Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/43B19C9E57D3EDADD315DF0E16760E303285E640.cer
File:                     43B19C9E57D3EDADD315DF0E16760E303285E640.cer (raw, json)
Hash identifier:          Ky2pogfZi7AftbHSWbtMFmuh1/PHHB0Pft1jZdj575k=
Subject key identifier:   43:B1:9C:9E:57:D3:ED:AD:D3:15:DF:0E:16:76:0E:30:32:85:E6:40
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6E67B998D1C8F0D42F0F6FEF5B41506218C6F7C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/43B19C9E57D3EDADD315DF0E16760E303285E640.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 05:38:40 +0000
Certificate not after:    Fri 06 Mar 2026 05:43:40 +0000
Subordinate resources:    AS: 265113
                          IP: 170.254.108.0/22
                          IP: 2804:330c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:67:b9:98:d1:c8:f0:d4:2f:0f:6f:ef:5b:41:50:62:18:c6:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 05:38:40 2025 GMT
            Not After : Mar  6 05:43:40 2026 GMT
        Subject: CN=43B19C9E57D3EDADD315DF0E16760E303285E640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2c:4b:45:4b:1f:8d:0c:6f:99:82:c3:b2:3f:
                    e8:00:5c:f9:c2:7e:bd:ec:af:ba:32:d6:bc:5b:c1:
                    20:1d:16:a9:06:6d:1d:64:74:45:a4:f6:e8:9a:ce:
                    77:86:09:81:b0:a8:d1:3e:26:dc:a9:7a:56:65:07:
                    5b:b7:ef:0c:7d:eb:00:03:6c:4a:43:85:1e:26:f6:
                    98:3c:ce:37:67:23:b8:0a:d8:fc:92:f2:65:e1:9a:
                    a0:73:79:f0:54:15:dc:9e:ba:a9:b2:21:8b:fc:4d:
                    c1:2e:f7:44:dd:3b:d7:cc:76:6f:d4:ad:f3:1d:61:
                    b7:60:70:5d:70:a6:b7:c9:1b:ce:a9:77:fc:f4:a7:
                    c4:c7:c4:8d:97:c8:f2:0d:3a:56:6a:ae:7d:16:d5:
                    93:9b:65:e5:9f:2c:46:67:3f:86:93:3b:db:88:88:
                    01:72:e3:7a:5e:5a:63:85:86:f8:b1:04:eb:d7:2e:
                    7e:ec:a5:1d:77:d8:84:8f:4c:d8:34:0b:a9:ee:d0:
                    60:60:93:3f:b0:2c:eb:54:56:4a:d6:55:5e:7b:d3:
                    1d:64:93:3e:f8:d7:39:85:47:e5:71:1e:f2:ca:be:
                    0d:74:3c:4b:6b:e7:23:f1:23:dd:62:83:27:ea:8c:
                    c6:51:18:75:6a:f5:b4:dd:d4:77:31:d8:f4:d0:8e:
                    ae:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                43:B1:9C:9E:57:D3:ED:AD:D3:15:DF:0E:16:76:0E:30:32:85:E6:40
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/43B19C9E57D3EDADD315DF0E16760E303285E640.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.108.0/22
                IPv6:
                  2804:330c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265113

    Signature Algorithm: sha256WithRSAEncryption
         11:7c:fe:99:47:65:d0:0e:c5:77:69:a3:e8:00:58:8a:5e:7f:
         fb:d8:04:8f:ce:13:24:16:48:14:66:eb:57:03:42:91:9e:d7:
         64:20:57:55:1d:4b:c1:5e:76:c3:c4:de:f8:6e:82:eb:21:a0:
         23:8b:5f:47:7b:71:0d:c3:55:6b:22:9f:bb:6c:df:2e:c9:f1:
         d0:d7:db:9d:79:8f:42:33:5a:8f:b4:5e:f7:e1:bf:e1:7a:70:
         3a:66:1e:14:91:17:ff:58:93:43:1c:83:ef:5a:08:3e:a5:3b:
         8d:bb:92:97:ee:5f:25:51:b5:51:5e:68:0c:a9:be:d9:18:3b:
         5f:48:5c:18:0a:c1:4d:f5:b6:77:c6:a8:b4:83:59:57:b9:15:
         d1:5e:c1:38:b7:ce:9f:df:c2:e7:3e:ad:72:ff:75:05:42:7c:
         73:15:ec:83:c8:f5:8e:5f:b2:67:7f:70:c4:31:71:e4:ce:c0:
         80:e3:69:06:29:61:4c:98:1e:b4:80:31:c4:2a:d4:53:d2:09:
         43:6b:28:24:e4:6a:f2:57:c2:96:26:55:e7:d0:b5:81:36:ae:
         38:ad:39:00:81:46:53:fb:53:ee:f8:ba:dd:34:43:a2:50:b6:
         75:89:74:6f:af:18:f5:d7:a0:b8:5f:6e:40:c1:94:51:f0:5f:
         5c:35:90:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:17:44 2025 by rpki-client