Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5613FC6D54F2D3C8DE54A204D7405FEC38243753.cer
File:                     5613FC6D54F2D3C8DE54A204D7405FEC38243753.cer (raw, json)
Hash identifier:          D32iLW/+fHYawK1z3DA0OVZ0cUrXH9uOJQfVW/gMNvE=
Subject key identifier:   56:13:FC:6D:54:F2:D3:C8:DE:54:A2:04:D7:40:5F:EC:38:24:37:53
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       503609BE267195EA9E50ADBB78F8725AF6FACF1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6K5UpRJxKf5phKeQUA41Q7bszYM1HTgmt9ULWaSQXE7/1/5613FC6D54F2D3C8DE54A204D7405FEC38243753.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6K5UpRJxKf5phKeQUA41Q7bszYM1HTgmt9ULWaSQXE7/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:35:39 +0000
Certificate not after:    Wed 04 Mar 2026 18:40:39 +0000
Subordinate resources:    AS: 272191
                          IP: 2804:8354::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Apr 2025 14:59:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:36:09:be:26:71:95:ea:9e:50:ad:bb:78:f8:72:5a:f6:fa:cf:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:35:39 2025 GMT
            Not After : Mar  4 18:40:39 2026 GMT
        Subject: CN=5613FC6D54F2D3C8DE54A204D7405FEC38243753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:24:37:ff:0a:e7:37:24:a1:37:99:fd:2a:ad:
                    76:19:51:d3:bc:39:e9:25:c5:4b:de:bc:f2:bd:b5:
                    a3:bb:c3:b2:94:4c:1d:15:27:a2:bd:98:85:4c:1f:
                    d5:c7:1d:21:67:a8:9e:48:ca:38:a8:1a:06:7d:19:
                    e4:75:19:ab:3d:f0:c5:8d:63:84:2c:d5:b4:58:a9:
                    7b:df:e1:35:30:1c:cf:3e:b5:eb:f9:a1:f3:ef:29:
                    23:c5:e2:7d:d9:6d:2a:df:df:a6:dd:5d:09:b1:57:
                    0f:13:80:6a:c0:e9:89:cb:bd:50:6e:24:b7:07:f4:
                    a4:49:ab:c4:0d:ac:e9:5b:a7:19:9b:37:ef:9f:83:
                    10:fb:f7:05:25:34:36:02:50:e6:86:b2:95:9e:77:
                    b0:28:09:83:b7:e7:8a:8d:78:80:2f:6e:7f:8c:e8:
                    f9:94:87:55:94:42:ae:fc:39:db:37:d1:81:8a:5d:
                    39:34:ee:1a:e7:0f:9b:d6:24:49:94:10:fd:3a:0c:
                    50:b1:ae:a2:df:7d:a5:58:81:1a:e8:2f:24:68:43:
                    93:c8:bd:99:56:53:cc:dc:f6:7d:72:00:20:fe:54:
                    d5:17:2a:5f:e4:35:35:3e:98:b4:cb:b1:ed:9f:4b:
                    bb:68:b9:23:41:55:58:b3:04:41:ef:0c:3b:38:cf:
                    91:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                56:13:FC:6D:54:F2:D3:C8:DE:54:A2:04:D7:40:5F:EC:38:24:37:53
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6K5UpRJxKf5phKeQUA41Q7bszYM1HTgmt9ULWaSQXE7/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6K5UpRJxKf5phKeQUA41Q7bszYM1HTgmt9ULWaSQXE7/1/5613FC6D54F2D3C8DE54A204D7405FEC38243753.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8354::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272191

    Signature Algorithm: sha256WithRSAEncryption
         05:a4:6f:0d:7f:e2:fc:18:37:a7:8e:0f:77:6a:e5:0b:e4:b3:
         46:cc:9a:46:82:91:0c:15:70:e9:74:d8:98:89:3e:8e:0a:e8:
         6e:61:2a:f2:73:da:a2:a0:ee:14:3b:5e:33:ab:ed:8b:cf:ed:
         7d:b0:c8:05:1c:09:a4:bd:32:33:b1:11:b9:c2:d9:31:c4:13:
         13:97:b4:62:f4:39:d6:90:47:45:58:04:43:41:fc:b3:a7:b3:
         e2:aa:0b:25:2e:18:59:b1:18:fb:e9:5e:8c:9b:94:9e:4b:23:
         3a:87:33:8c:7b:cb:6e:48:bc:61:61:03:fd:43:4c:5a:44:c5:
         7b:2e:5d:49:25:5f:36:eb:ce:4d:8f:7f:80:41:e2:44:6f:8c:
         b1:16:d3:26:77:7b:43:4d:64:89:e0:cd:d9:dd:90:ed:e2:32:
         b0:d9:09:41:e6:ec:12:9a:a4:be:2d:f2:7c:0c:17:c3:01:7c:
         97:0e:69:a9:ff:60:63:ef:43:52:b2:57:34:88:be:0d:35:5b:
         eb:d1:42:4a:b9:bd:90:cf:02:84:c2:f2:84:8e:fb:54:8b:b0:
         99:c2:60:7c:9b:e2:4d:c5:f9:8e:8a:59:3e:86:c1:43:53:c8:
         ad:07:2d:90:b5:21:09:3b:a3:44:b5:41:e7:44:19:6c:ab:7e:
         53:4e:08:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:20:11 2025 by rpki-client