Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7104176188EE68612EE3A6C683A28A3254AFD500.cer
File:                     7104176188EE68612EE3A6C683A28A3254AFD500.cer (raw, json)
Hash identifier:          qzcLMjJ0WuOUb+UZygtKhHNPPGxgPJYplpW3V9PwKag=
Subject key identifier:   71:04:17:61:88:EE:68:61:2E:E3:A6:C6:83:A2:8A:32:54:AF:D5:00
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       747A142301BCFF5F5EF540113A82C3E490390BD9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/7104176188EE68612EE3A6C683A28A3254AFD500.mft
caRepository:             rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 11 Feb 2025 21:00:11 +0000
Certificate not after:    Tue 10 Feb 2026 21:05:11 +0000
Subordinate resources:    AS: 268308
                          IP: 45.238.4.0/22
                          IP: 2804:4f28::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 22:48:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:7a:14:23:01:bc:ff:5f:5e:f5:40:11:3a:82:c3:e4:90:39:0b:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 11 21:00:11 2025 GMT
            Not After : Feb 10 21:05:11 2026 GMT
        Subject: CN=7104176188EE68612EE3A6C683A28A3254AFD500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9f:24:4f:9f:09:e1:0f:ad:51:4d:8c:9d:29:
                    b2:4a:bf:18:8e:31:23:0f:bb:57:1d:2a:28:52:de:
                    75:29:1e:4a:1a:ad:15:25:82:87:53:81:09:9c:30:
                    ef:78:39:87:ed:96:e9:26:fd:b0:9e:16:1e:df:05:
                    a6:f9:71:00:67:a2:5a:8c:bb:0a:8f:6d:59:8d:f1:
                    b9:fc:0e:c0:a7:8d:c8:a3:eb:78:12:90:3a:51:b8:
                    c3:f5:84:39:b4:b7:7b:37:22:78:ce:33:b6:83:48:
                    1c:37:5f:d0:41:39:86:a9:c7:6c:76:75:ac:8e:23:
                    39:7b:42:9f:be:ac:2e:30:ae:8a:5c:1c:7b:b9:93:
                    75:4c:01:a4:21:fd:a3:9d:53:d0:6e:9c:0c:6a:87:
                    56:f8:93:73:b7:d9:77:ab:16:56:88:e1:23:79:29:
                    ad:96:32:b2:e2:51:ba:9a:20:38:20:90:e3:7c:8b:
                    44:d4:7e:9f:66:59:67:2f:37:7e:5b:ab:ae:47:cc:
                    53:fb:f9:8f:36:0f:5c:5b:f0:6e:ea:20:63:90:9b:
                    4e:1c:90:1a:5a:ac:fa:36:b3:70:c7:a8:c7:34:58:
                    4e:d5:c2:e7:05:1a:ce:b9:40:3e:c6:d6:f1:3d:d2:
                    e8:0c:1a:35:fe:a8:de:14:fc:23:b2:20:7a:69:07:
                    8a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                71:04:17:61:88:EE:68:61:2E:E3:A6:C6:83:A2:8A:32:54:AF:D5:00
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/7104176188EE68612EE3A6C683A28A3254AFD500.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.4.0/22
                IPv6:
                  2804:4f28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268308

    Signature Algorithm: sha256WithRSAEncryption
         bb:39:6d:8d:80:17:9c:85:8f:f1:5e:0d:c4:73:f7:b1:cc:5f:
         a7:30:b3:88:5d:a9:a4:06:55:88:de:44:4f:4a:21:df:12:87:
         f9:69:2b:89:47:57:6b:e9:1f:a6:be:c4:e5:d4:61:91:e1:86:
         9b:4f:ca:fd:2f:17:82:fb:d7:23:0d:6a:5b:0b:76:1b:0b:96:
         30:ae:ed:9c:2c:67:53:e0:e0:6f:eb:57:b5:26:fa:09:cc:94:
         02:e1:9c:bb:ef:c7:b3:52:29:f0:cc:e3:e0:67:9d:75:74:a5:
         35:ba:c2:1e:d2:67:37:3d:dd:2a:b0:eb:c2:e9:7a:a0:fb:0d:
         10:c3:5c:3f:b0:fe:af:d3:e9:de:8c:fe:10:55:df:31:2b:46:
         37:46:74:b1:c8:20:48:16:18:10:8e:b5:86:6d:39:63:93:cd:
         01:c5:92:ed:87:05:83:eb:c9:6b:b5:3f:7f:20:e0:5c:ae:5c:
         0d:ff:77:a7:a6:ef:bc:0b:44:9d:a3:69:cf:67:f6:64:c2:57:
         df:39:ff:7d:6b:d4:78:64:0c:26:56:0b:f2:ea:1f:7c:b6:bb:
         21:42:c1:3a:20:8b:45:87:98:3f:c8:f4:40:a5:2f:fd:cf:8d:
         07:ee:e3:21:e3:81:c0:d5:06:14:24:fd:fd:34:1b:f5:92:25:
         8a:55:c7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:48 2025 by rpki-client