Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5F33BB65A501B1A095633041CB4544B7CD75764A.cer
File:                     5F33BB65A501B1A095633041CB4544B7CD75764A.cer (raw, json)
Hash identifier:          4WGsLFqXc99HsszQpYVJ/Vmt2fzikF7z0WJDJQajcGM=
Subject key identifier:   5F:33:BB:65:A5:01:B1:A0:95:63:30:41:CB:45:44:B7:CD:75:76:4A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       76774B9F6AC579B1DD841AA27C3E60EC0A812877
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/1/5F33BB65A501B1A095633041CB4544B7CD75764A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:36:18 +0000
Certificate not after:    Wed 04 Mar 2026 18:41:18 +0000
Subordinate resources:    AS: 271586
                          IP: 190.9.64.0/22
                          IP: 2804:7dd8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 22:38:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:77:4b:9f:6a:c5:79:b1:dd:84:1a:a2:7c:3e:60:ec:0a:81:28:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:36:18 2025 GMT
            Not After : Mar  4 18:41:18 2026 GMT
        Subject: CN=5F33BB65A501B1A095633041CB4544B7CD75764A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:dd:f0:3d:e6:63:fa:d4:c7:3b:13:7f:f3:0f:
                    72:ae:26:f7:9f:a9:5a:aa:85:b2:9f:f9:5b:d8:43:
                    b9:40:7b:ce:f8:22:f2:7c:7b:e4:d4:18:d6:fb:a5:
                    81:8a:ba:4f:0b:bf:47:e5:15:98:18:fa:1c:cb:f7:
                    b5:4a:7f:dc:d4:8e:40:f8:a1:8d:b4:a0:35:99:93:
                    74:ac:a0:1f:fe:c3:09:26:1e:4c:51:dd:a9:55:3b:
                    28:a9:8b:4e:21:f6:a1:f5:a0:61:26:f9:ab:52:53:
                    53:65:9c:f4:37:ce:d4:60:19:1d:5c:81:bb:1b:eb:
                    a3:15:07:1e:aa:f8:41:58:3d:d6:83:90:96:42:f2:
                    10:95:49:fd:ab:79:52:b0:59:6a:94:40:56:3c:4f:
                    a2:99:c1:f9:49:7e:f1:96:ac:6e:ec:21:a2:84:47:
                    e9:9f:5c:fe:27:ce:40:70:bd:01:7f:52:fd:25:75:
                    9b:46:04:9f:9f:64:a3:ea:dd:f3:34:e6:9a:c3:61:
                    12:20:ba:99:8d:f2:fb:68:96:bd:db:f7:9a:6b:b6:
                    32:71:28:55:aa:d4:b6:17:4d:ee:f6:95:d8:8c:5f:
                    54:04:70:4c:34:42:66:de:a0:48:78:71:a2:33:75:
                    f9:2a:a2:07:6a:a1:f9:b9:2d:66:37:39:48:1d:f4:
                    a4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5F:33:BB:65:A5:01:B1:A0:95:63:30:41:CB:45:44:B7:CD:75:76:4A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/1/5F33BB65A501B1A095633041CB4544B7CD75764A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.64.0/22
                IPv6:
                  2804:7dd8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271586

    Signature Algorithm: sha256WithRSAEncryption
         c1:67:c3:23:7c:6c:c5:c1:8f:d6:1f:fa:3f:9f:65:dd:62:f7:
         a1:f0:17:be:ec:76:80:a4:56:9a:81:f7:bd:aa:3b:e3:b4:1c:
         f7:dc:be:75:f6:e7:08:41:30:bb:a2:17:64:ee:01:b3:e8:07:
         73:42:ff:e5:fe:7c:d1:71:01:e4:bd:46:e3:4e:7c:e3:37:d6:
         9c:b3:ed:e7:c5:d7:be:6f:28:5f:10:8c:d3:8a:fe:92:fa:d7:
         8f:d5:e1:a1:2c:b9:9f:c1:79:19:3d:6f:7d:ec:78:00:d1:03:
         48:ec:37:bb:38:20:e8:a4:b8:d7:e5:96:03:d9:fd:5c:0d:9e:
         31:95:fa:6c:15:d9:c0:03:0e:a2:e2:8b:58:b0:37:36:21:d7:
         f5:75:a6:db:b8:88:52:4a:3b:53:7c:53:25:ec:ae:ca:f2:35:
         9c:02:f5:78:21:cf:19:f7:3a:22:6c:89:2a:fd:5e:19:58:2e:
         18:7f:0c:27:93:ac:a0:28:14:00:a0:8c:2e:1b:d6:1b:ef:48:
         58:30:d3:2b:d7:f2:06:22:a7:6b:f4:a7:06:6c:d2:9f:81:10:
         c6:a4:11:4e:87:e2:00:06:82:ca:16:cb:12:71:a0:9b:37:a7:
         73:08:f4:02:a9:5c:4e:76:01:6c:c8:82:96:83:93:3a:9b:a7:
         16:00:81:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 00:50:01 2025 by rpki-client