Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6EA37C4D080AEB9F5587B7C537BE633D714F5748.cer
File:                     6EA37C4D080AEB9F5587B7C537BE633D714F5748.cer (raw, json)
Hash identifier:          IJhv/PnFcmY3jF8vEtnddgfD1NpGFvLUsp3HCDJ1tmc=
Subject key identifier:   6E:A3:7C:4D:08:0A:EB:9F:55:87:B7:C5:37:BE:63:3D:71:4F:57:48
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6E8A14D922329498C3A4F6A6F7ECF0B7C258EC23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/6EA37C4D080AEB9F5587B7C537BE633D714F5748.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 04 Dec 2024 14:48:07 +0000
Certificate not after:    Wed 03 Dec 2025 14:53:07 +0000
Subordinate resources:    AS: 267096
                          IP: 45.229.24.0/22
                          IP: 2804:4814::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 23:44:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:8a:14:d9:22:32:94:98:c3:a4:f6:a6:f7:ec:f0:b7:c2:58:ec:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  4 14:48:07 2024 GMT
            Not After : Dec  3 14:53:07 2025 GMT
        Subject: CN=6EA37C4D080AEB9F5587B7C537BE633D714F5748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:61:aa:04:8c:24:bd:14:4a:6e:cd:8d:3f:d9:
                    7b:35:e7:bf:ae:3b:43:24:d9:b2:9b:29:5c:e6:12:
                    7e:61:7e:2d:18:de:27:a0:b2:7b:1e:9d:99:a7:48:
                    6d:dd:93:b4:ce:9a:46:fb:3b:64:92:62:24:85:70:
                    d3:c8:96:e4:b1:a1:e8:c4:8f:f6:fc:22:05:4d:3a:
                    c8:09:b8:20:b6:b3:a7:ad:7d:7b:a2:e9:fa:3d:2e:
                    58:76:76:04:b8:3d:86:3e:45:69:e3:38:e8:aa:db:
                    68:80:33:63:73:fa:73:24:c5:ac:f8:58:5c:6c:e2:
                    5b:85:97:91:59:fc:1c:45:8e:86:11:22:95:e8:b7:
                    be:32:7c:95:9e:e7:a7:fe:00:e0:62:a1:8f:97:29:
                    39:1d:8e:e2:ea:50:a6:98:2d:29:9c:5e:3a:c7:68:
                    56:a5:46:71:a4:e2:8f:f7:73:d7:dc:d3:ca:aa:7f:
                    3a:1e:02:94:5c:b4:68:55:84:ac:e7:24:85:24:d9:
                    3b:45:55:3e:bb:d0:0d:cf:0f:ae:35:cd:60:78:e1:
                    46:b0:07:ca:5b:9d:57:52:a2:83:08:84:52:17:cd:
                    20:97:80:06:8b:4b:d5:7f:a7:93:0d:fc:f5:9d:24:
                    71:70:71:bd:fb:81:d6:b1:fa:90:ba:64:9f:23:5f:
                    5b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6E:A3:7C:4D:08:0A:EB:9F:55:87:B7:C5:37:BE:63:3D:71:4F:57:48
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/6EA37C4D080AEB9F5587B7C537BE633D714F5748.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.24.0/22
                IPv6:
                  2804:4814::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267096

    Signature Algorithm: sha256WithRSAEncryption
         a9:de:67:ad:5f:65:f1:b2:ac:78:44:11:42:4f:95:77:70:f4:
         11:a2:1f:2b:97:b5:67:7d:95:76:d8:f2:c6:27:25:dc:22:6f:
         c7:9a:bc:33:fd:23:1e:0e:f5:f5:7a:63:2b:de:a5:2d:d3:ad:
         0a:a3:0e:59:8f:c2:93:d3:da:85:c6:0a:3f:9d:45:bb:0a:35:
         d2:55:4c:30:8b:e7:e9:6b:fc:72:c8:24:c7:a4:a6:62:5c:4a:
         a6:c9:52:a3:ca:6e:ff:8b:0b:a6:a9:83:61:89:cb:02:78:81:
         49:3d:4d:13:a3:66:a7:ff:ec:b7:94:8a:e8:cb:e5:fa:db:5a:
         cc:26:3f:c0:4e:3e:87:c3:09:b5:3f:65:c6:56:0d:ff:3c:3f:
         2e:ff:1f:da:97:fb:76:c8:29:74:c1:52:20:97:20:b1:eb:07:
         4f:91:39:d3:f0:3c:85:db:ee:e1:fd:2b:85:b8:a0:b7:e3:c0:
         74:ab:f8:b5:b9:5d:31:65:cb:83:e5:0f:fd:87:fc:0f:d2:2e:
         6d:e3:cc:21:29:6f:4c:00:51:2c:32:e0:8a:27:59:bd:83:73:
         a5:d8:3a:f8:2e:1c:cf:19:c2:9a:6f:21:28:c6:cd:91:9b:cb:
         73:ad:ab:3c:26:08:c7:df:cc:27:a8:ff:32:5d:4c:70:cb:35:
         f7:6f:bf:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 06:04:38 2025 by rpki-client