Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A39AB07F573D04E5845A8A1E723EAE291A21091A.cer
File:                     A39AB07F573D04E5845A8A1E723EAE291A21091A.cer (raw, json)
Hash identifier:          mjobf6A6UVVO2Ih7qSJ94Dg7CvKnHF82jMRNcCP84nI=
Subject key identifier:   A3:9A:B0:7F:57:3D:04:E5:84:5A:8A:1E:72:3E:AE:29:1A:21:09:1A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3FE7C8E1F3F792FE7F23DB026EF97295A9089C7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AcM4J3E3vGyd8cxGNVdyazgfAMqUek44WDbdoG1Dkvqs/0/A39AB07F573D04E5845A8A1E723EAE291A21091A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AcM4J3E3vGyd8cxGNVdyazgfAMqUek44WDbdoG1Dkvqs/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 16 Jan 2025 21:23:53 +0000
Certificate not after:    Thu 15 Jan 2026 21:28:53 +0000
Subordinate resources:    AS: 61929
                          IP: 200.9.124.0/22
                          IP: 2804:1850::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 04:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:e7:c8:e1:f3:f7:92:fe:7f:23:db:02:6e:f9:72:95:a9:08:9c:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 16 21:23:53 2025 GMT
            Not After : Jan 15 21:28:53 2026 GMT
        Subject: CN=A39AB07F573D04E5845A8A1E723EAE291A21091A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b8:e3:be:5d:b7:f9:07:ba:0b:30:13:2a:be:
                    9b:35:13:b3:62:f3:a2:f1:6b:db:f5:ed:0b:01:0f:
                    58:ca:10:f4:54:86:46:4a:ee:06:55:f2:0a:65:d3:
                    2b:5e:0d:82:c6:90:68:d7:b7:0a:bd:bd:a4:5e:d3:
                    3d:fa:8a:4e:e8:40:7b:03:0f:75:23:59:05:d2:7b:
                    5d:fa:86:85:c0:f7:8f:19:66:01:52:34:b5:ed:f9:
                    aa:39:5e:58:70:5b:b0:13:d3:d6:05:8a:1f:9a:6b:
                    48:61:e5:4e:b6:31:79:06:de:c8:8a:7a:62:dd:23:
                    cb:23:97:ce:d0:ad:e4:34:fe:db:03:f7:1d:34:6f:
                    ba:2a:70:e0:01:8e:5b:06:ee:f9:50:98:5b:3a:35:
                    af:30:43:e9:1d:71:fd:6b:97:fb:38:14:cc:96:78:
                    e3:e1:6f:0d:75:29:c3:75:e8:ba:56:41:cd:57:bb:
                    9c:5f:af:14:bb:bc:83:ad:1f:73:6c:bb:d4:12:00:
                    20:c4:20:d4:00:eb:11:fb:1a:8f:1a:e0:6d:56:fa:
                    ce:5f:75:b6:8e:4c:d8:e3:eb:a9:47:ba:3c:cf:82:
                    7b:a4:16:b6:a4:04:48:75:44:05:56:ee:cc:e3:38:
                    f1:8f:1c:8d:9a:1c:02:fa:d2:c0:d7:53:c5:e8:1e:
                    18:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A3:9A:B0:7F:57:3D:04:E5:84:5A:8A:1E:72:3E:AE:29:1A:21:09:1A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AcM4J3E3vGyd8cxGNVdyazgfAMqUek44WDbdoG1Dkvqs/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AcM4J3E3vGyd8cxGNVdyazgfAMqUek44WDbdoG1Dkvqs/0/A39AB07F573D04E5845A8A1E723EAE291A21091A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.124.0/22
                IPv6:
                  2804:1850::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61929

    Signature Algorithm: sha256WithRSAEncryption
         08:f8:e3:7e:7a:14:60:b8:4a:12:ed:2c:9a:d5:5d:90:73:dd:
         23:59:e2:68:e8:86:05:dc:bc:10:ff:7e:78:d5:d0:b4:ef:70:
         50:8c:63:4a:37:ba:59:7d:ec:df:da:0d:38:b9:b6:2e:14:71:
         f3:6d:43:8e:02:26:0e:c8:1f:90:78:a0:4b:90:27:17:5b:f6:
         29:27:6a:41:c9:00:c1:6c:21:cd:ff:49:b7:72:ec:19:1e:0f:
         19:ee:c6:5a:98:48:88:64:d1:16:58:7e:c3:5f:22:70:e7:8e:
         43:44:2f:50:2d:11:28:f6:c7:5b:f6:cc:e5:24:ae:a6:37:0e:
         5f:bf:ed:f4:af:8a:5b:19:a1:00:11:40:87:ca:db:b8:7b:62:
         08:78:5d:f0:60:c5:93:32:f0:10:b4:49:23:c8:ea:07:57:50:
         ae:06:55:a7:23:d1:70:a4:a7:cf:c7:c9:8a:24:76:a4:8b:57:
         fa:df:af:31:74:d0:8d:27:d0:06:ef:9c:47:88:1b:6e:83:02:
         17:ef:ee:6f:c3:89:9c:cf:6a:3d:37:ed:e3:6c:9b:79:fd:7e:
         77:32:3c:f5:68:37:71:1f:fe:8c:1a:8d:ae:cc:8b:9d:20:cf:
         f2:59:e2:3c:05:43:71:8a:05:cb:c2:c4:3c:e1:e6:7e:0e:37:
         e3:8d:3b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:33:41 2025 by rpki-client