Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer
File:                     33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer (raw, json)
Hash identifier:          dYqXOHMJ7JSC9ng+LlA7nVVCiAm1a0Yn814ZdHJtglg=
Subject key identifier:   33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       58FCDB3505BF6838862893FBF9C0F5CCFF6E41C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 23:09:28 +0000
Certificate not after:    Fri 06 Mar 2026 23:14:28 +0000
Subordinate resources:    AS: 266584
                          IP: 45.7.116.0/22
                          IP: 2804:3e44::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 01:16:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:fc:db:35:05:bf:68:38:86:28:93:fb:f9:c0:f5:cc:ff:6e:41:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 23:09:28 2025 GMT
            Not After : Mar  6 23:14:28 2026 GMT
        Subject: CN=33F508FEDC25BB4A07EAE9305026C5C6B61952F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:42:1b:0f:a4:62:55:bf:17:b9:a8:88:92:1e:
                    33:70:f9:75:84:57:d1:4e:d2:9d:41:2a:88:8b:c4:
                    cc:58:69:f4:45:a1:d0:80:c3:c3:f9:df:aa:e5:a0:
                    9c:3d:d9:9a:20:3d:3c:8c:49:7f:37:92:b7:82:c4:
                    24:cc:58:8f:23:2b:9f:fe:dd:b9:6f:22:c4:08:3a:
                    f3:a8:21:c9:7e:71:47:50:dc:85:ef:7a:85:52:30:
                    8f:56:99:60:d2:4d:e3:a6:fb:02:93:13:a4:d0:d1:
                    e0:e9:62:b9:6b:50:4f:86:e1:cf:38:2e:09:59:c4:
                    6d:27:fa:a6:fe:da:f0:f9:ee:c4:d4:8e:41:3f:28:
                    26:62:d5:aa:9e:99:da:fb:bf:11:a5:51:5f:74:aa:
                    6c:8a:57:50:d5:2b:90:b0:d4:c5:b2:f4:8b:70:f6:
                    a7:d8:13:98:ba:13:f2:8e:02:ea:3b:3c:48:08:37:
                    78:33:f5:ad:2d:ae:ae:b0:86:94:14:d1:c5:f1:25:
                    21:89:4f:1e:73:9e:13:68:cd:3c:76:19:c0:25:a4:
                    d1:c8:0d:f5:c5:f1:ff:e2:72:3b:ff:ef:52:cc:7d:
                    e5:9a:61:1b:b3:f0:be:af:d8:ff:20:c8:5f:16:d0:
                    10:02:25:b7:76:0a:a6:96:f7:d8:25:ad:64:a8:d3:
                    2a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.116.0/22
                IPv6:
                  2804:3e44::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266584

    Signature Algorithm: sha256WithRSAEncryption
         71:ba:d5:6e:17:a8:80:70:09:84:80:c9:1b:47:29:82:26:93:
         93:aa:aa:f8:c4:4d:12:39:43:e0:d4:b3:10:7e:db:df:5e:aa:
         43:eb:1e:c6:cc:fa:b0:2b:58:13:44:06:bc:9b:7f:00:d8:2b:
         1d:4f:9e:f1:f9:e9:e1:42:a8:55:be:ab:66:d1:52:bd:4b:2b:
         05:79:d8:15:36:7b:54:13:67:3b:da:9d:5b:9b:0e:a9:f4:81:
         e0:dd:ec:04:18:c0:14:4a:50:89:ed:ad:d8:a9:ee:b7:ce:06:
         30:05:7f:49:b1:48:be:7c:73:d0:12:9c:30:23:28:52:17:72:
         85:cf:a2:fa:03:40:9f:6d:38:85:6a:42:4c:75:28:ca:e3:02:
         48:50:e1:8e:ca:f5:5f:f0:48:bc:0a:eb:5c:46:87:36:45:4c:
         24:e5:b1:c5:29:8c:b9:d2:06:ed:2c:73:3f:74:3c:2c:78:f1:
         15:71:f0:2d:4d:2b:82:26:f5:6d:4c:9b:9a:0c:18:47:39:48:
         d8:9c:e4:f9:0e:4a:c0:9d:26:fc:97:cb:96:e1:d1:c1:62:49:
         55:e6:e5:59:72:cb:21:60:e3:44:2f:79:2a:13:e7:70:9f:89:
         5f:f8:fb:ee:30:e9:ae:89:2c:c5:fd:37:09:c2:15:1d:01:2f:
         9b:b1:74:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:00:17 2025 by rpki-client