Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/ACEF8FA1F536657A209246B168B346C65044943D.cer
File:                     ACEF8FA1F536657A209246B168B346C65044943D.cer (raw, json)
Hash identifier:          SWZHtZfCoX2Xy5hjwFWgpUmmh3jjcJFUCBptvz85UWs=
Subject key identifier:   AC:EF:8F:A1:F5:36:65:7A:20:92:46:B1:68:B3:46:C6:50:44:94:3D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       58881E5BCBE0920C72E08AFB39A0903220CEDBE6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/ACEF8FA1F536657A209246B168B346C65044943D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 19 Dec 2024 17:16:23 +0000
Certificate not after:    Thu 18 Dec 2025 17:21:23 +0000
Subordinate resources:    AS: 266534
                          IP: 160.238.144.0/22
                          IP: 2804:3d7c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 04:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:88:1e:5b:cb:e0:92:0c:72:e0:8a:fb:39:a0:90:32:20:ce:db:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 19 17:16:23 2024 GMT
            Not After : Dec 18 17:21:23 2025 GMT
        Subject: CN=ACEF8FA1F536657A209246B168B346C65044943D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a7:40:c7:7b:82:5b:3f:f3:5b:4d:72:e3:f0:
                    cc:45:03:d6:24:37:40:ce:cb:9a:0c:87:aa:cb:c1:
                    09:f5:f8:2c:b0:8c:61:0e:7a:42:f4:5d:6d:c5:c8:
                    67:7d:76:0f:ed:2f:60:04:d9:6d:7e:b1:8b:a5:85:
                    6d:ce:07:f8:d2:81:47:66:04:37:cb:a8:04:ec:bf:
                    33:a4:99:cf:f5:4a:39:f6:10:20:83:bf:7e:43:2b:
                    b8:e4:cc:a2:73:c9:8c:5c:a7:64:e2:04:46:d5:bc:
                    99:2c:96:d0:6b:cc:54:dc:22:23:c1:36:e4:7c:39:
                    8b:92:ef:f6:88:6a:79:f1:39:b3:b0:19:ff:09:3f:
                    67:3a:c8:40:7b:43:7c:a2:7e:a4:6e:27:99:36:bb:
                    e1:a3:aa:e3:7a:35:8d:41:f7:e8:36:47:a9:39:09:
                    19:77:1d:9e:dd:32:c1:94:4a:b2:1b:02:e2:6e:94:
                    c5:ff:5b:1f:23:0a:19:e2:cb:44:9f:54:df:2f:67:
                    c3:76:4b:3e:28:f8:37:2b:b5:93:aa:14:ad:cf:0e:
                    97:eb:ad:36:10:e0:22:67:f4:f2:07:1e:8b:f3:24:
                    bb:ef:3c:a8:12:8a:45:ec:6e:95:62:89:16:f4:61:
                    99:7d:6f:de:bd:24:d8:c5:f8:b2:73:96:eb:33:dc:
                    d6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AC:EF:8F:A1:F5:36:65:7A:20:92:46:B1:68:B3:46:C6:50:44:94:3D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/ACEF8FA1F536657A209246B168B346C65044943D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.144.0/22
                IPv6:
                  2804:3d7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266534

    Signature Algorithm: sha256WithRSAEncryption
         9d:00:2e:8b:c5:76:d0:f1:eb:f7:b3:61:fe:2b:42:bb:c1:31:
         c3:e7:b0:8d:fe:a4:96:e6:34:54:08:24:46:77:88:fc:8d:84:
         68:c0:77:6d:3c:9d:ce:ad:a8:61:28:e8:eb:88:ba:0f:52:6a:
         9b:3a:0b:b5:2a:c3:fe:5f:6c:47:0e:2f:e1:ea:c5:f6:8e:ad:
         4c:08:b2:6b:d9:46:67:f1:80:db:41:d9:63:3d:d9:cd:55:0d:
         37:17:ed:9e:e7:de:3f:17:6d:32:42:52:94:1f:51:4f:ab:df:
         8f:a2:b4:4b:55:c5:13:4f:2d:fd:7e:2a:d9:23:04:85:cc:f0:
         58:40:13:93:0c:c9:67:95:dd:17:52:70:8d:51:a5:90:3e:16:
         e2:b1:62:7b:8a:7d:bd:d9:13:1e:9d:40:84:ea:8b:69:5c:4b:
         08:73:37:36:cd:e2:c5:25:5e:ce:9a:9d:ef:8e:f0:99:e3:ab:
         95:5d:f6:95:5c:ca:38:b1:b3:6c:11:cd:3e:80:f8:a6:7a:fe:
         c2:2e:f5:dd:1e:20:16:23:ab:e7:4f:2a:0a:22:b7:3a:b5:2a:
         c4:be:f9:7d:cf:34:ea:4d:cc:72:f7:e8:80:de:65:2a:b1:d7:
         db:ea:7a:a3:a3:02:be:2e:ef:a8:3d:01:da:81:0b:e8:91:fc:
         0c:0f:b6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:33:52 2025 by rpki-client