Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1011573AA94A527E7C77C596D7EF50759DCDD62A.cer
File:                     1011573AA94A527E7C77C596D7EF50759DCDD62A.cer (raw, json)
Hash identifier:          MVapUmTifwGqdBkgXWDFP2ulBbbfkUPGYOD7xCKB7xo=
Subject key identifier:   10:11:57:3A:A9:4A:52:7E:7C:77:C5:96:D7:EF:50:75:9D:CD:D6:2A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       17B5E42177378BE3E076E1FCD87AA9EC4F44DB7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C5maKy9ZjPCPUw2PJX7kTL536AhWAkAxwd2yosRageRn/0/1011573AA94A527E7C77C596D7EF50759DCDD62A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C5maKy9ZjPCPUw2PJX7kTL536AhWAkAxwd2yosRageRn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 17 Jun 2025 19:21:58 +0000
Certificate not after:    Tue 16 Jun 2026 19:26:58 +0000
Subordinate resources:    AS: 263015
                          IP: 170.0.212.0/22
                          IP: 170.83.252.0/22
                          IP: 177.137.120.0/21
                          IP: 186.227.176.0/21
                          IP: 2804:14e8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 09:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:b5:e4:21:77:37:8b:e3:e0:76:e1:fc:d8:7a:a9:ec:4f:44:db:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 17 19:21:58 2025 GMT
            Not After : Jun 16 19:26:58 2026 GMT
        Subject: CN=1011573AA94A527E7C77C596D7EF50759DCDD62A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ae:3d:b0:da:26:b0:bc:f3:85:74:b7:60:9d:
                    85:44:4b:ee:d2:e1:05:02:c7:a5:76:37:39:c1:3b:
                    bc:1b:5a:cd:2f:ac:36:14:4f:3f:7f:f3:bd:3b:2f:
                    0b:77:1a:86:89:81:9e:2b:d9:34:a6:62:24:4c:04:
                    ce:84:e8:02:0a:d2:c3:a2:d0:6f:b7:e9:6a:3a:51:
                    44:b1:28:44:3b:48:b2:c1:6f:c6:67:9f:7f:af:f6:
                    ad:87:26:7f:32:f4:a8:4f:60:09:cf:9b:2d:37:df:
                    f9:43:45:ca:37:7d:e1:6f:5d:52:1c:ea:0f:be:af:
                    ff:e6:d8:dd:87:ac:bb:7c:a9:28:4f:39:c4:bd:47:
                    4c:f9:06:d9:63:95:46:ec:20:f6:69:a7:40:0d:7f:
                    6b:97:da:5e:d0:cb:16:42:ef:83:7e:12:3a:0b:69:
                    63:f0:8c:19:6d:70:4e:aa:3e:41:8f:b1:8e:c2:80:
                    97:35:52:d0:0b:5e:0d:ce:56:97:b0:69:fc:2b:84:
                    95:80:db:af:0c:60:ed:aa:6b:9f:e0:d8:f5:48:88:
                    c0:7d:ab:b2:3d:de:22:ba:b1:bf:73:e9:4f:1e:44:
                    c4:e9:ad:de:74:e5:d4:b6:f2:05:59:f3:23:93:12:
                    88:0f:4f:13:e1:64:47:1c:e7:cc:b1:e0:19:08:c9:
                    7d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                10:11:57:3A:A9:4A:52:7E:7C:77:C5:96:D7:EF:50:75:9D:CD:D6:2A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C5maKy9ZjPCPUw2PJX7kTL536AhWAkAxwd2yosRageRn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C5maKy9ZjPCPUw2PJX7kTL536AhWAkAxwd2yosRageRn/0/1011573AA94A527E7C77C596D7EF50759DCDD62A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.212.0/22
                  170.83.252.0/22
                  177.137.120.0/21
                  186.227.176.0/21
                IPv6:
                  2804:14e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263015

    Signature Algorithm: sha256WithRSAEncryption
         04:09:6c:fb:a3:fd:9a:1b:57:1f:da:00:56:84:81:4c:cb:5d:
         4b:c3:cd:d2:81:fd:e5:29:83:6d:b8:fc:17:91:ac:33:8b:f2:
         21:4e:4d:f3:7b:e1:b9:3a:41:e9:6d:b2:91:7d:c5:7f:5a:e4:
         c1:5f:1b:ab:2a:b5:e8:c6:ec:47:b4:57:86:2a:06:e5:0e:86:
         4d:8e:13:a4:df:6e:e0:21:09:03:e0:ae:fc:f4:fb:a3:fb:d1:
         61:82:2b:28:07:55:60:d2:5c:c0:17:1c:e0:00:2d:7d:b6:ba:
         ed:c9:25:32:28:0a:8f:35:91:45:40:c8:a4:33:55:62:5f:a2:
         61:94:73:ee:a2:6b:86:79:95:36:fe:f1:9b:d8:a0:8a:b9:ce:
         41:e7:e6:a0:18:3c:1e:51:bc:38:9c:e0:36:03:64:18:d9:ea:
         3b:8a:d9:f8:cc:45:01:fd:d7:61:e3:17:e6:fb:f5:f7:b0:fb:
         43:53:74:f8:87:5e:8b:a6:5d:02:99:c2:d4:c2:fe:78:b7:87:
         09:5c:ba:58:d2:00:44:0f:96:f3:43:11:32:d4:77:08:27:80:
         15:16:e6:59:b1:7c:35:01:4e:22:15:e1:2f:a9:7f:ea:3d:f2:
         f2:20:a9:17:83:47:23:78:9d:a9:aa:87:53:95:f9:38:1a:30:
         35:ce:24:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 10:01:48 2025 by rpki-client