Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/561575F60242E48030BC35A771871EB47C6EFF55.cer
File:                     561575F60242E48030BC35A771871EB47C6EFF55.cer (raw, json)
Hash identifier:          zMVsGVqXF4jxw9Ok3kwMoErZgH5l57YfFkzwKRjrrkc=
Subject key identifier:   56:15:75:F6:02:42:E4:80:30:BC:35:A7:71:87:1E:B4:7C:6E:FF:55
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       128A9C9C50E8BE2004F1BFDEEFB0DC41365B1291
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 25 Jan 2025 14:16:35 +0000
Certificate not after:    Sat 24 Jan 2026 14:21:35 +0000
Subordinate resources:    AS: 263606
                          IP: 177.136.72.0/22
                          IP: 2804:fd4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 16:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:8a:9c:9c:50:e8:be:20:04:f1:bf:de:ef:b0:dc:41:36:5b:12:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 25 14:16:35 2025 GMT
            Not After : Jan 24 14:21:35 2026 GMT
        Subject: CN=561575F60242E48030BC35A771871EB47C6EFF55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:33:43:cc:f2:af:70:bc:9f:5f:62:be:22:b4:
                    09:bf:a1:ea:3b:91:ce:62:06:a7:af:3c:2a:71:83:
                    58:0b:e0:c7:63:b6:e8:60:c4:04:e9:02:bd:3a:7c:
                    40:24:23:30:7b:71:1d:6c:02:35:60:54:f3:98:f5:
                    60:3a:af:bb:9b:22:9b:18:16:47:60:c5:e5:9f:51:
                    10:93:9c:ff:b9:db:cd:13:7f:8a:a3:df:75:98:c1:
                    a1:f1:d1:67:72:65:45:89:0a:67:9f:ea:81:fb:c7:
                    6d:34:54:5d:9d:b6:b1:bd:fa:08:ea:cf:20:c5:f1:
                    6f:94:42:a8:7c:77:14:f7:a8:ca:58:48:9c:59:d2:
                    57:1e:56:7b:fc:57:d6:1a:87:2d:c3:d3:3f:8e:2a:
                    8a:bc:41:ec:6f:30:4a:0c:ed:fe:23:e0:1c:b4:76:
                    6a:f0:d2:7f:76:9d:d2:22:f9:16:19:30:d8:38:e7:
                    c7:94:bb:3e:8e:78:f0:f6:05:ed:9f:cd:5d:ac:1d:
                    88:79:a3:c8:2c:12:e8:18:d4:f7:2a:d3:d0:7c:e0:
                    98:bc:c5:dd:ce:a4:38:a0:2c:f9:e8:6c:c9:1e:d9:
                    86:4b:b7:1d:5d:9d:f0:93:d7:50:03:c8:2c:c2:a3:
                    89:0c:21:07:45:63:e4:9e:de:49:7b:a3:fe:9a:30:
                    51:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                56:15:75:F6:02:42:E4:80:30:BC:35:A7:71:87:1E:B4:7C:6E:FF:55
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.72.0/22
                IPv6:
                  2804:fd4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263606

    Signature Algorithm: sha256WithRSAEncryption
         19:49:86:9d:a5:3c:da:3a:19:a9:2d:be:a5:cc:5f:e6:fa:91:
         01:51:55:82:9b:77:9a:6a:96:41:85:a0:ef:a0:b1:cc:da:3d:
         96:d9:76:62:02:34:67:67:00:58:65:76:d9:02:f8:3a:c0:fc:
         79:44:2d:fb:6d:9d:7f:5f:4d:32:82:96:cf:5f:89:19:d0:7d:
         6d:57:ff:02:19:1a:17:4a:e3:7e:94:ca:e5:23:d0:e5:dd:d4:
         f2:c5:6c:24:16:3a:6a:af:e6:80:04:d8:cf:9c:59:e4:f3:66:
         27:03:c2:d5:98:4e:cd:47:df:f5:1e:28:c7:0e:05:04:c4:8a:
         03:a2:f3:1c:de:2f:81:12:af:d9:e8:09:8e:70:e9:70:25:1d:
         b4:51:b0:ff:a5:b5:03:1c:89:11:56:42:f7:87:f2:e0:e5:df:
         63:a1:d9:f0:78:e7:59:30:74:21:f5:dd:63:e9:5d:01:04:5d:
         ad:63:f4:30:3a:f2:98:e9:e4:9e:b9:93:49:b1:92:d2:22:46:
         e2:14:d2:b2:8d:94:b2:2b:ee:f6:c2:50:ad:d5:67:e7:a3:a7:
         76:1d:ce:81:f2:5e:ed:ff:37:e3:37:d5:b3:f9:d9:34:c9:0b:
         be:39:2f:6f:22:90:6a:4a:70:86:d1:fb:cd:d4:49:2e:ac:57:
         73:ff:88:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:43:16 2025 by rpki-client