Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5123FB1095A3958EA116FBD4615EF7B626346FBD.cer
File:                     5123FB1095A3958EA116FBD4615EF7B626346FBD.cer (raw, json)
Hash identifier:          P5gkCaVjRpSbtMePgHe2iVa2tdaBgD88+59Ty4Aujkg=
Subject key identifier:   51:23:FB:10:95:A3:95:8E:A1:16:FB:D4:61:5E:F7:B6:26:34:6F:BD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       378A2E5235491C96467F89B49384764C0B5CDF98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4SB6VKoaNd4ZMEcbq2ckgacDC6JENqs9rUWBQSC5Hqud/0/5123FB1095A3958EA116FBD4615EF7B626346FBD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4SB6VKoaNd4ZMEcbq2ckgacDC6JENqs9rUWBQSC5Hqud/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 30 Jan 2025 13:29:26 +0000
Certificate not after:    Thu 29 Jan 2026 13:34:26 +0000
Subordinate resources:    AS: 273712
                          IP: 177.12.141.0/24
                          IP: 2804:8b1c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 20:36:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:8a:2e:52:35:49:1c:96:46:7f:89:b4:93:84:76:4c:0b:5c:df:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 30 13:29:26 2025 GMT
            Not After : Jan 29 13:34:26 2026 GMT
        Subject: CN=5123FB1095A3958EA116FBD4615EF7B626346FBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3c:3f:73:cc:b3:5f:a0:71:3e:c0:ef:71:33:
                    30:a0:2f:e8:21:c2:a7:45:ce:24:ee:a3:18:b4:34:
                    40:ab:cc:23:c6:b2:09:5f:a7:ae:a0:7f:75:a1:a3:
                    88:04:0d:6f:9b:3c:8a:08:52:1f:58:00:ac:55:e5:
                    fe:6d:67:47:60:58:3f:3d:9d:ce:f2:ae:76:45:2f:
                    17:14:e7:ea:21:79:d0:a2:f7:c9:77:e5:3a:37:84:
                    55:5e:24:0b:9f:27:71:ba:9c:29:80:32:f7:b0:dc:
                    70:e1:2c:27:ee:31:cc:7a:07:58:f5:f1:f4:1d:c0:
                    c8:2d:30:bb:81:fc:d3:3c:53:06:65:98:79:2e:d8:
                    7a:2f:53:82:e1:c4:a6:06:e6:e2:f2:f0:67:c1:e5:
                    9b:8b:5a:27:31:60:ce:a8:62:68:6c:76:50:f3:58:
                    c0:0a:35:76:cd:0f:54:02:a7:39:1c:2c:e3:d7:a6:
                    33:92:5f:c1:6a:fa:8b:8d:70:d3:4d:02:9c:2d:be:
                    a5:59:60:e8:7a:91:c3:92:eb:b6:12:61:df:55:5f:
                    e6:8c:c0:37:bd:54:7f:e2:bc:8a:07:50:42:8b:23:
                    16:86:2d:7c:6f:fe:1f:54:7e:86:c7:81:b0:d8:dc:
                    30:8f:3d:f7:50:ba:ea:84:c8:92:7c:40:56:b1:95:
                    1e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                51:23:FB:10:95:A3:95:8E:A1:16:FB:D4:61:5E:F7:B6:26:34:6F:BD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4SB6VKoaNd4ZMEcbq2ckgacDC6JENqs9rUWBQSC5Hqud/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4SB6VKoaNd4ZMEcbq2ckgacDC6JENqs9rUWBQSC5Hqud/0/5123FB1095A3958EA116FBD4615EF7B626346FBD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.141.0/24
                IPv6:
                  2804:8b1c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273712

    Signature Algorithm: sha256WithRSAEncryption
         c9:91:77:d5:34:75:28:c3:d1:bf:ae:16:9a:26:4a:c9:0a:67:
         b4:51:b7:bf:29:5c:2c:c2:3d:af:52:b8:d8:3d:72:80:15:37:
         11:e3:41:81:03:d4:c9:35:91:ed:66:17:fa:12:0f:49:c7:46:
         fd:68:91:9f:ef:62:10:e4:33:ea:e7:34:b7:bc:6e:29:2a:0a:
         2e:e6:61:f2:c2:11:21:67:38:d3:23:7e:6c:5d:bb:9e:b3:9e:
         99:91:a2:1b:22:58:c7:34:5a:68:92:9c:0e:0c:24:27:5e:f0:
         60:38:71:62:95:53:ac:be:b7:e2:26:53:64:08:da:c1:24:11:
         8f:78:63:66:de:ee:dc:0d:94:be:d8:f3:9f:ea:0f:d2:40:03:
         33:18:49:a1:be:d9:9b:4d:07:3b:67:b2:ae:07:a3:ab:54:b5:
         28:ac:40:97:06:41:e2:a1:9f:32:43:57:02:20:7a:7d:61:c7:
         ba:80:d6:4c:54:80:48:af:c0:e5:43:60:80:94:13:ea:ed:bb:
         90:a3:3f:94:c3:d3:48:59:26:c3:9f:76:7c:d2:65:ba:2f:16:
         74:04:15:3d:68:f4:d4:cd:99:aa:dc:25:74:0c:cf:a8:9b:50:
         f4:b6:2e:d9:e4:66:40:25:99:dd:e6:70:11:d6:cb:e8:05:97:
         6c:72:95:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:21:08 2025 by rpki-client