Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/58A660D3367F8727F8C41BC189FF0B653614947C.cer
File:                     58A660D3367F8727F8C41BC189FF0B653614947C.cer (raw, json)
Hash identifier:          BKa+RZoZXyEtsdFyEq6vrcDBw1Rbucz4PAdWp92TVM0=
Subject key identifier:   58:A6:60:D3:36:7F:87:27:F8:C4:1B:C1:89:FF:0B:65:36:14:94:7C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4FBAB6E8C0A28A3B936F943DF754D12DD4C4F156
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3hcUB6PS2hkudXB4LuQs4KQChXfjCeXN9iAhYVLnG1Je/0/58A660D3367F8727F8C41BC189FF0B653614947C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3hcUB6PS2hkudXB4LuQs4KQChXfjCeXN9iAhYVLnG1Je/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 17 Sep 2025 23:23:44 +0000
Certificate not after:    Wed 16 Sep 2026 23:28:44 +0000
Subordinate resources:    AS: 265261
                          IP: 168.0.232.0/22
                          IP: 2804:2d18::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 16:43:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ba:b6:e8:c0:a2:8a:3b:93:6f:94:3d:f7:54:d1:2d:d4:c4:f1:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 17 23:23:44 2025 GMT
            Not After : Sep 16 23:28:44 2026 GMT
        Subject: CN=58A660D3367F8727F8C41BC189FF0B653614947C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a0:f7:0a:df:47:da:cd:b6:85:68:36:e9:ab:
                    91:00:c7:df:19:33:7f:5e:69:e9:99:78:ac:7d:28:
                    6c:d5:75:5d:d5:df:43:0b:68:62:f3:75:65:59:12:
                    a7:2b:cf:20:48:45:f2:bb:f3:ef:15:bd:ee:00:d2:
                    7c:62:0a:2f:bc:e8:58:c8:3e:64:20:1e:8e:08:6d:
                    d0:2e:10:37:a5:1f:1a:28:42:93:0f:40:db:73:61:
                    05:7e:40:c5:b1:2c:c8:6f:26:0f:e5:89:2f:d5:4e:
                    ff:1d:7b:32:e1:ee:ad:44:26:ba:02:c6:64:40:5a:
                    59:6b:2e:6f:09:87:f8:73:7b:85:b5:62:ab:e3:e1:
                    80:e0:12:d3:0d:11:21:7d:2b:13:eb:9b:98:5f:ef:
                    a3:64:e3:cf:12:2c:26:d0:06:d5:ae:51:ac:23:5e:
                    1c:e0:6e:01:ba:59:b0:a5:79:f7:db:95:ff:75:52:
                    ef:18:21:52:66:f2:dc:57:84:84:8d:e7:0a:10:f0:
                    fa:91:b2:f5:b4:b9:54:6a:93:69:c4:47:5c:28:1c:
                    21:ed:97:81:23:61:09:71:aa:90:22:3f:cc:be:1d:
                    3b:e8:41:62:0e:21:c6:91:bd:83:9c:67:d7:42:62:
                    a6:20:66:de:a2:58:46:5b:06:8c:e8:3c:75:c7:b1:
                    a3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                58:A6:60:D3:36:7F:87:27:F8:C4:1B:C1:89:FF:0B:65:36:14:94:7C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3hcUB6PS2hkudXB4LuQs4KQChXfjCeXN9iAhYVLnG1Je/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3hcUB6PS2hkudXB4LuQs4KQChXfjCeXN9iAhYVLnG1Je/0/58A660D3367F8727F8C41BC189FF0B653614947C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.232.0/22
                IPv6:
                  2804:2d18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265261

    Signature Algorithm: sha256WithRSAEncryption
         d1:49:ba:da:2f:6b:ec:aa:c1:8f:7e:19:f8:ed:5f:a7:06:da:
         d6:7b:ca:3c:42:41:3b:ad:7f:9d:9f:f0:15:3a:ac:e6:f6:02:
         df:a7:b3:00:0f:cb:58:1a:88:f4:10:4c:31:40:a1:d8:c7:2c:
         46:96:11:d8:0a:47:36:f3:5d:33:2b:29:be:b2:80:48:8a:1b:
         bb:0b:11:97:48:f2:7a:1a:da:22:ff:be:d8:6d:2a:71:5f:48:
         83:ed:8b:0c:52:63:f1:40:bb:5e:8d:18:a8:43:00:cb:f0:7b:
         ce:fd:0d:8d:44:a1:e9:ac:0e:5c:df:2a:39:c8:22:2a:88:e9:
         c2:b6:3e:b4:d2:7b:41:24:06:20:bc:d1:57:51:31:65:5e:5a:
         45:93:84:23:7a:3f:48:8d:53:24:ce:28:4d:58:52:2f:32:64:
         31:b7:32:1e:03:c2:80:6b:56:76:02:79:fd:ae:1f:6f:99:7d:
         f1:7a:10:ee:4d:53:2f:ac:ff:81:dd:f4:ea:e5:67:40:cd:9e:
         12:09:b1:26:97:53:cc:0e:09:35:19:bf:fa:53:97:83:c2:18:
         5e:62:95:9b:3a:75:f9:fb:70:fb:5c:f4:bb:f7:91:bb:bc:92:
         b1:da:9a:b0:ba:6c:77:b9:aa:ec:57:fd:fb:21:b1:d2:6d:ec:
         85:41:49:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 17:07:10 2025 by rpki-client