rpki-client