Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/52F741D1133813F8D309C90CA4A9389C1BF1D693.cer
File:                     52F741D1133813F8D309C90CA4A9389C1BF1D693.cer (raw, json)
Hash identifier:          GmeovF7lHo4duwNQleSqyiznlHYXJTv3OjNbnfB7Z70=
Subject key identifier:   52:F7:41:D1:13:38:13:F8:D3:09:C9:0C:A4:A9:38:9C:1B:F1:D6:93
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       42D5641C1EA3E0BFA8FBA4F7436F06152A071670
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/pbJ37xHRhuowhiJWA2nnrfgCyaL4TqUqLSatXWuNsST/1/52F741D1133813F8D309C90CA4A9389C1BF1D693.mft
caRepository:             rsync://rpki-repo.registro.br/repo/pbJ37xHRhuowhiJWA2nnrfgCyaL4TqUqLSatXWuNsST/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 06:50:26 +0000
Certificate not after:    Fri 06 Mar 2026 06:55:26 +0000
Subordinate resources:    AS: 262431
                          IP: 177.39.176.0/21
                          IP: 2804:464::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 22:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:d5:64:1c:1e:a3:e0:bf:a8:fb:a4:f7:43:6f:06:15:2a:07:16:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 06:50:26 2025 GMT
            Not After : Mar  6 06:55:26 2026 GMT
        Subject: CN=52F741D1133813F8D309C90CA4A9389C1BF1D693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e9:95:c3:0c:bc:c9:12:d7:50:cb:66:92:97:
                    28:db:6d:07:f4:b0:96:d0:ce:2c:22:a5:82:8a:21:
                    84:1c:0d:dc:0a:2c:43:14:d7:54:08:db:c4:cb:d9:
                    d1:92:95:8d:6c:36:15:3a:1a:60:b2:dc:05:c1:c5:
                    8a:aa:33:a4:00:0c:28:1b:40:cd:b4:8c:56:2d:59:
                    fd:26:3c:e7:7e:88:18:3a:37:69:22:52:d7:5a:1d:
                    9d:97:9b:70:42:ff:1d:34:7a:4f:d1:89:96:59:98:
                    0c:b5:88:bb:20:85:5c:79:e7:40:cb:68:fb:65:6b:
                    eb:52:bb:64:a2:23:ef:c5:66:83:a1:bc:98:4f:e2:
                    60:05:5c:b9:66:14:f5:17:89:2c:ad:b7:2a:29:97:
                    a7:af:d3:24:82:70:97:f7:20:3b:e9:29:d7:34:1a:
                    88:8c:84:2d:93:b0:b7:85:8f:41:55:b1:08:74:07:
                    5a:02:5a:8f:01:64:c9:23:b2:ae:72:1f:bb:38:c6:
                    2b:25:82:86:d5:33:59:5f:86:15:89:8f:f3:af:62:
                    ab:06:e3:86:10:0d:06:3c:bc:e1:07:16:58:27:2a:
                    7e:96:f2:ad:67:85:11:07:8f:98:66:59:dd:b2:ac:
                    cd:8e:06:86:03:02:83:8b:2f:cd:75:bf:fa:06:b9:
                    71:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                52:F7:41:D1:13:38:13:F8:D3:09:C9:0C:A4:A9:38:9C:1B:F1:D6:93
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/pbJ37xHRhuowhiJWA2nnrfgCyaL4TqUqLSatXWuNsST/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/pbJ37xHRhuowhiJWA2nnrfgCyaL4TqUqLSatXWuNsST/1/52F741D1133813F8D309C90CA4A9389C1BF1D693.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.176.0/21
                IPv6:
                  2804:464::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262431

    Signature Algorithm: sha256WithRSAEncryption
         a0:ab:59:85:1a:fc:cb:4f:a4:22:2a:bd:1e:70:2a:9f:72:30:
         20:b7:b0:21:d7:e5:69:e1:c3:19:d5:3a:99:73:eb:1b:1a:d1:
         37:34:d8:ae:0a:af:3b:ce:bc:47:b1:45:bc:d1:36:f1:f5:78:
         f7:b0:b4:a0:65:6b:1d:26:d5:7e:e2:03:99:93:03:59:93:a3:
         61:b2:bb:ad:65:f0:b5:76:16:08:b9:f7:04:10:76:fa:71:c4:
         b8:91:bb:30:61:33:af:0f:21:95:2a:5d:7c:fa:52:76:3a:35:
         9b:54:70:b9:74:85:f5:dd:6b:91:7e:c1:73:bc:1a:75:f4:4a:
         4c:2a:ce:50:3b:cd:72:d0:3e:79:7e:ac:b9:5f:5a:56:dd:1b:
         98:56:d4:67:51:ac:79:4c:bf:5a:1b:30:dd:6a:3c:09:33:8d:
         34:19:29:3a:ad:a5:f5:af:4f:09:e6:f2:92:2d:5b:48:51:b4:
         5b:c7:05:86:4e:93:9e:d3:34:04:e0:65:83:19:67:7a:f3:ff:
         f2:a3:7d:4b:15:fc:01:df:ac:0f:e1:55:9d:ef:35:9b:07:34:
         be:33:5f:40:df:f1:6e:46:34:b7:fe:83:60:c6:9f:7a:e4:03:
         e7:a6:a0:0f:be:e1:de:10:30:af:b7:5b:34:17:e4:df:ea:86:
         b0:83:4f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:09:56 2025 by rpki-client