Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/62595ED971A5BB40662FB52F1C40BDD69B1CD1BB.cer
File:                     62595ED971A5BB40662FB52F1C40BDD69B1CD1BB.cer (raw, json)
Hash identifier:          mDVsfHm8Sdx4YuePTl42Z1O7HcRrq/ezWv6ovgMge0M=
Subject key identifier:   62:59:5E:D9:71:A5:BB:40:66:2F:B5:2F:1C:40:BD:D6:9B:1C:D1:BB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1577AE1B2B6EE09044AC96F5FA54BB5BA0F3C569
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/1/62595ED971A5BB40662FB52F1C40BDD69B1CD1BB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:35:24 +0000
Certificate not after:    Wed 04 Mar 2026 18:40:24 +0000
Subordinate resources:    AS: 267039
                          IP: 45.228.4.0/22
                          IP: 2804:4738::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 20:36:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:77:ae:1b:2b:6e:e0:90:44:ac:96:f5:fa:54:bb:5b:a0:f3:c5:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:35:24 2025 GMT
            Not After : Mar  4 18:40:24 2026 GMT
        Subject: CN=62595ED971A5BB40662FB52F1C40BDD69B1CD1BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:99:58:08:a7:11:3c:1e:88:24:ec:57:39:89:
                    be:fe:28:9e:f1:ce:2d:a2:96:eb:cb:09:8d:7d:46:
                    17:0b:c5:1a:1b:d8:30:af:99:0d:1b:aa:8a:54:0e:
                    98:97:66:42:b1:18:42:65:1e:33:c3:b9:74:e0:0a:
                    cd:17:ef:5d:14:e7:76:cd:03:61:a2:4b:07:77:a2:
                    ce:73:e2:55:13:4f:e6:45:fb:2d:5e:f3:c8:54:c0:
                    d8:df:4d:28:70:21:00:45:28:d3:fe:ba:8e:f2:ae:
                    e0:0b:52:3c:b7:34:08:9d:eb:53:64:5e:ef:fe:23:
                    20:ee:01:d4:49:ed:20:c0:17:6e:ed:28:ec:eb:1b:
                    96:79:98:ef:a8:1e:31:4e:d3:41:e6:fa:9a:24:90:
                    de:a4:e0:96:4b:06:f3:44:5f:74:34:9e:a8:e7:03:
                    1d:26:1b:35:20:a3:ec:ac:f3:88:d2:be:40:01:db:
                    c9:48:73:6d:aa:fd:1a:0b:68:0b:93:7f:de:c2:1b:
                    f0:19:0b:0b:aa:f5:9a:c8:34:e4:d5:8d:23:17:de:
                    8c:c6:35:27:6f:ea:19:e2:88:cf:c8:ca:26:d2:75:
                    47:b7:2e:54:a3:a0:9b:b7:e9:25:38:15:81:ed:00:
                    09:7d:81:e0:b5:76:5e:7e:3f:5e:b7:a3:07:97:c8:
                    ea:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                62:59:5E:D9:71:A5:BB:40:66:2F:B5:2F:1C:40:BD:D6:9B:1C:D1:BB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/1/62595ED971A5BB40662FB52F1C40BDD69B1CD1BB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.4.0/22
                IPv6:
                  2804:4738::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267039

    Signature Algorithm: sha256WithRSAEncryption
         d0:86:30:16:24:4a:ca:db:e8:6c:61:d0:03:1d:5f:eb:a7:3d:
         81:57:ca:8e:8c:c6:24:73:cb:9f:3c:e3:47:3b:71:9d:85:69:
         79:67:45:70:c6:27:04:4d:5f:f1:ec:65:7b:eb:7d:e0:9e:9f:
         37:3c:b1:ce:82:26:88:46:38:b6:fc:c1:03:45:e9:11:cc:d6:
         87:d5:79:dd:f3:9c:73:64:73:1e:d3:48:4d:bd:6d:5c:b7:20:
         ff:ac:cb:e0:57:f4:b2:43:53:d4:88:69:d5:50:fb:9a:21:0e:
         39:7d:89:28:fa:2e:0e:00:ec:42:9f:c1:93:ab:9e:42:08:25:
         4a:bf:b9:d6:bc:44:fe:b5:7a:4f:6b:2c:26:f9:b7:a6:63:f5:
         c9:00:68:fe:60:e7:db:96:86:ce:a3:df:5b:23:41:f1:ef:82:
         df:e0:c2:9d:25:f1:d1:49:79:90:e0:f7:01:ef:c2:10:55:09:
         36:6a:4b:e2:8d:e9:75:23:01:50:8e:5f:14:94:bd:a6:c2:a8:
         60:df:e8:71:dc:d9:84:1b:93:e5:c8:e6:68:de:01:0a:92:3d:
         7c:a4:c2:96:9f:d5:05:45:05:71:82:da:10:08:9e:c3:fa:9d:
         9e:f6:ff:49:33:c4:ec:3e:24:f7:39:80:7b:61:19:1f:76:d3:
         c4:88:dd:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:20:46 2025 by rpki-client