Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/08D977485835B00780D91B6CA4A1090CDA5D9B10.cer
File:                     08D977485835B00780D91B6CA4A1090CDA5D9B10.cer (raw, json)
Hash identifier:          ulLC/9b4KNEai9Uq6sjfN14skHuYuQ49jnFHE9E89wo=
Subject key identifier:   08:D9:77:48:58:35:B0:07:80:D9:1B:6C:A4:A1:09:0C:DA:5D:9B:10
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4BB78A31E90B1B7D5B3E395530618D11E1528FDD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/1/08D977485835B00780D91B6CA4A1090CDA5D9B10.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 13:23:22 +0000
Certificate not after:    Fri 06 Mar 2026 13:28:22 +0000
Subordinate resources:    AS: 263666
                          IP: 191.241.48.0/22
                          IP: 2804:1140::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Apr 2025 14:59:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b7:8a:31:e9:0b:1b:7d:5b:3e:39:55:30:61:8d:11:e1:52:8f:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 13:23:22 2025 GMT
            Not After : Mar  6 13:28:22 2026 GMT
        Subject: CN=08D977485835B00780D91B6CA4A1090CDA5D9B10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:43:03:e9:84:7a:7e:3f:b9:74:f1:c6:ad:ad:
                    49:2a:c3:58:01:79:8e:1b:89:fd:bc:52:83:65:21:
                    84:5c:6a:b9:a7:07:da:58:0b:1a:3b:fd:c9:c1:0a:
                    57:26:72:47:58:20:d7:19:11:7c:75:f2:b4:4e:c5:
                    e3:f9:53:ce:9d:05:b1:c8:0d:e0:61:ba:79:c0:93:
                    8e:73:8a:ec:41:f5:dd:1b:c8:2c:33:50:25:d5:62:
                    2b:d6:0c:4d:15:30:73:69:98:36:46:4d:6b:6e:d2:
                    e5:d0:ef:71:b6:4d:7c:d9:e1:dd:67:60:34:2a:a2:
                    cf:fe:da:38:88:9e:5f:6b:a8:16:85:ec:b7:f6:0b:
                    31:ca:87:50:80:5d:dc:47:b4:46:33:f1:d8:27:2f:
                    a6:d9:17:38:6f:c1:a7:4d:f9:c0:78:c3:77:36:22:
                    1a:4e:09:01:71:58:f6:f8:bc:cd:41:43:cb:e0:41:
                    c3:93:3b:f1:77:df:9c:43:55:39:f3:40:44:e4:98:
                    8c:d7:56:c2:92:8e:f3:87:cf:20:4e:4b:45:88:56:
                    0c:40:cd:4d:ec:87:4b:61:2e:b4:e5:c8:61:bf:d6:
                    09:2f:fa:11:55:ea:2b:2d:37:ee:26:70:e9:51:6f:
                    39:1e:84:8b:88:ca:c9:cb:30:b0:44:3e:b4:92:48:
                    5c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                08:D9:77:48:58:35:B0:07:80:D9:1B:6C:A4:A1:09:0C:DA:5D:9B:10
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/1/08D977485835B00780D91B6CA4A1090CDA5D9B10.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.48.0/22
                IPv6:
                  2804:1140::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263666

    Signature Algorithm: sha256WithRSAEncryption
         55:e1:65:04:5d:60:98:c3:9f:23:06:42:33:e4:32:82:0d:c0:
         ba:7e:47:77:c0:ad:e2:da:ba:53:94:c6:91:6c:75:14:fd:a6:
         f9:99:59:42:59:64:a8:51:6f:b4:e3:f9:ae:d4:7d:3f:d2:25:
         d8:ca:e8:00:b8:e6:8b:1a:74:c0:71:ee:ef:2f:0f:a6:80:e2:
         a9:36:70:68:d1:74:c4:f8:73:3f:57:8e:f1:4c:25:35:09:f8:
         9c:f9:12:42:e5:a2:68:56:44:e5:e8:98:07:ca:d6:66:11:01:
         ba:a2:8c:4b:68:ba:5b:c9:c8:df:59:a1:ff:0a:5b:54:28:6e:
         99:c1:9d:17:b9:83:1c:e6:6d:c5:9d:0f:82:49:cb:15:81:b3:
         19:18:4d:85:13:ad:39:fb:ed:73:b8:36:fb:a4:e5:fa:f5:ef:
         31:fc:5a:39:4d:7b:c1:a6:19:de:c8:ab:10:31:e3:7c:1f:6b:
         85:65:43:71:37:f4:35:eb:84:c9:ea:0d:b7:d2:e3:09:e1:5f:
         60:12:e1:03:8d:df:3e:4f:25:01:f2:1b:d8:97:9c:b8:bf:73:
         68:1d:b4:89:e9:68:10:1b:c4:aa:83:9d:d1:74:02:5d:34:3e:
         39:1c:1f:11:d7:1a:8c:73:37:95:a5:89:84:aa:e6:03:59:90:
         26:c5:0d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:20:00 2025 by rpki-client