Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.cer
File:                     13CD05239CCE57F514CF78D14C0E06AAAC9E9292.cer (raw, json)
Hash identifier:          asbwGkmckTwZYmF7fGdZrYKWqLoQUM1lOmYB6RkAxGg=
Subject key identifier:   13:CD:05:23:9C:CE:57:F5:14:CF:78:D1:4C:0E:06:AA:AC:9E:92:92
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3A199E528CD262B2BA399E5AB95E5A361A11F4B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7Hvc3XtLTETGYkfNUXzTPFhPzLAJ8uF7bJq4ocLbJCu/0/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7Hvc3XtLTETGYkfNUXzTPFhPzLAJ8uF7bJq4ocLbJCu/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Mar 2025 17:16:21 +0000
Certificate not after:    Tue 24 Mar 2026 17:21:21 +0000
Subordinate resources:    AS: 264557
                          IP: 138.0.164.0/22
                          IP: 2804:217c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 20:36:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:19:9e:52:8c:d2:62:b2:ba:39:9e:5a:b9:5e:5a:36:1a:11:f4:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 25 17:16:21 2025 GMT
            Not After : Mar 24 17:21:21 2026 GMT
        Subject: CN=13CD05239CCE57F514CF78D14C0E06AAAC9E9292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:95:36:71:f1:b5:67:96:84:17:0c:a6:6c:f2:
                    11:48:80:97:e6:17:46:41:e1:04:53:36:a3:f5:9f:
                    18:0c:46:f7:53:29:8b:c0:68:b6:2e:42:6a:f8:2e:
                    43:5f:ad:bd:5f:83:ef:75:35:dc:72:8e:7d:bb:d7:
                    74:71:5d:03:3e:d1:05:bc:9d:95:b6:3c:00:8c:f0:
                    71:1c:fc:94:42:50:68:7f:8d:da:e4:da:b6:95:bf:
                    e4:88:92:da:47:4f:02:37:ba:ad:79:9e:c5:cd:a6:
                    e2:ac:c4:c2:50:5f:68:6c:59:f6:dc:dd:d5:df:96:
                    ab:9d:b6:7c:f1:4f:e3:cd:5d:a2:ac:5e:98:00:12:
                    75:dc:ea:f9:aa:fb:5e:06:0c:fc:d4:6f:05:29:05:
                    07:80:58:14:71:1a:1b:ea:aa:9d:21:b7:c9:05:14:
                    97:5d:97:8e:32:f6:3a:f8:97:2f:8c:6a:cb:61:37:
                    cd:fd:ef:02:39:ba:35:19:09:6f:5e:25:ec:6c:86:
                    ab:63:34:59:99:8c:1d:1d:1e:eb:ba:5f:88:93:50:
                    c8:e0:3d:13:7a:c3:96:dd:0e:98:61:f4:de:c5:f6:
                    cc:03:53:78:cd:64:36:74:d8:d5:60:6a:30:1b:8c:
                    bb:d5:6d:b7:7e:d4:62:95:e1:a9:90:85:14:71:b6:
                    4b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                13:CD:05:23:9C:CE:57:F5:14:CF:78:D1:4C:0E:06:AA:AC:9E:92:92
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7Hvc3XtLTETGYkfNUXzTPFhPzLAJ8uF7bJq4ocLbJCu/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7Hvc3XtLTETGYkfNUXzTPFhPzLAJ8uF7bJq4ocLbJCu/0/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.164.0/22
                IPv6:
                  2804:217c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264557

    Signature Algorithm: sha256WithRSAEncryption
         88:c5:dd:fe:ad:d2:51:6f:f6:9d:df:4e:0a:4b:c6:aa:ac:7c:
         33:95:a3:72:e2:ed:e8:17:d2:f5:e2:23:71:e3:40:d8:96:36:
         b2:44:8c:d0:d8:fa:5c:83:6c:28:b2:1d:a4:60:1a:76:c1:1e:
         29:63:1e:11:3f:06:f7:1e:80:b2:30:7f:92:15:c0:fa:6b:3f:
         ba:a1:89:00:57:7e:75:bb:fe:6e:d8:c4:a0:c2:7e:ad:76:bc:
         5b:32:34:2f:ed:13:69:7a:6e:bb:d2:4e:53:79:64:64:e4:31:
         e7:79:f6:00:e4:09:d9:83:f2:53:c8:03:2f:eb:e7:bf:8c:b9:
         8e:02:49:bb:dc:2c:90:b7:8a:52:80:b4:ca:b8:e7:59:84:e3:
         39:92:45:35:a5:02:13:3b:0d:83:01:4c:37:2f:e3:c4:86:75:
         5e:38:90:14:03:97:5e:9b:c7:89:30:b5:17:0b:24:84:85:b4:
         a6:cd:ae:f5:f1:8a:18:23:a4:65:78:90:fa:8c:8a:98:17:5a:
         07:ef:2c:1b:64:a5:e6:0b:53:3b:ae:cf:3e:4d:bf:9b:2a:2c:
         21:51:5d:e3:45:ac:a2:0b:e3:32:ac:59:f4:e1:b5:ea:ff:ee:
         ea:6d:e1:b5:51:c1:7e:53:19:50:1e:9f:9c:49:fb:8e:cc:34:
         6a:61:e0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:41:02 2025 by rpki-client