Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/252608E1AF372BD4691CB17C734D43ADB468E835.cer
File:                     252608E1AF372BD4691CB17C734D43ADB468E835.cer (raw, json)
Hash identifier:          pCmn59697iE0nft45FZHQAGL7aCG8uIoU0AbWQbmRb8=
Subject key identifier:   25:26:08:E1:AF:37:2B:D4:69:1C:B1:7C:73:4D:43:AD:B4:68:E8:35
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6FFFFD8A7BC8EDCD6ADFB4A5F868F5EE3C0BFE62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/252608E1AF372BD4691CB17C734D43ADB468E835.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 26 May 2025 13:53:29 +0000
Certificate not after:    Mon 25 May 2026 13:58:29 +0000
Subordinate resources:    AS: 265342
                          IP: 168.181.172.0/22
                          IP: 2804:2e60::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 14:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ff:fd:8a:7b:c8:ed:cd:6a:df:b4:a5:f8:68:f5:ee:3c:0b:fe:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 26 13:53:29 2025 GMT
            Not After : May 25 13:58:29 2026 GMT
        Subject: CN=252608E1AF372BD4691CB17C734D43ADB468E835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d6:5b:f4:fc:58:ad:67:d0:bd:d3:a1:aa:ca:
                    a2:c4:06:51:74:65:10:c4:91:71:03:49:f7:d9:99:
                    16:b7:80:6a:bd:a9:3a:46:02:1c:2d:53:4b:ba:34:
                    1b:30:48:9a:a0:cc:99:a2:68:84:d0:7a:c2:8a:7b:
                    e5:2c:30:da:3f:e7:e9:e2:d9:97:b5:59:af:93:d9:
                    f2:88:ef:cf:7b:bb:8b:2f:78:58:1d:b4:bb:78:80:
                    fc:67:2b:32:ce:d2:b3:f4:47:87:2c:c3:d4:a0:b8:
                    64:4f:58:71:7a:e2:94:af:a1:45:12:38:fd:71:6d:
                    b4:fb:2c:68:35:26:aa:b9:43:0f:05:a0:c6:e1:99:
                    66:cc:35:b3:2d:af:78:20:f9:6f:23:9d:51:09:55:
                    ad:ed:85:6c:bb:08:d6:05:7b:db:7b:c3:b9:e7:66:
                    a6:b2:2e:85:ac:ff:2a:32:68:4a:6a:95:ed:e5:d6:
                    58:2d:c1:cb:f3:a4:15:21:ec:02:51:fc:1e:6c:8d:
                    5e:12:d5:b2:66:4b:b6:35:25:8d:a3:cb:fe:60:16:
                    61:43:74:f6:9e:84:86:a8:18:21:96:c0:82:89:8e:
                    7f:0f:e8:d4:29:c2:af:15:47:0d:b6:23:68:52:99:
                    20:da:7a:6c:8a:73:13:a7:44:80:82:9a:35:88:26:
                    1b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                25:26:08:E1:AF:37:2B:D4:69:1C:B1:7C:73:4D:43:AD:B4:68:E8:35
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/252608E1AF372BD4691CB17C734D43ADB468E835.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.172.0/22
                IPv6:
                  2804:2e60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265342

    Signature Algorithm: sha256WithRSAEncryption
         78:9f:95:4c:0b:6a:01:cd:28:cc:b6:6b:44:6a:57:bb:62:ff:
         a3:d6:d9:d5:1a:fd:c7:34:ce:83:c6:fd:d7:eb:72:1f:85:eb:
         f3:b3:50:9c:9a:25:21:7f:2a:01:ee:99:e0:a1:39:b7:72:b2:
         a1:0f:b2:a3:76:fc:81:46:e7:05:ad:a8:21:b8:21:23:c0:94:
         b5:33:ed:1c:28:97:ea:50:a1:eb:6c:c4:52:31:3b:cc:d9:7c:
         16:b1:09:f1:61:10:cc:1f:e2:79:9b:17:de:c3:c2:eb:6b:91:
         8f:6f:ab:e3:8b:0f:40:bf:72:de:83:9b:71:bd:ca:d4:22:a6:
         49:82:e8:58:f1:ff:99:18:a5:bb:ea:3d:56:1c:d6:57:be:66:
         da:57:8d:7b:0f:99:b5:0b:fd:5a:00:53:fd:cd:68:fd:36:d7:
         54:a3:33:a5:39:c6:98:9f:a5:18:54:dd:a9:d1:91:66:33:23:
         9b:99:04:16:4c:ae:5e:4e:17:65:f5:58:f3:06:8c:34:0a:fe:
         ac:52:c4:fa:3f:03:4c:f1:b9:6b:70:d5:d2:bb:d0:a9:96:6c:
         b9:25:9f:8b:4d:41:57:0a:65:c5:76:b5:58:64:f8:21:61:9f:
         be:97:6b:46:c4:09:bd:42:fe:60:84:f7:d3:d8:7a:46:f4:06:
         75:30:dc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:33:40 2025 by rpki-client