Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.cer
File:                     8FA5DE968220D66A9164CA3AA24677EF9C127EE8.cer (raw, json)
Hash identifier:          mpTlx40qYsm+Pv+pv+QwT6FJwwWQlCJJt/7JrnzskYk=
Subject key identifier:   8F:A5:DE:96:82:20:D6:6A:91:64:CA:3A:A2:46:77:EF:9C:12:7E:E8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2188AE0FD0EF7AFF00C8235E7A697C01063DCEF8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 02:19:09 +0000
Certificate not after:    Thu 05 Mar 2026 02:24:09 +0000
Subordinate resources:    AS: 262601
                          IP: 177.75.240.0/20
                          IP: 2804:6ac::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 03:50:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:88:ae:0f:d0:ef:7a:ff:00:c8:23:5e:7a:69:7c:01:06:3d:ce:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 02:19:09 2025 GMT
            Not After : Mar  5 02:24:09 2026 GMT
        Subject: CN=8FA5DE968220D66A9164CA3AA24677EF9C127EE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:78:93:5d:25:a0:36:0e:b3:49:90:80:63:62:
                    b8:56:6c:4b:cd:e5:c5:fb:39:04:82:6f:42:9e:83:
                    37:81:ee:08:a4:88:33:09:1a:1e:46:0b:22:6d:20:
                    cd:9c:8e:f5:3d:32:8e:09:e5:83:14:25:5f:cb:37:
                    6d:82:b5:a8:d9:dc:94:54:5f:72:44:a2:93:79:57:
                    67:28:71:e8:4a:b3:86:fe:77:67:bb:f0:eb:67:65:
                    7c:2d:54:65:6b:ab:47:5a:73:6c:7d:57:3a:9b:61:
                    19:c3:f3:07:c9:74:44:7d:f7:12:9b:68:9c:72:ac:
                    7f:e1:97:19:39:c0:7a:76:f1:c8:23:f9:d9:11:6c:
                    22:6a:37:01:a1:bb:0f:24:b7:2b:98:21:f4:c0:66:
                    90:fc:62:a9:ed:4c:34:0f:c3:77:43:36:7a:c0:c9:
                    91:8c:c4:f9:47:51:53:70:92:3e:bc:01:05:26:e6:
                    ae:6a:ad:22:8e:3c:ec:72:2e:d7:69:19:83:7f:05:
                    8d:84:85:08:28:84:34:0e:4b:0d:b1:b7:39:00:75:
                    86:b6:f5:1e:a3:8e:72:1f:77:5a:cf:0c:4e:dc:52:
                    e5:9a:37:1d:34:f7:b3:9b:78:e8:1b:4b:06:fc:e0:
                    61:37:70:e2:ba:8b:40:c7:35:70:fe:71:a6:cf:64:
                    03:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8F:A5:DE:96:82:20:D6:6A:91:64:CA:3A:A2:46:77:EF:9C:12:7E:E8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.240.0/20
                IPv6:
                  2804:6ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262601

    Signature Algorithm: sha256WithRSAEncryption
         11:9a:ae:4b:a4:78:96:db:18:5a:00:a7:42:c5:5a:95:a5:9e:
         b9:67:51:c1:c0:2a:9a:d6:97:b5:c7:46:c5:36:df:24:6c:cb:
         bb:2e:3d:cf:18:13:68:2e:1d:47:3d:96:a7:e6:7c:51:ae:84:
         6b:48:f9:c1:01:3c:e4:c3:52:a5:43:53:ce:72:bd:3f:09:91:
         b2:16:0e:d0:45:08:0e:c1:db:8f:c1:3a:09:29:26:b7:ee:0f:
         b7:59:40:d3:e8:f0:d9:06:ba:36:5f:15:fb:52:a0:f9:c5:32:
         d0:b4:a9:00:05:cf:0f:8e:04:92:3d:39:69:28:aa:fc:b3:a3:
         6d:ad:50:e8:b3:24:f1:3b:54:db:3d:52:2f:4d:ba:4d:1b:27:
         17:de:ea:8d:2c:31:31:47:ca:c1:73:8e:46:dc:a6:0d:74:01:
         6c:c6:f1:40:35:08:0b:b3:5c:cf:3a:86:c9:02:e5:c4:14:3c:
         bd:1e:cd:c8:dd:b7:ee:02:52:ce:36:08:bf:28:4b:84:69:9e:
         58:0b:18:67:2a:e5:b3:34:25:ae:dc:38:2c:ce:5e:55:65:51:
         7a:39:8c:52:27:89:e6:4c:c8:44:42:50:32:79:65:13:42:a3:
         ab:65:bc:c9:54:a3:ff:6f:9c:b8:92:73:21:3e:67:2d:5b:c9:
         d7:99:41:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:16:20 2025 by rpki-client