Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.cer
File:                     1264AC4645C5D468F6F578F2BECD4FAA697E7333.cer (raw, json)
Hash identifier:          uBVgdgBTI4bro000hNVQm89JoGPB1aHT8svA9yi3iMw=
Subject key identifier:   12:64:AC:46:45:C5:D4:68:F6:F5:78:F2:BE:CD:4F:AA:69:7E:73:33
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       11B0EA230035995F60A794F2E2E5C9B084037ADD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 22:15:47 +0000
Certificate not after:    Thu 05 Mar 2026 22:20:47 +0000
Subordinate resources:    AS: 267020
                          IP: 45.226.96.0/22
                          IP: 2804:46ec::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 04:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:b0:ea:23:00:35:99:5f:60:a7:94:f2:e2:e5:c9:b0:84:03:7a:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 22:15:47 2025 GMT
            Not After : Mar  5 22:20:47 2026 GMT
        Subject: CN=1264AC4645C5D468F6F578F2BECD4FAA697E7333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d5:78:e0:4d:f8:e3:8e:87:ad:b3:be:7e:99:
                    a6:88:c0:02:dc:d0:dd:ea:2c:c3:54:b9:54:c3:0b:
                    b3:ab:a8:29:84:98:f4:2e:7b:ae:a3:aa:9a:57:1e:
                    af:ad:47:a6:7e:f3:c9:4e:0f:49:ec:0e:73:ef:94:
                    b3:53:05:17:fb:8a:c3:1e:c6:23:eb:97:2e:0c:7a:
                    df:8a:18:ff:35:68:6c:14:6c:03:3b:1e:14:de:12:
                    59:54:8a:94:02:a9:c2:a4:c2:78:18:d0:3f:77:6d:
                    a8:bf:96:8b:bd:9d:eb:b9:17:3b:6a:86:59:84:5e:
                    9a:04:e4:f5:90:33:47:1c:4d:da:68:8c:30:c7:b2:
                    ea:9b:d9:31:a0:a1:60:42:a3:cf:01:cf:32:9a:a9:
                    a1:1f:88:19:45:1a:f5:2b:20:22:ed:56:4e:58:6b:
                    9e:78:15:5b:61:fb:5f:9b:5f:3b:c6:57:1f:2f:f6:
                    39:9a:a9:25:d1:9f:52:53:b7:46:3d:c4:a6:47:a0:
                    b4:ab:c7:9e:05:9f:34:e1:26:5a:b0:36:3d:28:4d:
                    34:8e:6b:4a:d0:1f:80:19:79:e1:08:10:a3:47:7e:
                    97:06:e4:2d:c5:43:18:05:99:a5:5c:0f:d8:ad:1a:
                    ce:45:64:48:49:75:7a:bd:fb:d5:b0:2d:6d:52:1c:
                    cc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                12:64:AC:46:45:C5:D4:68:F6:F5:78:F2:BE:CD:4F:AA:69:7E:73:33
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.96.0/22
                IPv6:
                  2804:46ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267020

    Signature Algorithm: sha256WithRSAEncryption
         06:7f:27:b0:1b:b1:47:cf:ca:6f:11:6b:18:20:4c:24:a6:59:
         99:46:8b:81:15:f1:76:0a:f2:98:12:45:0a:03:13:d1:84:7b:
         c0:05:9a:cd:10:b1:fb:59:5a:78:4e:4a:72:58:28:e8:80:03:
         b1:c8:5c:7d:54:c3:5d:c2:9e:34:ba:b2:97:5c:01:c2:b0:cf:
         21:d6:35:73:37:e9:c9:92:36:62:60:43:f4:35:c8:49:e4:58:
         38:2f:c0:27:d5:84:79:72:17:df:17:37:7d:67:9b:d8:02:be:
         7c:a1:68:a9:04:2d:e4:40:44:f9:75:fc:25:6f:5e:fd:d5:33:
         5d:4a:1d:41:67:14:ce:bd:41:5a:b0:85:6d:59:5e:6d:5b:86:
         27:fd:d2:03:da:b8:2b:09:ca:d2:12:ca:5e:9a:20:72:6e:8f:
         4a:e0:4f:ca:49:02:ae:a9:a8:f2:e9:6b:2e:c3:a0:70:f2:62:
         a2:c8:76:cf:5f:0c:aa:00:c5:8b:45:9c:8e:14:6a:08:89:53:
         3d:bd:47:e5:29:e1:f1:71:98:bb:ea:12:f6:13:75:6d:f3:a9:
         cf:ac:58:dd:6a:ab:6c:1e:30:1f:a2:89:ec:b3:ec:52:c0:5e:
         22:0b:8a:8a:c7:e7:c8:a8:83:28:ed:12:1d:7e:df:a7:72:f9:
         35:5c:48:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:43:45 2025 by rpki-client