Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/719575E8618FCC47BDBFE563F69F5D0962836551.cer
File:                     719575E8618FCC47BDBFE563F69F5D0962836551.cer (raw, json)
Hash identifier:          cXIBZKQuAzr5vM3e+Yht7Gp+Ds5TJUFvIbB5bilUo54=
Subject key identifier:   71:95:75:E8:61:8F:CC:47:BD:BF:E5:63:F6:9F:5D:09:62:83:65:51
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3CA02DD446B95FA3E3F51D9049A1B1489A6D3540
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/0/719575E8618FCC47BDBFE563F69F5D0962836551.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 17 Mar 2025 19:05:20 +0000
Certificate not after:    Mon 16 Mar 2026 19:10:20 +0000
Subordinate resources:    AS: 262317
                          IP: 177.91.120.0/21
                          IP: 177.124.64.0/21
                          IP: 2804:bac::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a0:2d:d4:46:b9:5f:a3:e3:f5:1d:90:49:a1:b1:48:9a:6d:35:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 17 19:05:20 2025 GMT
            Not After : Mar 16 19:10:20 2026 GMT
        Subject: CN=719575E8618FCC47BDBFE563F69F5D0962836551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c0:4c:e1:88:b1:aa:1a:df:52:1f:72:4d:28:
                    65:6a:26:da:7b:97:df:84:3c:af:a5:63:57:35:37:
                    f4:01:7d:7f:28:4c:86:0c:10:32:6e:ca:e0:c0:81:
                    48:dd:d8:39:58:e8:02:6c:ef:e3:4b:8a:42:7f:1c:
                    e1:59:55:66:71:75:ac:2a:a9:2f:5f:10:c5:a9:09:
                    2a:57:93:1c:f0:88:36:08:d6:02:8d:77:58:99:0b:
                    dd:e6:3c:56:6a:75:1f:12:a7:63:57:6d:0e:b2:bb:
                    85:2c:b7:76:05:66:51:a3:0e:99:00:db:70:51:30:
                    66:0f:e3:66:ac:da:ee:e0:52:0c:2d:fc:6d:be:b2:
                    c0:72:1b:ba:fb:26:8d:9d:73:c1:fe:12:49:30:9a:
                    0a:19:69:76:03:e5:2c:9a:4d:74:ab:8e:86:57:5f:
                    77:8a:8f:3a:02:36:43:2e:bd:6b:db:7d:57:7a:2d:
                    82:ed:4d:97:32:54:4c:df:bd:69:7c:bf:69:7e:65:
                    b0:4f:16:a7:ed:af:a3:30:76:04:3b:ac:98:85:ce:
                    a3:75:fe:64:08:7a:6d:e6:22:df:11:a0:49:6b:1e:
                    6e:c8:4c:a7:81:7c:dc:4d:5e:70:cc:f4:8a:79:d9:
                    7d:92:47:31:31:9d:34:66:70:ef:4c:a6:ac:f2:e7:
                    45:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                71:95:75:E8:61:8F:CC:47:BD:BF:E5:63:F6:9F:5D:09:62:83:65:51
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/0/719575E8618FCC47BDBFE563F69F5D0962836551.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.120.0/21
                  177.124.64.0/21
                IPv6:
                  2804:bac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262317

    Signature Algorithm: sha256WithRSAEncryption
         38:30:55:5a:fd:a6:5d:1d:fb:7e:29:70:ba:bb:7b:f7:4a:a2:
         62:4e:d5:f7:87:b8:81:33:51:4a:7a:3c:bb:d9:57:32:4d:a8:
         f6:bc:cf:b8:b0:60:49:20:ba:2e:b7:37:aa:54:b6:0e:8d:86:
         c2:64:25:5d:8b:b5:da:c1:aa:f4:aa:70:78:de:7b:e1:b5:38:
         2c:26:36:06:26:2a:a3:97:c9:1d:e7:a4:03:f2:91:fe:59:b6:
         53:44:4f:f9:73:31:b0:bd:af:1e:5c:75:0d:b4:1b:7d:fa:98:
         62:7d:b8:28:d2:2c:4e:6f:8a:94:5f:2e:4e:de:05:45:5a:e7:
         1a:68:6b:f6:4b:b9:a0:97:c0:61:fb:8a:fa:56:b6:f9:a8:af:
         36:4f:6e:3d:be:ea:79:e1:8c:5a:59:1f:5e:f9:69:89:13:09:
         8c:f7:40:c5:bb:3d:a3:6e:9c:1c:87:8d:37:cd:92:8a:58:d9:
         fd:21:c8:96:83:61:f2:c3:2f:4d:35:b4:09:bf:17:b9:c2:bc:
         ae:de:29:52:dd:e3:fb:c8:69:4b:fa:4d:93:f6:c2:e5:c3:32:
         f7:84:01:0d:ca:0e:b3:f5:5a:cb:34:30:35:c3:91:bd:13:49:
         55:80:5e:0d:8f:68:01:bb:dc:e1:33:75:79:3a:90:51:7a:8b:
         39:a6:e0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:23:10 2025 by rpki-client