Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/47C9379EE2F8BD5DFAD70FB93BFBC9B4F211A271.cer
File:                     47C9379EE2F8BD5DFAD70FB93BFBC9B4F211A271.cer (raw, json)
Hash identifier:          cqgKJotMWLxDnxeaHLU4KXk7JbpczOB0Mj7Ra3PUK1w=
Subject key identifier:   47:C9:37:9E:E2:F8:BD:5D:FA:D7:0F:B9:3B:FB:C9:B4:F2:11:A2:71
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1DAB7FA82A31BD160FE7ADB0487862F1DE476C40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E8caTf6AzNtnjfAVfFGYg5TAp6bQnkQvCk2Z8EPYyUTj/1/47C9379EE2F8BD5DFAD70FB93BFBC9B4F211A271.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E8caTf6AzNtnjfAVfFGYg5TAp6bQnkQvCk2Z8EPYyUTj/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 16:47:52 +0000
Certificate not after:    Fri 06 Mar 2026 16:52:52 +0000
Subordinate resources:    AS: 262540
                          IP: 177.72.32.0/21
                          IP: 2804:5c4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 22:51:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ab:7f:a8:2a:31:bd:16:0f:e7:ad:b0:48:78:62:f1:de:47:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 16:47:52 2025 GMT
            Not After : Mar  6 16:52:52 2026 GMT
        Subject: CN=47C9379EE2F8BD5DFAD70FB93BFBC9B4F211A271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c8:86:5b:f4:88:bb:7e:bd:bd:fb:bf:36:5d:
                    d9:d8:68:e0:47:2b:e5:35:fc:48:31:b6:4e:de:6c:
                    b8:04:47:68:10:be:55:1d:72:d0:91:2f:83:fb:c8:
                    39:86:44:55:9e:55:6b:de:c9:e0:81:6d:ab:82:ce:
                    e8:55:c5:8c:b5:70:06:ed:97:80:57:24:7d:c6:26:
                    fb:a2:33:bd:5f:16:2f:79:a3:23:f6:3b:c7:6b:9a:
                    d5:ff:5e:9e:67:ac:66:ff:5a:cc:69:a0:f2:af:8c:
                    97:17:87:96:53:be:1a:bb:bc:cf:96:70:49:f0:2a:
                    44:e3:54:12:2f:a0:a7:6b:f9:c3:45:a0:e4:91:fa:
                    c2:1d:12:00:fe:7b:4c:61:ae:74:e9:86:20:2a:26:
                    50:f7:dd:90:12:0d:90:7e:22:6b:8b:7e:0b:b9:a9:
                    3a:dd:31:23:63:9c:3f:77:00:7c:31:ed:57:ef:dd:
                    af:b1:34:cd:d2:1e:de:ef:3b:f5:6b:bc:29:ae:a1:
                    30:fd:5f:f4:d6:b7:61:e5:e3:3d:1c:66:7b:5b:b3:
                    c7:a1:d4:ec:50:d8:2b:cb:48:ab:e8:0b:12:be:35:
                    15:30:e9:26:3f:22:f3:47:8f:40:4a:c2:2f:0e:2b:
                    be:78:ec:25:22:d9:74:71:5f:94:e3:81:19:da:3f:
                    3a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                47:C9:37:9E:E2:F8:BD:5D:FA:D7:0F:B9:3B:FB:C9:B4:F2:11:A2:71
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E8caTf6AzNtnjfAVfFGYg5TAp6bQnkQvCk2Z8EPYyUTj/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E8caTf6AzNtnjfAVfFGYg5TAp6bQnkQvCk2Z8EPYyUTj/1/47C9379EE2F8BD5DFAD70FB93BFBC9B4F211A271.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.32.0/21
                IPv6:
                  2804:5c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262540

    Signature Algorithm: sha256WithRSAEncryption
         3d:db:5a:c6:7e:2f:3e:94:c8:86:52:bb:53:93:29:df:73:9f:
         3b:ee:75:e6:db:63:9c:7e:98:a4:b0:a5:80:63:7d:26:3e:04:
         ec:a8:b5:8a:78:2c:45:da:6f:94:4e:5b:2d:3e:e7:ab:6c:2e:
         f9:8e:0d:78:7d:e7:d3:71:f9:28:89:ef:51:ed:b3:da:7d:c3:
         85:d0:b1:b7:15:4f:bf:78:c9:60:36:fb:54:5b:a5:19:81:1d:
         72:aa:8a:68:a6:a0:b8:b0:b6:fe:d3:aa:06:c8:1b:0d:87:b9:
         0e:3f:6e:e2:08:a2:82:c2:09:f8:01:49:7b:05:ca:01:68:f3:
         dd:c6:8f:33:e1:16:69:06:50:04:21:78:6b:38:4d:49:01:8c:
         91:2f:fc:c5:d4:23:72:e2:74:b9:1e:15:fc:84:9c:87:14:fa:
         91:25:e9:a2:2d:f3:ab:f7:a8:9a:ec:d8:73:3f:cd:18:5c:ed:
         eb:c9:66:9e:03:07:64:03:42:a3:90:f4:ee:c3:aa:44:90:a1:
         6f:52:a5:97:fb:8a:fc:40:b2:3b:6d:dd:14:86:e3:52:34:aa:
         dc:8d:c4:09:7a:9a:2e:f3:a4:a2:82:2a:e4:8e:01:3c:9d:c5:
         a8:8e:0f:51:6d:38:4b:4b:d7:56:ad:88:df:43:13:b7:fc:5e:
         bc:55:3c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:25:47 2025 by rpki-client