Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/127D7DD3C0CC297D00206CF235FF13CEF978A5E5.cer
File:                     127D7DD3C0CC297D00206CF235FF13CEF978A5E5.cer (raw, json)
Hash identifier:          /cCb/T4rKdLLBlGbxlcEwEo/PqdND9UTaCxQ5KLJwBw=
Subject key identifier:   12:7D:7D:D3:C0:CC:29:7D:00:20:6C:F2:35:FF:13:CE:F9:78:A5:E5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6C1B1A61B456C4AF7975A3587E33B001DE896A63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7sc4NQpqeKmSrgcCumxYQD3DSFceXgcBnsxaGxHyuR5x/1/127D7DD3C0CC297D00206CF235FF13CEF978A5E5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7sc4NQpqeKmSrgcCumxYQD3DSFceXgcBnsxaGxHyuR5x/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:35:07 +0000
Certificate not after:    Wed 04 Mar 2026 18:40:07 +0000
Subordinate resources:    AS: 268548
                          IP: 45.163.40.0/22
                          IP: 2804:52e4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 13:57:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:1b:1a:61:b4:56:c4:af:79:75:a3:58:7e:33:b0:01:de:89:6a:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:35:07 2025 GMT
            Not After : Mar  4 18:40:07 2026 GMT
        Subject: CN=127D7DD3C0CC297D00206CF235FF13CEF978A5E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c5:8f:b2:a0:85:21:97:5f:e5:15:f2:69:ed:
                    f3:6d:e8:b6:6d:19:29:b6:56:6c:d0:ad:55:33:d9:
                    03:78:0a:83:7a:f0:47:5e:e8:af:e5:55:84:eb:fd:
                    f8:ce:04:08:1d:e9:4f:ab:68:7b:cf:c7:5b:d7:b2:
                    73:8d:44:9f:1b:30:19:bb:51:df:af:2a:c3:29:ec:
                    dd:da:be:90:aa:64:d0:60:00:eb:a2:e6:ba:0a:ff:
                    05:db:9f:58:99:50:b2:b1:0d:60:2f:a0:30:28:d7:
                    03:66:9f:a5:b1:3f:a5:a4:77:6f:f7:13:e3:09:3d:
                    87:4d:f8:ab:2c:da:f6:4d:c1:37:fc:50:2f:98:71:
                    d2:60:a9:58:cc:01:d4:b4:a2:5f:fd:a6:a1:05:0e:
                    48:e2:f5:b3:1a:28:50:cf:de:16:e5:f9:98:a7:58:
                    e4:4d:71:4e:8f:27:46:3e:6b:3b:d8:50:e1:38:55:
                    68:9c:74:6e:54:4c:f1:53:e5:65:d7:f6:5b:5c:4b:
                    88:9b:1a:38:b6:06:d6:22:ce:67:2b:a8:a2:65:a0:
                    05:1d:68:e0:e5:b9:a8:7f:5b:f1:1c:ba:d6:6d:de:
                    8e:5a:a7:c9:75:4c:50:9b:e2:da:41:18:6f:b4:5c:
                    7f:d4:93:30:a9:fc:9e:5e:a1:de:ed:78:3e:9e:fe:
                    3c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                12:7D:7D:D3:C0:CC:29:7D:00:20:6C:F2:35:FF:13:CE:F9:78:A5:E5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7sc4NQpqeKmSrgcCumxYQD3DSFceXgcBnsxaGxHyuR5x/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7sc4NQpqeKmSrgcCumxYQD3DSFceXgcBnsxaGxHyuR5x/1/127D7DD3C0CC297D00206CF235FF13CEF978A5E5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.40.0/22
                IPv6:
                  2804:52e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268548

    Signature Algorithm: sha256WithRSAEncryption
         6e:48:1e:f3:96:49:a0:15:66:3a:3b:4f:0d:d9:93:a2:0c:8d:
         3c:08:1a:22:6e:92:51:34:0a:b5:ab:f6:bf:82:d6:68:94:ab:
         cd:12:f3:95:9a:fe:7c:fe:4f:a1:f2:9e:ec:8e:4c:d2:25:82:
         cd:b2:61:9b:72:c3:0f:79:36:c0:5d:ec:7d:8c:48:83:81:c2:
         93:57:2e:eb:92:a5:ea:c8:70:18:16:e8:44:eb:6f:d0:e7:46:
         fd:b5:d2:84:41:55:49:6a:d4:04:69:00:a0:5b:8f:b3:af:bc:
         1a:0d:7e:a8:53:28:0c:80:4a:0f:a2:1a:1e:95:7a:73:b3:2e:
         1c:42:94:66:26:e1:94:c0:dc:08:6b:fe:95:99:58:a3:df:96:
         f8:c1:0b:8b:f1:4b:c8:f8:08:67:99:8c:93:69:63:bc:56:17:
         e8:d2:8a:64:fe:bc:95:67:04:78:77:6b:61:dd:ec:19:e1:6a:
         7c:10:16:b8:aa:80:f2:b5:c5:d1:01:fa:ad:72:d2:c2:26:37:
         f1:71:61:a3:18:78:1f:41:fb:57:4c:92:27:88:1b:1b:43:51:
         6e:cb:94:f7:f2:52:e8:4c:1a:68:60:e7:69:85:4b:dd:15:e3:
         f7:df:34:8c:de:ff:e0:d0:9b:35:15:bf:3b:2f:da:02:91:47:
         b0:0e:9a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:20:55 2025 by rpki-client