Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/68381282EE8DA4C004BD63329B8F39CB17F85C0C.cer
File:                     68381282EE8DA4C004BD63329B8F39CB17F85C0C.cer (raw, json)
Hash identifier:          hF9TgTTocqeOJns4j234lRpthQLblLw5NKyE8tVg7w8=
Subject key identifier:   68:38:12:82:EE:8D:A4:C0:04:BD:63:32:9B:8F:39:CB:17:F8:5C:0C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0BB22061DCC681EAA24FBD395DF91141401209DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/68381282EE8DA4C004BD63329B8F39CB17F85C0C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 31 Mar 2025 18:22:57 +0000
Certificate not after:    Mon 30 Mar 2026 18:27:57 +0000
Subordinate resources:    AS: 268245
                          IP: 45.236.204.0/22
                          IP: 2804:4e30::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 14:43:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:b2:20:61:dc:c6:81:ea:a2:4f:bd:39:5d:f9:11:41:40:12:09:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 31 18:22:57 2025 GMT
            Not After : Mar 30 18:27:57 2026 GMT
        Subject: CN=68381282EE8DA4C004BD63329B8F39CB17F85C0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ed:1e:f6:c3:b3:c0:df:7a:27:61:f4:cf:30:
                    a0:17:f7:5a:55:d8:3b:85:01:19:cc:16:d1:10:05:
                    2a:52:a0:10:46:b6:7c:54:bd:2e:14:f0:b0:7c:90:
                    10:2c:e8:71:63:04:b5:99:5a:3e:8e:8e:db:00:36:
                    a5:ce:5f:c7:31:75:00:76:1c:ea:1f:5d:47:51:03:
                    01:52:b9:65:55:94:34:01:f2:8a:24:b2:37:8e:38:
                    b0:2b:db:93:c1:ae:c1:08:0f:66:5f:52:3b:f1:9b:
                    2d:06:0c:dd:af:57:44:e1:e2:68:16:51:08:4d:4a:
                    47:56:e1:bb:73:9b:00:9a:2d:8b:a2:27:22:0e:e5:
                    6b:01:15:11:d0:ac:00:d9:ce:19:39:2f:63:44:7f:
                    41:b7:bc:a9:2e:90:5c:e0:dc:1b:c8:de:3a:c8:ad:
                    e7:4d:3c:8a:e4:42:a2:81:ed:11:bf:12:ad:ac:c6:
                    a4:72:20:bc:82:64:9c:ef:ba:02:00:91:38:32:15:
                    0a:bf:c8:31:6b:ab:07:32:f4:ba:ab:27:bb:15:59:
                    62:4c:94:8b:2d:3f:be:f4:82:52:d3:89:93:6c:90:
                    2d:85:60:22:cd:71:58:fa:d6:b4:d6:67:e7:b1:b2:
                    9b:77:23:21:65:33:46:4c:61:47:d5:c7:d8:a7:95:
                    3d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                68:38:12:82:EE:8D:A4:C0:04:BD:63:32:9B:8F:39:CB:17:F8:5C:0C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/68381282EE8DA4C004BD63329B8F39CB17F85C0C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.204.0/22
                IPv6:
                  2804:4e30::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268245

    Signature Algorithm: sha256WithRSAEncryption
         7b:bd:42:39:f2:26:e9:2b:d8:0a:f2:4d:ff:03:8a:28:85:c0:
         a2:41:43:64:b4:21:48:a6:b6:26:20:1d:72:66:86:fd:fe:27:
         eb:4a:32:14:d6:61:99:e0:71:8e:d6:1d:e7:cf:fc:f3:28:d3:
         b4:07:31:74:08:5f:97:4d:48:5a:bd:21:db:5a:5b:73:91:ff:
         ae:17:8f:da:eb:c1:cc:c0:2b:8a:4b:e4:54:81:c7:f1:92:70:
         b7:d2:ff:65:23:0e:d5:87:78:ac:65:03:5f:80:39:1f:dc:d1:
         69:2a:38:9d:4d:9c:71:11:ee:8a:61:02:45:86:eb:af:dc:13:
         28:92:91:2f:93:ca:35:a0:8e:70:44:58:4d:4b:86:09:cd:e4:
         ff:e2:1b:58:a9:52:57:97:8e:50:bf:f9:04:6e:76:3e:db:11:
         11:50:57:2c:1f:ec:12:3d:bf:af:13:8f:c6:22:f7:d9:2f:c8:
         25:40:b5:d2:42:01:a2:f6:86:92:60:ad:ba:0e:5b:bd:f5:e9:
         47:2d:6f:51:9a:9a:0c:e4:8e:3d:67:1c:e4:c1:9f:c8:c5:fb:
         89:1a:03:84:a7:a5:00:a4:74:ca:2b:48:a0:60:9a:29:f0:09:
         d3:e4:24:56:06:ba:50:9f:2f:52:1a:e4:d7:2c:db:4d:6e:6d:
         59:07:2d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:57:43 2025 by rpki-client