Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/25EDB6C3E464C5AB7F8A83569425555FE9A89E2C.cer
File:                     25EDB6C3E464C5AB7F8A83569425555FE9A89E2C.cer (raw, json)
Hash identifier:          hNM3iCVVFReE762ARTFn+9OvS4+QfRyNilkHt8xqpo0=
Subject key identifier:   25:ED:B6:C3:E4:64:C5:AB:7F:8A:83:56:94:25:55:5F:E9:A8:9E:2C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6880C84F80175C59571D7E75969CE6CAF2BF3D38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/1/25EDB6C3E464C5AB7F8A83569425555FE9A89E2C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 12:53:02 +0000
Certificate not after:    Thu 03 Apr 2025 12:58:02 +0000
Subordinate resources:    AS: 264998
                          IP: 170.84.156.0/22
                          IP: 2804:312c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 01:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:80:c8:4f:80:17:5c:59:57:1d:7e:75:96:9c:e6:ca:f2:bf:3d:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 12:53:02 2024 GMT
            Not After : Apr  3 12:58:02 2025 GMT
        Subject: CN=25EDB6C3E464C5AB7F8A83569425555FE9A89E2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e3:39:45:29:2a:9c:d4:c1:cd:c6:59:31:50:
                    19:57:90:14:98:29:67:71:23:3d:f5:bc:39:48:ad:
                    fc:64:2b:d0:56:59:dc:dc:0b:74:b5:db:cb:cc:29:
                    8e:26:86:d3:05:8d:85:fd:97:2d:38:17:b4:d9:73:
                    89:a8:88:fa:56:ef:9c:f5:17:8d:6d:2e:8d:1f:28:
                    51:e4:4a:1b:f9:40:22:cc:ec:af:d1:71:73:61:92:
                    63:94:19:58:3d:ee:1c:cc:d5:ed:89:2f:7a:a9:54:
                    7a:3f:60:dd:5a:49:28:77:a2:da:af:97:89:d4:ac:
                    e9:93:f0:98:e2:49:02:e6:e9:1c:ec:df:bd:14:ea:
                    6f:62:57:ad:db:05:93:8c:7d:da:d7:ce:b2:d2:cb:
                    68:9d:9b:3b:c7:ee:08:2f:b2:36:a4:f0:24:dc:f8:
                    58:68:4f:36:89:bf:eb:d9:66:93:0b:d6:2e:71:7e:
                    c7:58:fa:b1:1e:13:85:72:d4:0d:d3:a9:0d:92:b5:
                    cb:2e:29:16:4f:92:cc:16:a4:4c:5c:55:a3:1e:a1:
                    63:4d:34:1b:7a:0c:03:7a:97:75:7a:e0:9d:38:e4:
                    cb:96:74:44:4a:80:34:97:15:a3:14:50:b4:dc:bf:
                    5a:87:bf:48:12:06:9f:b9:18:e8:47:b4:d9:3f:df:
                    a7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                25:ED:B6:C3:E4:64:C5:AB:7F:8A:83:56:94:25:55:5F:E9:A8:9E:2C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/1/25EDB6C3E464C5AB7F8A83569425555FE9A89E2C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.156.0/22
                IPv6:
                  2804:312c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264998

    Signature Algorithm: sha256WithRSAEncryption
         11:2a:58:56:f8:88:2c:ae:be:87:d1:f0:80:8b:45:cb:dd:b9:
         41:a2:e4:67:0e:10:30:90:f5:07:30:72:81:b2:ac:7b:00:ce:
         c8:90:da:92:e6:5f:2e:ba:6c:81:2a:33:73:ac:27:82:6b:e6:
         d0:ce:89:e9:49:02:26:a0:ee:f4:ea:a3:c9:7f:4e:a5:07:46:
         43:be:50:4f:c5:a5:9f:8e:7d:b5:db:95:16:dc:2c:f7:87:db:
         2b:da:fd:7b:99:65:83:f5:a3:34:52:4d:8c:80:91:85:f6:7d:
         31:dd:61:f0:23:3e:a0:d2:d8:2f:47:d6:05:a2:9f:8a:4c:fb:
         9c:0c:fc:ad:2b:bd:ba:92:38:20:91:df:65:fb:b8:65:28:47:
         e9:fe:21:44:37:83:c2:e4:79:f4:b6:b1:5d:8e:d4:90:51:40:
         92:13:ab:c3:d0:b5:60:e9:75:b4:8f:f3:56:fe:31:b1:54:16:
         9e:80:ce:92:a6:2f:07:88:63:85:14:36:96:ce:74:aa:8d:30:
         9b:09:6f:c7:c9:e2:35:87:2f:d5:16:83:8d:78:32:50:34:8f:
         52:ed:77:c0:41:b8:35:c7:00:9f:7c:07:3d:51:ed:99:25:f3:
         46:63:c9:72:21:2f:74:7a:da:07:6b:0c:2d:54:1c:b5:0d:e6:
         19:44:c8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 00:54:56 2024 by rpki-client on console-fra.rpki-client.org