Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/60AB403170A672D3B6135E0C4A876F7657048DF0.cer
File:                     60AB403170A672D3B6135E0C4A876F7657048DF0.cer (raw, json)
Hash identifier:          SdCaZoft8+JCjSZfk9BFgndptf9CY7fP1DS2Hj90oNA=
Subject key identifier:   60:AB:40:31:70:A6:72:D3:B6:13:5E:0C:4A:87:6F:76:57:04:8D:F0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4ADEA4FFE14BEF4882EBE2535CC288B82103EDA7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/60AB403170A672D3B6135E0C4A876F7657048DF0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Mar 2025 20:32:56 +0000
Certificate not after:    Thu 19 Mar 2026 20:37:56 +0000
Subordinate resources:    AS: 268836
                          IP: 45.174.28.0/22
                          IP: 2804:5b58::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 04:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:de:a4:ff:e1:4b:ef:48:82:eb:e2:53:5c:c2:88:b8:21:03:ed:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 20 20:32:56 2025 GMT
            Not After : Mar 19 20:37:56 2026 GMT
        Subject: CN=60AB403170A672D3B6135E0C4A876F7657048DF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1d:a4:e6:ef:a0:7b:8a:37:37:ca:c0:0e:05:
                    e0:67:e1:f7:51:1c:12:18:cf:b6:dd:5a:d9:29:96:
                    ad:fd:13:0c:a0:00:b6:37:d3:ca:f3:87:15:80:20:
                    67:ec:e0:b6:ec:05:59:fa:89:29:5f:4d:91:9c:1f:
                    70:37:98:8c:30:a2:59:24:f2:88:cd:e2:5d:98:3b:
                    5f:c9:a2:c7:d4:9f:c4:36:5d:89:4b:43:6f:b5:78:
                    31:5a:b4:b9:3e:54:3f:4d:12:21:0b:73:59:ed:cf:
                    6e:d2:37:73:f1:be:2f:04:c6:98:d4:d8:b8:e2:be:
                    b6:66:ae:5e:dc:af:01:b4:7f:68:1c:ae:78:11:c0:
                    d0:52:18:31:24:b0:c1:24:95:0c:ed:95:17:dd:df:
                    00:6c:de:0d:44:ca:83:4a:f7:c5:3c:eb:92:5e:05:
                    b5:0a:0b:32:53:2e:5c:2a:ae:8c:0e:4d:1f:4e:4b:
                    08:35:5e:7c:db:4b:26:99:7c:68:22:32:b9:d5:cd:
                    38:a2:9d:f4:14:3f:71:40:9b:88:42:d5:ad:9b:5c:
                    15:ae:cf:3f:9f:c3:4e:c5:60:16:25:ed:99:33:9b:
                    ed:f5:62:44:64:3d:42:e8:80:76:f8:8c:9a:a1:48:
                    d3:ff:1c:4d:cc:82:78:cb:88:08:e9:d3:a5:d3:cc:
                    d9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                60:AB:40:31:70:A6:72:D3:B6:13:5E:0C:4A:87:6F:76:57:04:8D:F0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/60AB403170A672D3B6135E0C4A876F7657048DF0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.28.0/22
                IPv6:
                  2804:5b58::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268836

    Signature Algorithm: sha256WithRSAEncryption
         85:b7:4a:6e:d7:4c:ff:72:7f:27:44:9b:76:f7:f1:84:f1:00:
         c7:7e:4e:48:1b:0d:91:94:4d:01:af:cc:83:c4:e1:68:a2:ce:
         a5:d3:fc:98:6a:ad:78:c3:40:02:ca:31:08:e5:a4:09:14:87:
         88:2f:5c:31:39:28:46:ab:8a:fe:ba:be:0f:22:ee:0a:0a:2b:
         18:8a:7e:1d:7e:81:ba:64:dc:3c:99:f4:6c:99:4e:75:77:ce:
         de:a5:0c:f5:56:bf:6e:4b:95:b9:da:3e:47:28:10:f4:3f:d5:
         f6:f9:9e:65:05:9d:f5:d0:7e:cb:32:9a:d0:d8:1e:bf:9b:6a:
         a6:c6:1e:52:59:28:c7:46:ca:d3:d5:46:f1:f2:1d:78:65:c8:
         cd:31:28:1a:84:80:b7:66:35:1b:07:2a:cb:27:62:d2:a1:fd:
         f0:c4:ea:e3:25:d2:7c:99:1c:70:ae:2e:f6:f3:aa:68:1b:a7:
         3c:b5:1d:de:09:ab:43:b1:e5:57:2c:fa:21:f5:e3:3e:62:61:
         4e:10:25:fc:92:38:bf:f1:1f:d0:8e:c9:10:7f:14:f5:f5:d1:
         9d:ef:cf:67:61:15:51:c9:f5:22:09:76:5b:8e:84:a6:d0:55:
         13:7c:fa:5f:dc:1a:9d:98:59:b3:82:52:6b:73:e1:67:de:5d:
         ce:c5:99:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:31:11 2025 by rpki-client