Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/28542F5ACD485BC6F699A30F45B064F48B14B25D.cer
File:                     28542F5ACD485BC6F699A30F45B064F48B14B25D.cer (raw, json)
Hash identifier:          EaRrnV+IOUsYwPtw984mWF6qlKldAtf5ST0CvknjItU=
Subject key identifier:   28:54:2F:5A:CD:48:5B:C6:F6:99:A3:0F:45:B0:64:F4:8B:14:B2:5D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5B95642D1E0E84F9DAE39F357EBF8210B931632E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/28542F5ACD485BC6F699A30F45B064F48B14B25D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 12 May 2025 14:58:31 +0000
Certificate not after:    Mon 11 May 2026 15:03:31 +0000
Subordinate resources:    AS: 264023
                          IP: 143.0.252.0/22
                          IP: 2804:2994::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 00:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:95:64:2d:1e:0e:84:f9:da:e3:9f:35:7e:bf:82:10:b9:31:63:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 12 14:58:31 2025 GMT
            Not After : May 11 15:03:31 2026 GMT
        Subject: CN=28542F5ACD485BC6F699A30F45B064F48B14B25D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:42:03:3a:20:f4:37:59:64:1c:99:f2:3d:1e:
                    c0:c9:74:ba:1f:b3:05:85:dd:55:04:fc:cf:8c:28:
                    01:47:a3:5d:03:d6:40:5a:0f:b2:59:51:e0:d1:d4:
                    f6:af:54:87:94:85:39:61:e6:5b:ec:7a:ce:23:5e:
                    e6:0f:18:a9:d5:a2:90:21:23:44:a7:61:82:fe:9e:
                    5f:84:81:ad:5c:68:21:61:11:fc:89:aa:19:22:3d:
                    b2:f5:56:26:47:b6:73:40:c6:46:b9:3d:6f:2f:c3:
                    8e:05:7f:98:8b:59:79:e6:ca:db:42:1d:29:52:4c:
                    31:b5:eb:e8:e8:1e:12:cb:72:c8:52:6d:b4:b4:72:
                    8c:e0:dc:4f:51:64:a3:82:ac:b8:c6:ca:23:51:67:
                    ce:ff:5e:3d:12:2d:06:20:3a:59:17:f1:20:62:6b:
                    90:c1:b1:41:2c:2f:2d:26:78:ca:7f:c2:df:45:00:
                    9b:49:7d:28:54:70:03:d0:39:21:5c:d2:61:9e:8b:
                    6c:90:d9:26:04:15:d9:39:55:36:ec:9e:25:e2:80:
                    56:58:ea:f5:13:78:e6:c5:36:4e:3e:c9:4e:e0:7e:
                    4f:1a:1b:a4:f3:96:7f:f2:ac:07:74:7e:c9:c1:e2:
                    e3:67:8c:a7:66:2b:03:68:e9:99:35:b7:63:c4:70:
                    05:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                28:54:2F:5A:CD:48:5B:C6:F6:99:A3:0F:45:B0:64:F4:8B:14:B2:5D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/28542F5ACD485BC6F699A30F45B064F48B14B25D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.252.0/22
                IPv6:
                  2804:2994::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264023

    Signature Algorithm: sha256WithRSAEncryption
         9e:e1:65:a1:8b:35:70:c3:13:32:89:71:c5:52:2f:84:d9:69:
         54:9d:40:48:c2:a2:85:6f:b3:5a:b9:54:79:95:80:dc:ef:63:
         26:7f:45:cf:aa:c5:e1:25:60:31:d4:90:f3:b4:25:d0:59:21:
         6a:44:89:0e:a0:31:34:9b:cf:de:bb:ad:45:53:0a:a7:bc:61:
         f8:d2:cd:4a:44:90:37:a6:06:38:92:38:e3:c2:9e:ab:dc:7d:
         17:01:2f:b3:4f:9f:28:0b:a7:b7:29:a5:cc:a9:6f:94:4f:f5:
         3e:3b:6e:42:cf:dc:ea:de:3d:f2:3f:07:9d:f6:42:33:ff:a7:
         07:0a:c1:c2:87:5a:9e:64:e7:c9:5e:38:7e:20:6f:66:d9:bc:
         e1:9f:c3:10:42:2d:37:30:1f:3f:fb:41:8d:ce:13:5b:17:30:
         21:f4:57:f3:58:7e:85:d6:84:4d:ec:2e:ea:78:53:ca:39:1f:
         fc:3d:f9:e4:f6:c4:2f:d3:b0:eb:0b:7a:cd:df:bf:80:33:88:
         0b:41:d9:53:3e:68:d0:8f:a7:35:4f:48:14:77:f5:3b:c3:ec:
         d5:d0:fa:f7:b6:2c:7f:00:62:79:a0:11:c4:f7:99:45:fa:f4:
         f8:12:c3:b0:f0:5b:fb:87:84:cb:e4:42:2f:9d:19:75:68:f4:
         a1:38:2a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 03:04:41 2025 by rpki-client