Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/36396C7C03A2D794B22FA865D7FB6C2020887E26.cer
File:                     36396C7C03A2D794B22FA865D7FB6C2020887E26.cer (raw, json)
Hash identifier:          e1HTFZpDct/RhY/EGJfm9dhTKvEOhDzeBRXBDORKmvw=
Subject key identifier:   36:39:6C:7C:03:A2:D7:94:B2:2F:A8:65:D7:FB:6C:20:20:88:7E:26
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5EE8E5C844763D2E3033C7CD616199502BB079C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/0/36396C7C03A2D794B22FA865D7FB6C2020887E26.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 10 Mar 2025 20:26:10 +0000
Certificate not after:    Mon 09 Mar 2026 20:31:10 +0000
Subordinate resources:    AS: 268224
                          IP: 45.236.64.0/22
                          IP: 2804:4ddc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 04:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:e8:e5:c8:44:76:3d:2e:30:33:c7:cd:61:61:99:50:2b:b0:79:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 10 20:26:10 2025 GMT
            Not After : Mar  9 20:31:10 2026 GMT
        Subject: CN=36396C7C03A2D794B22FA865D7FB6C2020887E26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b7:15:2b:27:3b:ff:61:37:54:8c:23:1e:5b:
                    53:16:4b:ae:40:9b:36:e9:9d:cf:60:5c:92:74:57:
                    18:a1:3f:7d:66:59:32:87:37:0e:63:7f:60:5f:a2:
                    f7:2d:cf:80:b4:44:3a:a4:59:7b:66:ea:cd:f2:5b:
                    9b:55:02:1b:de:53:df:33:81:7a:e7:57:39:06:2b:
                    60:64:f6:d9:5e:32:87:4a:1d:be:05:01:02:49:df:
                    79:bf:a7:8a:3c:75:6d:e6:00:c1:53:10:0c:83:d3:
                    69:bf:72:ce:55:30:cd:d7:d8:e5:5b:48:27:15:8f:
                    c5:52:d6:d2:41:25:28:1c:0c:f4:d7:b1:26:2c:70:
                    35:ce:ec:ea:80:f6:48:1b:df:0e:b7:65:ae:32:19:
                    4c:96:2d:33:25:e1:cf:b9:4c:b9:db:99:38:4c:28:
                    08:e3:60:95:9e:61:71:95:e1:59:e6:3a:35:6f:4b:
                    78:8f:3f:24:55:f6:07:b7:31:b0:09:cf:dc:e3:e0:
                    37:d8:cd:1b:b8:66:66:d4:d0:2b:b2:f6:73:01:20:
                    24:ac:e2:b4:2b:9d:c2:54:ea:b6:b4:9e:36:5f:bb:
                    e6:97:65:f5:c2:a4:0f:6d:bf:02:e5:02:09:42:92:
                    c2:c7:21:91:8e:5b:56:ab:a4:1f:ef:e0:56:0d:77:
                    ea:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                36:39:6C:7C:03:A2:D7:94:B2:2F:A8:65:D7:FB:6C:20:20:88:7E:26
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/0/36396C7C03A2D794B22FA865D7FB6C2020887E26.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.64.0/22
                IPv6:
                  2804:4ddc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268224

    Signature Algorithm: sha256WithRSAEncryption
         be:68:ff:60:e4:53:5d:48:4d:9b:cd:8e:89:1e:11:e5:92:1f:
         98:40:4d:c8:86:e4:cb:59:ee:af:61:29:15:4d:84:9c:7d:35:
         95:98:8f:7b:97:1a:12:3a:3b:8d:02:32:f8:f6:0f:72:f3:c4:
         37:87:d2:58:77:23:4a:d5:ad:d7:7b:60:e1:1d:67:4f:1f:c2:
         fd:33:e3:43:0e:b9:8c:39:f0:02:75:e4:32:0f:85:59:6a:8b:
         0a:cb:80:66:c9:78:f7:f3:77:25:4f:4d:a0:96:29:be:b3:0e:
         0b:b5:77:51:6a:ae:6e:ee:fe:91:c0:6b:79:c6:19:5e:c7:48:
         a0:e8:02:fb:60:c3:3d:25:24:b2:68:2d:be:9d:52:39:9d:55:
         45:12:b0:c6:f8:36:1c:0a:f2:35:d6:74:f7:1b:11:fa:18:98:
         79:fb:67:e5:2c:67:48:e6:22:50:a1:2a:da:8e:aa:ef:72:23:
         c8:62:ee:6d:ab:7f:3c:0b:dc:82:19:df:e3:f7:d7:f5:c0:f0:
         14:13:e7:36:2b:3e:8f:9e:db:f4:29:1d:56:cb:e4:43:e4:5b:
         2f:6e:98:04:5e:46:e8:95:a5:7e:78:43:a1:f3:ac:86:7f:cd:
         d5:30:e0:3d:c4:e2:fb:d6:70:b2:eb:d4:67:52:80:8d:60:97:
         96:12:c8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:47:27 2025 by rpki-client