Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5D4824580436E9E25FD6D099253DCC3B98F6438C.cer
File:                     5D4824580436E9E25FD6D099253DCC3B98F6438C.cer (raw, json)
Hash identifier:          +A2h4aMcmbJHCpA2q0Tr+Dyna05pzdmwFvNMDRqjgS8=
Subject key identifier:   5D:48:24:58:04:36:E9:E2:5F:D6:D0:99:25:3D:CC:3B:98:F6:43:8C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3074FF36D0091C9233148067BD97760E3BF4BE7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HLtGh7uZQpqNfmQvW9BuzF2FDWHqAkK44QYEQ5PPBJpe/1/5D4824580436E9E25FD6D099253DCC3B98F6438C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HLtGh7uZQpqNfmQvW9BuzF2FDWHqAkK44QYEQ5PPBJpe/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 14:30:11 +0000
Certificate not after:    Thu 05 Mar 2026 14:35:11 +0000
Subordinate resources:    AS: 266096
                          IP: 45.5.104.0/22
                          IP: 2804:3a90::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:53:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:74:ff:36:d0:09:1c:92:33:14:80:67:bd:97:76:0e:3b:f4:be:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 14:30:11 2025 GMT
            Not After : Mar  5 14:35:11 2026 GMT
        Subject: CN=5D4824580436E9E25FD6D099253DCC3B98F6438C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:02:77:8e:5e:21:bb:c8:3d:97:2b:e2:11:8d:
                    ca:4c:3f:7b:d6:3e:e1:e3:fd:47:34:04:cd:b7:05:
                    27:39:84:80:6f:63:f1:08:2a:e8:e6:51:7e:58:b5:
                    67:c1:8b:2a:5d:a7:60:75:b0:04:f6:2b:65:63:cc:
                    df:14:1a:89:27:fc:ee:bc:0a:03:2f:99:c9:07:9d:
                    06:05:98:00:25:fb:ec:60:8e:d4:6c:44:16:a8:76:
                    23:61:74:2b:c3:41:5e:24:fb:55:2b:c8:b0:1b:6e:
                    78:81:85:34:53:1f:78:29:b1:4a:c0:97:7c:c9:05:
                    ed:86:39:7d:44:de:c1:c0:4c:ca:10:e2:86:97:e3:
                    eb:f2:24:da:e4:0c:d7:cd:ee:a8:c9:bc:4c:e4:59:
                    e6:97:d6:b6:19:8d:db:01:4e:ba:ec:a6:78:ee:bf:
                    15:29:78:b8:82:e9:6a:0e:08:b8:03:8a:90:18:54:
                    1d:3e:e7:e1:8f:6a:e4:08:dc:bc:22:a8:6e:0e:95:
                    0e:b4:82:64:20:fb:b2:9b:6c:6a:2d:0f:e5:63:3d:
                    b5:9e:72:a0:c1:f0:7c:7f:78:c9:2b:87:df:89:e0:
                    e6:d2:3b:1d:72:01:c1:c1:78:82:f5:8a:1a:95:44:
                    4d:d4:bd:4f:bc:03:c2:0a:36:1a:0b:b0:f5:79:fe:
                    d4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5D:48:24:58:04:36:E9:E2:5F:D6:D0:99:25:3D:CC:3B:98:F6:43:8C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HLtGh7uZQpqNfmQvW9BuzF2FDWHqAkK44QYEQ5PPBJpe/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HLtGh7uZQpqNfmQvW9BuzF2FDWHqAkK44QYEQ5PPBJpe/1/5D4824580436E9E25FD6D099253DCC3B98F6438C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.104.0/22
                IPv6:
                  2804:3a90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266096

    Signature Algorithm: sha256WithRSAEncryption
         b3:c1:f9:6b:64:b1:4c:a0:2a:0a:26:19:23:66:89:9e:2f:85:
         0f:df:17:99:03:9d:c9:eb:80:80:42:59:01:d2:dd:5a:3d:20:
         3d:61:94:99:73:77:da:34:a2:0f:59:08:e9:8f:2e:8a:3d:42:
         e1:96:57:d7:d1:5f:73:88:2d:3f:f5:e7:02:20:bd:93:9c:a7:
         b5:47:eb:e4:2a:e5:b0:6a:bc:db:e9:ea:70:e8:58:fc:24:d1:
         52:41:30:5c:e2:93:60:99:8c:4d:35:d0:91:7f:7f:c0:40:cf:
         39:58:4e:87:ac:9a:cb:ef:22:79:6e:08:05:3f:3a:22:28:40:
         9e:e9:47:5a:92:02:8d:02:05:22:56:ad:5c:dc:74:51:b1:e2:
         fa:67:c3:e3:92:0a:d2:a4:2a:e9:54:fa:e6:94:47:3c:96:c0:
         4b:ff:bf:d4:32:52:c5:65:93:dc:10:cb:f3:a0:13:3d:81:ea:
         a6:3a:26:ac:a6:15:33:2e:98:24:c5:25:67:7d:c6:fe:52:11:
         26:f6:f4:24:73:25:97:bc:ca:8b:82:77:f4:e3:2b:02:ec:7e:
         6a:76:97:0e:aa:5b:66:27:27:48:ce:be:31:32:9a:6a:f1:6f:
         be:71:94:4c:97:24:b7:08:05:7a:85:50:f1:86:eb:b4:1a:c7:
         b5:d3:57:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:50:44 2025 by rpki-client