Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6B05973B3F0E6046EDE1D64AD43C5E2499AA4036.cer
File:                     6B05973B3F0E6046EDE1D64AD43C5E2499AA4036.cer (raw, json)
Hash identifier:          Cpq9oaF4zMq+MnZ+ySNiwazBMqqfV8Ma+AVJGhYSx5Q=
Subject key identifier:   6B:05:97:3B:3F:0E:60:46:ED:E1:D6:4A:D4:3C:5E:24:99:AA:40:36
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0FBF2B44E1FCFBF2C68270DACFB1A8CA0AADC460
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/1/6B05973B3F0E6046EDE1D64AD43C5E2499AA4036.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 19:18:52 +0000
Certificate not after:    Thu 05 Mar 2026 19:23:52 +0000
Subordinate resources:    AS: 266297
                          IP: 170.79.204.0/22
                          IP: 2804:35a0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 20:36:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:bf:2b:44:e1:fc:fb:f2:c6:82:70:da:cf:b1:a8:ca:0a:ad:c4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 19:18:52 2025 GMT
            Not After : Mar  5 19:23:52 2026 GMT
        Subject: CN=6B05973B3F0E6046EDE1D64AD43C5E2499AA4036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6f:52:10:57:87:73:e6:98:3f:6a:74:7f:fc:
                    8f:cd:2d:4e:3a:e5:61:44:12:04:4e:90:b3:8c:f9:
                    ed:e9:64:0c:e5:0d:4f:73:75:36:ec:d4:64:18:fa:
                    87:dd:48:5d:c3:77:42:92:46:24:0b:90:e0:b2:d4:
                    65:0b:7d:e9:83:6d:21:46:f0:3b:4a:b1:76:ac:2d:
                    e7:bc:b7:c5:f4:c6:dc:93:0a:b7:86:6c:6d:9f:c6:
                    10:fc:3f:12:b3:7a:f0:4d:a4:19:72:65:c4:0b:97:
                    31:7a:20:1b:89:0d:a5:e2:58:20:67:3e:29:c3:b9:
                    eb:72:9a:5f:d2:e3:5e:99:ee:0d:6f:10:8d:c4:c9:
                    4f:86:b1:57:bd:22:77:89:39:4e:50:57:39:2a:0a:
                    13:25:b9:14:67:78:88:48:d4:93:cd:e1:21:e3:22:
                    91:96:67:51:87:d0:98:88:6e:61:04:56:b3:bf:36:
                    9c:d1:af:17:bc:46:d2:a4:e8:51:40:e4:e2:65:ea:
                    59:82:f8:64:9d:fb:e9:a4:d7:41:6d:6c:04:ce:c3:
                    7c:0a:63:2f:e4:31:c3:47:eb:87:ff:e5:49:c3:27:
                    c7:f0:62:23:77:bf:47:bb:97:16:05:6b:57:f1:09:
                    85:ee:d1:35:d1:17:70:b2:2f:1e:58:c0:8c:37:be:
                    08:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6B:05:97:3B:3F:0E:60:46:ED:E1:D6:4A:D4:3C:5E:24:99:AA:40:36
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/1/6B05973B3F0E6046EDE1D64AD43C5E2499AA4036.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.204.0/22
                IPv6:
                  2804:35a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266297

    Signature Algorithm: sha256WithRSAEncryption
         6f:ec:0e:fb:03:c2:ef:ed:95:14:a2:d2:a8:77:a7:0e:04:14:
         69:08:56:7d:76:3f:9b:ec:4d:84:84:eb:88:9e:75:ef:86:fc:
         a8:d5:d0:29:e2:d4:7f:07:0d:5b:89:9f:f3:92:fc:b4:e1:2e:
         b4:4e:45:a6:1f:00:dc:ad:b8:71:80:f5:e4:bc:ac:ad:67:b7:
         79:66:d6:26:c0:d1:4f:5f:a2:9d:76:59:5c:54:1e:7e:ea:66:
         80:74:79:e6:c7:8e:28:ff:f9:fc:28:d1:d0:2d:b6:4f:78:78:
         c6:69:5b:c1:aa:c3:25:fe:83:2f:94:0a:58:ad:fe:8b:bd:9b:
         d6:b1:87:45:68:d8:86:90:13:a5:fa:7d:31:db:ee:eb:3b:54:
         43:28:53:5c:43:ef:8e:13:5e:b0:f9:18:27:5e:1c:ef:5e:20:
         1f:8b:2c:24:1c:b5:ae:69:1c:00:d8:f3:97:e5:c4:43:ab:b5:
         e8:1d:67:dc:aa:21:5b:ab:3e:cc:ea:54:0d:88:f5:3e:51:14:
         e9:1f:58:05:dd:83:6c:76:68:98:3c:70:1f:24:47:69:cc:15:
         46:1f:8b:3c:59:c3:62:61:38:e1:b7:b5:cd:72:71:e6:c0:a2:
         f9:57:9d:35:9a:1a:e8:86:0c:5d:20:a2:a8:6b:ee:89:59:27:
         71:8b:6a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:41:03 2025 by rpki-client