Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A5455EE25C6FEB15A12789F15E975474289CE800.cer
File:                     A5455EE25C6FEB15A12789F15E975474289CE800.cer (raw, json)
Hash identifier:          xwRhP0ir/ZdPa1Sqt1bZPIXNbewB1vVLStenMRTMANQ=
Subject key identifier:   A5:45:5E:E2:5C:6F:EB:15:A1:27:89:F1:5E:97:54:74:28:9C:E8:00
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3C1D042EE4E5372DE6D1B6D36746C718105C8BE4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 07:55:49 +0000
Certificate not after:    Fri 06 Mar 2026 08:00:49 +0000
Subordinate resources:    AS: 262343
                          IP: 143.255.124.0/22
                          IP: 177.126.128.0/20
                          IP: 2804:80c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 23:35:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:1d:04:2e:e4:e5:37:2d:e6:d1:b6:d3:67:46:c7:18:10:5c:8b:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 07:55:49 2025 GMT
            Not After : Mar  6 08:00:49 2026 GMT
        Subject: CN=A5455EE25C6FEB15A12789F15E975474289CE800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:22:bc:5b:8d:54:83:63:85:88:2a:c3:37:cb:
                    a6:61:32:dd:51:a5:b1:99:30:5b:81:0e:fd:9a:8b:
                    71:31:d4:7f:8f:c4:2b:16:da:45:05:36:87:8d:bb:
                    1f:a9:8f:c1:2a:20:95:84:d9:66:2a:8a:84:cf:ca:
                    d9:5c:75:b3:3d:d0:04:61:93:4d:83:02:43:f1:83:
                    9b:7c:9d:cf:a3:d8:66:e8:dc:b7:35:7e:84:ea:05:
                    f0:ff:7c:21:3b:57:f3:48:a2:f7:fd:dd:7b:c2:f3:
                    06:c9:00:af:79:8a:ca:14:fb:3a:b4:c4:ba:dc:ab:
                    19:a3:0c:99:5d:f7:bf:41:5d:94:da:7f:aa:65:24:
                    d6:6f:d0:76:4c:fd:52:cd:80:3c:92:11:67:c9:f7:
                    68:07:df:a5:b0:34:98:85:87:a3:4e:cc:6c:d0:3a:
                    48:be:b8:b2:30:86:cf:9e:54:18:ca:41:8a:ba:c0:
                    1e:d3:1d:78:b0:13:62:e0:8b:56:46:35:d8:dc:24:
                    b5:70:54:30:11:37:f0:7e:78:57:13:8a:39:ec:36:
                    ca:33:f9:15:ec:cf:1c:6e:3d:5b:f7:10:4e:7a:10:
                    94:7b:2a:e0:e0:ad:cc:7e:a7:23:70:0d:23:b9:6d:
                    f5:09:9d:1f:63:79:02:09:7b:37:a4:8d:23:42:32:
                    87:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A5:45:5E:E2:5C:6F:EB:15:A1:27:89:F1:5E:97:54:74:28:9C:E8:00
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.124.0/22
                  177.126.128.0/20
                IPv6:
                  2804:80c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262343

    Signature Algorithm: sha256WithRSAEncryption
         73:c4:f9:d4:f0:29:c8:5f:58:b2:e8:eb:51:22:9e:10:46:9a:
         56:7c:11:39:15:57:86:4d:20:1f:bc:a2:95:41:42:75:48:c2:
         70:86:16:65:0d:78:e8:a6:02:ec:09:9a:43:5e:c8:cc:7d:5d:
         21:de:83:06:67:a3:e3:ca:3f:db:2b:7a:29:2f:9e:f6:cf:bc:
         5d:f9:a5:24:ed:92:ba:88:20:1a:fa:80:70:cc:59:7f:65:28:
         29:74:7d:10:51:7a:9d:0e:65:ef:45:72:f7:ae:d2:ee:06:32:
         c4:f9:3e:63:30:e0:0e:31:e4:2a:29:26:19:0a:bf:b7:4b:e0:
         4c:b2:70:2d:ea:4e:6d:8e:f1:79:f7:fa:fc:66:5c:61:b7:04:
         67:29:fb:52:ee:c1:2b:3f:f3:31:db:2c:59:ce:d7:d9:c3:5d:
         41:be:58:92:65:c3:fa:a0:d3:44:3d:1d:1d:ae:0f:09:c9:e8:
         8c:58:79:b5:f7:b8:24:30:d1:6a:08:1c:fd:d5:fd:d0:38:51:
         da:61:70:a8:01:30:31:0b:88:5d:60:21:bc:f8:0b:e8:78:2b:
         15:38:ce:eb:7e:37:d7:ee:0f:32:d8:76:ac:28:00:da:c9:02:
         2a:61:1d:cc:4b:ec:01:8d:c2:66:78:9c:ea:fd:91:29:d4:24:
         dc:bd:80:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:46:02 2025 by rpki-client