Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F.cer
File:                     5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F.cer (raw, json)
Hash identifier:          fYtDFsTihm0R/bywF7xgRJhbb8ROJ9I4R1THufyVv8c=
Subject key identifier:   5D:79:80:6D:AD:4F:4A:CB:46:CA:F2:5A:4A:3E:D4:69:42:6E:6A:2F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       288142CEBA64EA020FE73CC6A29E5FD6FB64EB36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/1/5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 11:41:11 +0000
Certificate not after:    Thu 05 Mar 2026 11:46:11 +0000
Subordinate resources:    AS: 270926
                          IP: 186.26.88.0/22
                          IP: 2804:739c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 04:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:81:42:ce:ba:64:ea:02:0f:e7:3c:c6:a2:9e:5f:d6:fb:64:eb:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 11:41:11 2025 GMT
            Not After : Mar  5 11:46:11 2026 GMT
        Subject: CN=5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:7c:a2:20:bc:81:fd:bf:6c:99:2c:62:27:96:
                    98:d0:84:6d:d8:dd:d4:86:21:91:44:37:ad:11:a2:
                    02:d7:f6:53:79:5d:f0:88:7a:00:db:14:4f:d0:97:
                    7d:de:16:0d:23:ce:3a:0a:35:25:33:53:b1:fb:b7:
                    61:ed:5f:8f:65:4d:d2:be:62:85:38:40:85:41:6e:
                    31:49:04:88:32:81:00:da:24:75:71:b9:03:79:f6:
                    c1:53:6a:24:77:e9:0c:1e:cb:6d:ec:80:54:8f:cd:
                    fd:26:59:56:25:e9:84:92:73:f2:7a:cb:41:ee:ab:
                    57:25:61:4c:c2:ab:57:af:8f:f3:63:78:6c:23:69:
                    15:25:16:d4:44:d1:fb:76:e5:63:df:6a:82:d3:ac:
                    c3:f4:8f:e2:7a:cf:ef:31:2a:34:12:b9:dc:78:13:
                    fa:6d:af:25:66:c6:6e:23:07:77:c4:42:bb:16:76:
                    d1:b9:00:60:e2:3f:62:b7:22:64:38:01:28:f0:5c:
                    72:b3:cf:5f:39:af:c7:5f:86:91:cd:1d:3c:a8:d8:
                    79:0c:7f:a0:90:d8:0e:71:e9:66:3a:b7:9e:e9:84:
                    3b:5a:ff:05:3f:ad:92:83:42:26:54:cb:03:7a:9f:
                    16:27:b2:ca:aa:25:59:d2:61:1e:19:c3:1e:09:0b:
                    36:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5D:79:80:6D:AD:4F:4A:CB:46:CA:F2:5A:4A:3E:D4:69:42:6E:6A:2F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/1/5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.26.88.0/22
                IPv6:
                  2804:739c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270926

    Signature Algorithm: sha256WithRSAEncryption
         c4:4b:72:a8:39:1c:ab:af:ba:31:a5:fc:dc:f4:e3:25:a0:a9:
         38:47:a8:5f:38:4c:12:db:36:f2:83:24:bd:fc:4e:80:d9:dd:
         a3:0a:72:a3:29:ec:1f:fe:84:96:c4:63:64:9f:bf:d3:a0:50:
         48:1d:b7:9e:93:4c:cb:c2:d0:4c:5d:98:b8:77:9f:64:c0:67:
         58:e8:6d:73:e9:7c:84:84:e4:d1:8b:e7:10:03:17:3c:42:27:
         4e:74:ad:56:64:a9:54:5f:af:b2:ca:b6:03:e4:da:52:bb:9e:
         b6:d9:4e:07:aa:a5:fd:f6:c4:0e:12:12:b2:b1:88:3e:34:ae:
         84:6c:6f:7e:a7:ce:23:1e:d4:bc:55:a7:74:fa:6a:44:0a:2f:
         b4:ef:49:0f:20:bc:dd:ec:70:8c:39:a6:52:51:3d:29:a8:47:
         d4:6f:28:8b:df:9d:dc:08:5c:1c:9f:47:25:75:37:2d:8c:ac:
         95:98:ee:5e:2a:e4:d7:b9:4f:a4:64:d4:71:0f:aa:3b:a1:c8:
         9c:20:0e:ea:54:c7:70:2a:28:8d:53:eb:69:ac:dc:b3:42:7a:
         d8:9f:81:94:29:bd:e7:3d:fc:7e:fa:0c:9c:7e:42:7e:66:13:
         a2:f3:fc:06:c1:a7:0b:ec:62:f2:fb:2b:5f:29:e1:5b:8b:5e:
         8d:ec:cb:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:36 2025 by rpki-client