Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7FE47B22E1D00A16DC5F3525694FF71E9831FBEF.cer
File:                     7FE47B22E1D00A16DC5F3525694FF71E9831FBEF.cer (raw, json)
Hash identifier:          bMUhAspx4UQ1Uelto9hwsssbPr6GZwkQmh1yY2ILdzg=
Subject key identifier:   7F:E4:7B:22:E1:D0:0A:16:DC:5F:35:25:69:4F:F7:1E:98:31:FB:EF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5C712B7BEF32C9C317E7F8CFE9865BE2BDEDD431
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/7FE47B22E1D00A16DC5F3525694FF71E9831FBEF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 19 Aug 2025 14:26:01 +0000
Certificate not after:    Tue 18 Aug 2026 14:31:01 +0000
Subordinate resources:    AS: 264013
                          IP: 143.0.184.0/22
                          IP: 170.0.152.0/22
                          IP: 187.120.176.0/20
                          IP: 2804:2968::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 11:35:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:71:2b:7b:ef:32:c9:c3:17:e7:f8:cf:e9:86:5b:e2:bd:ed:d4:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 19 14:26:01 2025 GMT
            Not After : Aug 18 14:31:01 2026 GMT
        Subject: CN=7FE47B22E1D00A16DC5F3525694FF71E9831FBEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8a:5f:45:42:4f:fb:3c:15:d5:a6:1b:de:ee:
                    4f:06:2c:40:b9:a0:6d:a6:ab:0a:1a:78:fe:f5:85:
                    86:aa:94:9c:b7:17:37:eb:3f:12:8a:78:05:21:ed:
                    22:b7:a2:ad:3d:6b:58:5e:97:37:d4:10:24:c0:c9:
                    ec:a8:a4:5a:60:f0:f9:7f:eb:96:aa:3c:df:86:f2:
                    98:91:c1:1f:cf:98:27:26:3e:d7:3e:73:c8:f2:1a:
                    cf:df:3f:78:f8:ab:b3:e9:fb:25:14:17:5f:ad:9d:
                    4c:27:cc:4a:99:47:96:4d:bb:c4:35:5a:86:25:50:
                    be:73:d4:18:c8:28:35:b3:f3:dc:b1:49:24:f5:83:
                    61:c1:64:cb:52:f8:63:dc:8f:7e:7a:2c:3c:ad:68:
                    9c:01:4d:d4:88:9c:8b:68:a1:43:57:f8:de:a5:ae:
                    ff:a7:87:62:e1:eb:c1:3c:d0:f6:74:bf:ef:c0:c5:
                    a1:e6:09:99:a0:d4:34:55:cd:d1:73:1c:f8:e6:16:
                    0f:77:50:64:84:a7:b1:24:74:02:59:3c:08:69:45:
                    ac:0c:55:eb:50:04:fe:11:6f:ec:bd:05:fa:7b:bc:
                    bf:5c:15:11:3a:90:a8:74:21:89:a8:25:55:e5:69:
                    3f:36:19:a5:57:c4:7f:d6:46:c9:92:fe:8c:2a:06:
                    19:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7F:E4:7B:22:E1:D0:0A:16:DC:5F:35:25:69:4F:F7:1E:98:31:FB:EF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/7FE47B22E1D00A16DC5F3525694FF71E9831FBEF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.184.0/22
                  170.0.152.0/22
                  187.120.176.0/20
                IPv6:
                  2804:2968::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264013

    Signature Algorithm: sha256WithRSAEncryption
         b5:52:95:ce:ba:19:d8:d5:37:f1:94:8b:b5:01:91:99:bc:0a:
         fa:c7:85:1e:5d:32:99:bb:fc:33:fc:30:50:b7:31:47:fc:05:
         ed:ee:69:b8:23:43:c8:af:6b:88:e4:cc:5f:21:1b:8e:2c:fa:
         b2:6d:fc:64:d6:15:ba:a6:f9:e0:58:3f:67:de:18:6f:38:87:
         83:c5:11:93:8b:a3:cc:f3:9d:32:34:f3:64:31:82:4d:51:b2:
         5e:4f:7b:1f:dc:9f:b2:7d:3d:0d:10:1a:2a:9d:63:86:d4:93:
         ed:02:d8:ea:6a:aa:cd:72:4a:84:90:c7:92:ba:aa:33:d7:cb:
         20:49:38:04:5a:3a:6b:57:4d:3a:5f:3c:ea:40:fc:6e:29:1d:
         68:90:8f:b5:93:04:97:c8:64:77:cc:3d:0c:e9:84:2a:8a:88:
         7c:ce:fd:55:99:42:c6:70:0f:db:b8:12:fa:cb:34:ad:c8:a9:
         04:c6:4c:52:a2:f0:4b:fd:0b:f0:02:6b:d7:46:ab:e8:bd:7b:
         bb:97:c4:da:47:cb:b8:ae:e0:bf:df:75:fc:e1:e5:ac:3a:93:
         65:8e:f5:62:9a:d3:2a:9f:58:95:fe:f1:4a:1e:40:dd:bf:fc:
         2f:d1:d7:4d:01:cb:78:04:e8:24:65:59:cb:7f:fe:32:fb:87:
         79:21:08:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 12:01:08 2025 by rpki-client