Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/724E697E1673A7C11A6F50E51FCE489942BAAA02.cer
File:                     724E697E1673A7C11A6F50E51FCE489942BAAA02.cer (raw, json)
Hash identifier:          wqN/DpEgLUTlyK8ythekQEsPea/JvUJkBaOK1RyuC1s=
Subject key identifier:   72:4E:69:7E:16:73:A7:C1:1A:6F:50:E5:1F:CE:48:99:42:BA:AA:02
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1E0E205D8B8FE8A93D1160FFFEFC6C474752C0D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3w7rh7r94tNhE51b1U3eW8hUhBUDeFsS7f31BFDT8oBL/0/724E697E1673A7C11A6F50E51FCE489942BAAA02.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3w7rh7r94tNhE51b1U3eW8hUhBUDeFsS7f31BFDT8oBL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 24 Apr 2025 17:03:25 +0000
Certificate not after:    Thu 23 Apr 2026 17:08:25 +0000
Subordinate resources:    AS: 268504
                          IP: 45.162.120.0/22
                          IP: 2804:523c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Jun 2025 18:31:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:0e:20:5d:8b:8f:e8:a9:3d:11:60:ff:fe:fc:6c:47:47:52:c0:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 24 17:03:25 2025 GMT
            Not After : Apr 23 17:08:25 2026 GMT
        Subject: CN=724E697E1673A7C11A6F50E51FCE489942BAAA02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fa:92:3b:fb:fc:1d:3b:96:f5:d2:5c:11:45:
                    db:d8:c5:ae:c6:0d:16:74:81:d0:93:38:29:99:02:
                    dc:02:4c:28:c6:e2:5f:5a:15:87:93:08:d4:fb:57:
                    95:52:ca:35:9d:a4:66:5e:19:ce:16:ce:63:15:73:
                    a2:65:0a:da:34:ee:6e:0f:7b:96:46:79:ae:d4:7b:
                    dc:32:de:34:0c:33:06:16:05:89:f8:19:25:f6:5c:
                    d6:eb:32:bf:3f:95:35:00:d6:b3:ae:f5:34:77:3f:
                    73:6d:a4:cf:82:fb:0d:2b:e4:fd:c4:a3:d9:bd:3e:
                    3e:e5:57:0a:1c:1a:18:59:a1:91:98:fa:5b:56:5c:
                    df:f3:a9:2c:e3:81:6b:ff:e7:3c:07:a9:87:b4:d4:
                    6a:97:db:99:c0:b7:a8:d2:35:25:fa:f8:99:dd:31:
                    ca:26:b8:66:83:c7:c7:2e:16:7a:c0:7e:ef:67:be:
                    f6:69:84:12:b3:37:76:d9:2a:29:81:15:23:e5:cd:
                    c9:02:4f:b1:50:2a:a2:d2:b4:36:0c:61:39:3c:d8:
                    df:2a:10:bc:03:de:2f:c8:49:7a:ca:f6:06:8a:58:
                    1a:6f:2a:65:a0:ed:b0:fb:b8:8f:b3:b6:db:4c:4b:
                    8a:22:a4:84:17:06:24:50:47:c0:eb:61:b9:a2:6e:
                    4b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                72:4E:69:7E:16:73:A7:C1:1A:6F:50:E5:1F:CE:48:99:42:BA:AA:02
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3w7rh7r94tNhE51b1U3eW8hUhBUDeFsS7f31BFDT8oBL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3w7rh7r94tNhE51b1U3eW8hUhBUDeFsS7f31BFDT8oBL/0/724E697E1673A7C11A6F50E51FCE489942BAAA02.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.120.0/22
                IPv6:
                  2804:523c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268504

    Signature Algorithm: sha256WithRSAEncryption
         2a:66:2f:bd:ae:87:7e:56:c8:35:5f:89:50:40:4a:63:79:99:
         2f:35:28:1c:29:2d:17:ca:2b:74:f4:11:71:b1:3e:c7:32:19:
         db:ac:f5:33:33:9d:45:32:bd:40:36:0e:0c:e7:51:e1:ff:63:
         5e:11:20:68:e7:20:fc:08:76:af:1b:2a:9a:cd:a3:4f:ab:19:
         79:42:71:5e:e8:66:91:1c:7c:66:2a:7f:fb:61:ca:4e:a2:d7:
         05:26:6b:30:a4:be:87:29:50:88:c2:7a:3c:43:22:55:d7:e5:
         0b:0e:99:f8:94:9d:59:17:b6:8f:b8:8c:6b:07:ec:89:d7:c9:
         6a:49:84:7b:d8:b8:f3:c8:76:7b:85:2a:ab:5f:67:f0:a3:f0:
         79:16:2a:71:4c:7e:48:6f:6a:3b:aa:42:a9:27:a6:b1:fb:35:
         34:72:3a:ff:55:b3:1d:c1:9e:e6:0a:0d:63:e6:04:14:dd:1e:
         53:da:9a:c0:d4:a6:65:2e:58:43:52:6f:78:d2:d0:6f:a2:56:
         20:1f:ec:da:67:58:bd:b7:66:a7:04:d3:4f:f0:6a:66:87:42:
         74:10:d9:98:39:62:b0:78:81:50:cd:6b:97:b5:a4:be:81:f2:
         77:42:b8:21:6d:e4:81:9a:d8:48:bc:ec:70:da:eb:e6:74:6c:
         46:b7:3f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 16:52:15 2025 by rpki-client