Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5668EE81C8705A595C00BF220C5BB48B38682B81.cer
File:                     5668EE81C8705A595C00BF220C5BB48B38682B81.cer (raw, json)
Hash identifier:          5Ni5zC+xLH8GgMB6cn7uj6FcqhlFjcgIMxAlI7YvJuw=
Subject key identifier:   56:68:EE:81:C8:70:5A:59:5C:00:BF:22:0C:5B:B4:8B:38:68:2B:81
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3B295FADB3B61BC625262CD9C4CAB8B1F8BBA112
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/5668EE81C8705A595C00BF220C5BB48B38682B81.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 22 Mar 2025 23:06:46 +0000
Certificate not after:    Sat 21 Mar 2026 23:11:46 +0000
Subordinate resources:    AS: 263558
                          IP: 143.255.196.0/22
                          IP: 186.237.216.0/21
                          IP: 2804:ef0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:29:5f:ad:b3:b6:1b:c6:25:26:2c:d9:c4:ca:b8:b1:f8:bb:a1:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 22 23:06:46 2025 GMT
            Not After : Mar 21 23:11:46 2026 GMT
        Subject: CN=5668EE81C8705A595C00BF220C5BB48B38682B81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1b:62:36:72:02:ca:02:d5:6b:8b:d7:7b:0e:
                    0a:5a:70:a4:a4:26:a7:aa:3c:52:6a:1b:d3:a8:64:
                    74:2d:6e:63:47:dc:b5:bd:87:09:5b:ab:1f:a8:59:
                    9f:8d:2d:d1:df:48:21:f0:42:d2:6e:6f:16:e3:aa:
                    b8:9c:ff:3a:a2:2a:7f:34:8e:21:75:26:1a:3e:3f:
                    9a:fe:76:58:30:02:b0:11:8a:39:b1:b0:db:cc:e8:
                    31:15:3a:cd:01:c7:5a:fc:0d:c3:6a:8f:de:43:df:
                    e4:36:cd:a6:bd:d2:69:d8:b5:5c:8a:6f:9f:7f:08:
                    ef:37:11:d9:96:58:f5:bb:3d:be:c3:5e:f4:38:cc:
                    02:f6:6d:c4:a7:4d:c9:d8:13:fc:9d:27:21:6c:ae:
                    a0:46:5b:d4:bb:62:a6:fe:e0:bd:d8:f9:8f:a8:03:
                    e2:dc:50:64:19:95:fd:07:dd:83:e1:ff:a4:fa:86:
                    13:ac:70:35:dd:7c:7d:9f:af:a4:0a:50:d7:26:85:
                    ba:28:82:e6:49:b7:2f:8a:46:72:ab:93:63:52:dd:
                    a5:82:cd:ef:ee:03:04:55:da:c4:27:26:27:2c:c3:
                    dd:f6:2e:77:86:d9:d0:13:1d:ce:e2:19:f9:03:14:
                    e4:fe:3b:a7:69:e3:e0:3e:58:67:5a:bd:3d:e4:33:
                    d6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                56:68:EE:81:C8:70:5A:59:5C:00:BF:22:0C:5B:B4:8B:38:68:2B:81
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/5668EE81C8705A595C00BF220C5BB48B38682B81.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.196.0/22
                  186.237.216.0/21
                IPv6:
                  2804:ef0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263558

    Signature Algorithm: sha256WithRSAEncryption
         63:98:e2:cc:d7:c3:b1:95:31:48:54:92:2a:be:38:5e:01:95:
         59:8a:13:ce:f4:4b:ea:64:54:c5:a9:98:57:5c:b8:8a:6b:1a:
         db:3f:df:b2:9c:17:10:d0:22:3b:53:d0:82:fa:47:e1:57:14:
         f7:02:d3:87:b6:3a:5e:b2:f5:c4:97:cf:a7:5a:91:0a:24:04:
         47:46:4c:a9:e7:21:5c:9a:80:a0:e7:91:f4:43:79:d5:bc:78:
         c8:48:b6:61:3a:ba:fe:55:c2:19:74:bd:6d:53:39:e0:a8:f2:
         63:b5:cc:9f:b8:84:4a:62:67:c6:02:6f:e0:37:ff:c4:3a:3f:
         fa:f1:d6:a1:6a:18:51:aa:d7:b7:21:15:12:56:d7:db:6e:67:
         31:db:29:d6:61:97:c2:76:c6:e8:28:12:2c:18:d3:da:d6:f1:
         51:d3:55:dc:22:5e:03:26:06:a1:83:39:60:84:72:07:ed:6b:
         14:3f:cb:61:ec:fb:a7:f2:a5:93:5a:07:12:69:b1:48:93:ed:
         c8:6d:73:92:f1:b7:e1:9f:96:75:c2:99:66:38:f1:ec:9d:cd:
         57:ef:64:21:47:3e:44:2b:8a:d7:4f:91:6d:98:96:df:40:95:
         3c:8e:a8:fc:67:52:fe:a4:d7:47:4d:af:31:cf:29:72:a2:e3:
         67:7e:76:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:28:36 2025 by rpki-client