Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7DE6E0779DD8FBF98FE9AD24531A24F792D26451.cer
File:                     7DE6E0779DD8FBF98FE9AD24531A24F792D26451.cer (raw, json)
Hash identifier:          lqqZ/XAx8Q1bFADR3jY6lG2DyN22NXrVO5bPdZFPqoA=
Subject key identifier:   7D:E6:E0:77:9D:D8:FB:F9:8F:E9:AD:24:53:1A:24:F7:92:D2:64:51
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6BAD9B81ED93BA307B76F2A6D97D083A69F62EE4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/1/7DE6E0779DD8FBF98FE9AD24531A24F792D26451.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 00:55:14 +0000
Certificate not after:    Fri 06 Mar 2026 01:00:14 +0000
Subordinate resources:    AS: 10733
                          IP: 200.196.0.0/19
                          IP: 200.201.192.0 -- 200.202.31.255
                          IP: 2804:764::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 04:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ad:9b:81:ed:93:ba:30:7b:76:f2:a6:d9:7d:08:3a:69:f6:2e:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 00:55:14 2025 GMT
            Not After : Mar  6 01:00:14 2026 GMT
        Subject: CN=7DE6E0779DD8FBF98FE9AD24531A24F792D26451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9b:14:40:57:39:db:28:d1:a8:77:b2:34:68:
                    42:a1:33:a7:66:01:95:13:98:b2:19:e8:d6:dd:81:
                    a9:77:9a:93:4d:55:f1:85:9e:76:01:95:33:a4:e3:
                    16:4a:d9:ca:8c:b0:c4:8b:be:c1:43:30:6e:ce:6a:
                    6e:2a:8f:ce:23:e7:02:a7:79:f0:07:b0:b2:0e:b0:
                    83:62:de:19:56:29:df:85:63:bf:f6:c4:93:d3:22:
                    ac:1b:4e:7b:14:4a:32:92:34:36:5b:1b:eb:2c:fe:
                    23:0e:8f:58:cc:87:d0:81:14:12:04:d6:42:39:7e:
                    9b:45:cb:3c:78:13:01:c3:07:eb:a5:ad:bb:6a:03:
                    09:2d:96:5c:7e:d0:92:3f:75:46:90:ff:4f:86:2d:
                    3d:d0:15:2d:39:8a:a3:34:de:64:93:b2:06:c9:fa:
                    7f:8d:9b:10:d5:51:f1:08:f9:b7:66:01:62:b5:3e:
                    82:9b:b1:28:8d:3d:d0:20:3f:12:09:52:d3:ff:5f:
                    ce:64:46:a7:63:ff:6f:7a:41:c0:82:ec:c1:41:85:
                    c5:f4:fc:bc:f1:49:29:25:35:b2:dc:22:e2:ac:12:
                    d4:7a:37:a2:7b:9b:40:03:90:5f:35:0a:54:88:63:
                    8b:96:83:17:75:9b:20:30:20:45:4a:ab:84:d1:aa:
                    f0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7D:E6:E0:77:9D:D8:FB:F9:8F:E9:AD:24:53:1A:24:F7:92:D2:64:51
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/1/7DE6E0779DD8FBF98FE9AD24531A24F792D26451.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.0.0/19
                  200.201.192.0-200.202.31.255
                IPv6:
                  2804:764::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10733

    Signature Algorithm: sha256WithRSAEncryption
         84:ba:c2:55:99:53:ac:a1:6f:e7:34:b5:2c:a7:4c:58:af:50:
         36:fa:6f:68:49:d8:9a:24:39:ec:01:33:aa:b6:f1:31:cd:3c:
         d5:ca:8b:d2:76:b8:e0:78:11:af:64:e7:a2:1e:aa:82:55:ef:
         88:e3:3e:b8:71:c1:f8:e7:cf:00:a2:a0:cd:70:5c:d7:4c:6f:
         88:c3:09:7f:ef:53:d2:9f:8e:84:a9:64:24:ad:2c:42:7b:9a:
         c8:61:5e:6f:13:6b:00:16:20:1e:2b:80:f1:3c:d3:27:f5:8c:
         cf:b9:e2:77:0c:0f:cb:f0:32:62:a7:de:97:7d:f3:05:fb:b8:
         7a:2d:86:f7:18:ec:23:9d:a8:d3:36:25:12:58:e8:3b:11:1e:
         d0:0c:89:c6:10:0a:4c:7e:4e:64:22:6e:1e:f1:79:05:0b:1d:
         1a:2d:70:ca:b7:9c:86:12:6f:83:ff:e9:96:f1:96:46:93:be:
         0e:7c:4c:bd:af:b9:dd:47:e7:89:6c:11:c2:83:c4:af:e5:b9:
         56:f2:a8:7c:35:b7:b0:3f:58:0a:b1:91:ac:96:a0:eb:8a:41:
         98:31:2b:e6:c4:c5:d0:b3:87:19:67:f9:cc:5f:fa:93:4c:44:
         c3:48:17:cf:a4:32:71:6b:a4:ed:43:42:69:dc:6b:6b:8e:18:
         da:34:39:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:51:43 2025 by rpki-client