Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.cer
File:                     A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.cer (raw, json)
Hash identifier:          vJQ9ZOKwWy9krFpfAMhrAZmO6GlUzV3uU6IjSKW+t8g=
Subject key identifier:   A5:A3:3C:2B:9B:9B:1A:56:83:44:C1:6E:89:CE:84:E7:BC:E5:F0:41
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       542C7B5AD9AC17F9FAC580CF595ACD4005046F1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 27 Mar 2025 08:36:01 +0000
Certificate not after:    Thu 26 Mar 2026 08:41:01 +0000
Subordinate resources:    AS: 273689
                          IP: 2804:8abc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 20:36:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:2c:7b:5a:d9:ac:17:f9:fa:c5:80:cf:59:5a:cd:40:05:04:6f:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 27 08:36:01 2025 GMT
            Not After : Mar 26 08:41:01 2026 GMT
        Subject: CN=A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3b:00:8f:7e:b0:37:3c:f7:58:c7:db:b9:fc:
                    9d:1a:8f:23:74:15:13:b9:30:af:93:3e:28:7c:5c:
                    57:fb:5e:10:39:c2:77:a0:6f:a3:02:7e:21:4f:fc:
                    14:71:f5:6e:fb:1f:41:e7:7e:70:e1:33:33:b1:f8:
                    b2:dd:d1:04:13:b6:c0:9d:54:38:ce:3b:34:a3:e8:
                    c6:0d:2d:68:a9:69:3b:12:82:89:7a:1d:32:27:63:
                    54:57:ba:69:dd:f8:d7:fd:12:93:ae:8f:4d:aa:e1:
                    8b:1e:94:10:82:6d:2b:1a:8d:17:7e:24:c9:c5:34:
                    44:ca:dd:f2:df:8d:4b:c5:73:0a:66:82:3d:c9:da:
                    1a:a9:f4:0f:a4:00:c9:f9:f4:53:95:2d:f9:8b:57:
                    33:f2:73:34:17:7a:0f:36:09:ce:cc:96:10:db:2e:
                    7f:8a:cc:28:13:4b:b5:5d:6c:71:36:60:13:91:c7:
                    3c:c5:a5:f8:46:7d:10:f0:9f:b4:7a:b9:f5:82:2e:
                    c6:a4:92:8c:3b:34:82:ff:15:54:dc:20:f4:04:a0:
                    19:91:b6:18:07:76:49:2a:6f:36:97:93:0a:9c:ff:
                    b6:af:70:3a:11:a7:7d:f2:7f:f8:b3:f8:18:cf:38:
                    dc:bd:bd:73:36:de:05:c6:37:27:1a:82:01:73:17:
                    91:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A5:A3:3C:2B:9B:9B:1A:56:83:44:C1:6E:89:CE:84:E7:BC:E5:F0:41
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8abc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273689

    Signature Algorithm: sha256WithRSAEncryption
         d2:4b:0f:48:ae:77:9d:b7:5b:d3:44:fa:41:c1:8c:ce:87:88:
         6a:c3:76:c9:e2:eb:93:12:3c:a2:f0:01:28:c2:22:a9:28:f3:
         85:10:e9:18:03:5f:6a:b1:c1:bf:ff:e2:1c:f7:8d:6b:f5:b4:
         4e:6c:0b:2e:b2:06:38:9c:0b:46:c6:c0:d9:d7:16:cc:4e:d9:
         62:8b:b7:ac:ca:c2:8f:66:a2:c4:ee:4d:a0:7c:3a:6f:6e:96:
         55:d2:47:11:d4:6c:ce:67:af:e7:5a:bd:6c:da:36:0a:ae:bc:
         28:10:1b:25:30:17:0d:58:03:12:ce:95:40:d3:4e:49:7d:f2:
         f9:a8:1f:e0:50:43:7c:0f:9c:07:5b:b6:36:72:1a:3a:6c:7f:
         7d:35:f3:b4:ef:5a:c0:4b:21:80:80:e8:23:b5:d5:c1:6c:21:
         c1:43:ad:49:0d:7f:52:d4:1c:2b:74:72:85:f1:4e:28:a9:c7:
         a0:eb:9f:5f:af:85:51:23:57:35:5e:ae:2f:ce:61:ce:c7:69:
         5d:b9:4a:20:61:d1:e8:fc:fa:3d:dc:df:da:b6:eb:44:14:0f:
         88:c3:d9:b4:07:74:7a:c5:f2:e2:4c:82:43:4e:e4:a0:15:9e:
         ce:94:76:ea:ab:c2:36:40:f0:af:9f:9f:5d:70:2f:d6:48:17:
         e5:91:cf:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:47 2025 by rpki-client