Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.cer
File:                     2A0183D32B891D785CDF1CC86CFD0AE9460250B1.cer (raw, json)
Hash identifier:          fLRuflEpcfFa2NWZluaYfMR9YD8+WN1cXmclMltnqLU=
Subject key identifier:   2A:01:83:D3:2B:89:1D:78:5C:DF:1C:C8:6C:FD:0A:E9:46:02:50:B1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0A46189659B8DFBEEC2E3DF38702DC99A0E2785F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 14:17:29 +0000
Certificate not after:    Fri 06 Mar 2026 14:22:29 +0000
Subordinate resources:    AS: 270991
                          IP: 187.103.16.0/22
                          IP: 2804:7498::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 04:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:46:18:96:59:b8:df:be:ec:2e:3d:f3:87:02:dc:99:a0:e2:78:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 14:17:29 2025 GMT
            Not After : Mar  6 14:22:29 2026 GMT
        Subject: CN=2A0183D32B891D785CDF1CC86CFD0AE9460250B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:52:85:c1:93:a9:07:ea:41:99:c2:6a:12:ce:
                    a3:fc:75:cd:ae:b9:b1:3d:64:bb:c1:76:ef:bc:d3:
                    e0:a2:95:69:60:01:f4:48:9b:f8:a1:eb:07:54:97:
                    91:43:33:77:87:ce:bd:a8:f7:68:42:98:8b:eb:0a:
                    6f:05:8e:d2:e4:8d:d3:8b:b7:52:60:bf:c0:ae:b7:
                    46:4a:62:96:df:3b:12:a8:7e:11:ec:3a:76:3e:e7:
                    3c:0b:38:77:f4:fa:66:6e:c5:10:53:d0:60:5e:29:
                    fe:17:c6:83:23:57:1a:aa:1f:fa:ec:23:c2:46:ba:
                    ab:58:5a:6e:74:ae:85:89:08:a0:d0:d4:f8:63:dd:
                    41:4c:2a:62:5c:30:9d:5a:49:60:3c:b9:17:e1:87:
                    1c:5e:1c:ee:ea:44:d3:ff:ff:e0:c4:32:45:6a:07:
                    80:5b:e6:3b:6b:ec:14:b6:5a:39:87:03:78:3d:c2:
                    36:5f:62:63:0f:ee:7b:d8:1e:9f:35:31:f7:73:a6:
                    e6:c7:76:9a:47:68:90:0c:24:96:50:15:cd:82:84:
                    e7:9e:30:4a:84:d3:25:21:26:59:1a:93:e2:45:18:
                    ef:2d:6d:8f:e1:12:30:a1:d5:bb:2b:62:0d:96:02:
                    c3:f4:3f:53:f0:33:21:10:55:3d:c1:a2:97:b9:3f:
                    92:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2A:01:83:D3:2B:89:1D:78:5C:DF:1C:C8:6C:FD:0A:E9:46:02:50:B1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.16.0/22
                IPv6:
                  2804:7498::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270991

    Signature Algorithm: sha256WithRSAEncryption
         16:c1:86:ee:fe:a7:97:46:bf:24:b0:bc:aa:6e:c8:88:1f:38:
         28:36:35:86:dd:82:71:7e:ac:9a:de:ee:1c:2c:a6:17:51:c6:
         d4:6e:10:fa:5b:7a:a3:8d:25:28:12:23:99:53:d4:21:72:72:
         0b:e2:a7:71:36:31:ac:7d:ba:69:9c:80:75:6c:6c:76:98:5a:
         0f:f4:9f:45:34:3c:33:04:c2:01:49:18:2a:a4:41:9e:1a:a2:
         09:09:91:3c:89:9e:69:38:a5:79:24:b0:dd:63:de:3e:79:be:
         6a:9c:4a:23:ca:d3:0c:b9:8d:5e:31:f7:3b:7b:a6:bd:6a:7a:
         52:59:1e:a2:73:66:ac:1f:b2:8c:eb:97:13:4f:fc:6f:6f:03:
         67:cb:76:49:a4:98:bd:da:e2:76:34:7c:27:d4:f8:d9:e2:86:
         bc:42:ad:bc:49:87:cf:05:04:44:ae:de:d2:1d:c5:a3:2f:4c:
         45:b0:e2:9f:c8:ed:59:f8:12:6e:73:04:1a:42:ee:e7:cb:e2:
         e9:58:c9:ca:50:52:54:3d:46:95:7b:02:6e:f5:7e:7f:31:d8:
         b0:cb:69:9d:68:3e:03:99:78:4a:6d:64:6f:00:eb:54:c6:b0:
         8d:a5:db:28:eb:8c:60:f8:3f:ff:bc:45:5c:85:96:32:c9:2c:
         03:20:5a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:38:34 2025 by rpki-client