Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AE1C058909826E8EDF13C554CAA858EC59CA1455.cer
File:                     AE1C058909826E8EDF13C554CAA858EC59CA1455.cer (raw, json)
Hash identifier:          NoyHxu8KWKB1uxXmm/s1SZOXc5le/Cdh3UckMtPmcPU=
Subject key identifier:   AE:1C:05:89:09:82:6E:8E:DF:13:C5:54:CA:A8:58:EC:59:CA:14:55
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       66433A13DDBB103511E1DDA74E43F03EB09AAC92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/1/AE1C058909826E8EDF13C554CAA858EC59CA1455.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 07:55:13 +0000
Certificate not after:    Fri 06 Mar 2026 08:00:13 +0000
Subordinate resources:    AS: 263903
                          IP: 138.204.140.0/22
                          IP: 170.247.112.0/22
                          IP: 2804:2778::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 02:36:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:43:3a:13:dd:bb:10:35:11:e1:dd:a7:4e:43:f0:3e:b0:9a:ac:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 07:55:13 2025 GMT
            Not After : Mar  6 08:00:13 2026 GMT
        Subject: CN=AE1C058909826E8EDF13C554CAA858EC59CA1455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fc:89:6c:61:9c:75:f1:56:20:7d:9d:35:92:
                    ed:ff:e8:ab:ea:a8:4e:b5:11:9a:3f:35:a7:40:f6:
                    4b:80:55:04:31:f9:bb:5e:f4:df:fc:b4:6a:c5:08:
                    19:39:68:94:df:99:bd:3d:e7:75:14:d8:ae:70:dd:
                    11:8e:da:a8:69:25:1f:9a:3e:68:4b:b8:67:50:5b:
                    ac:4e:6d:15:c7:e0:e5:e8:d1:74:5f:12:40:01:82:
                    06:6d:95:cc:b9:50:9a:32:0f:23:e9:3d:16:5b:a7:
                    f0:63:01:f7:a3:6f:e0:e4:e4:c2:04:c8:9b:ee:7b:
                    9f:ff:bf:e1:e5:7f:12:a0:ee:a5:99:9d:9b:86:82:
                    7f:88:8d:40:f7:16:bb:53:85:bc:d9:75:36:74:e0:
                    31:b4:30:dd:37:d1:0a:14:2b:28:70:8f:dc:2e:d3:
                    ad:51:71:e4:8a:25:b1:66:a5:37:ba:91:ff:40:68:
                    ab:c2:51:50:db:f1:46:d4:3b:88:70:b2:93:5d:54:
                    4e:70:d5:f6:02:0d:32:95:4a:5f:35:b8:2a:0e:d9:
                    06:16:ea:45:ac:7c:7e:2d:c7:37:79:82:2d:27:55:
                    3e:c2:92:a6:e8:7b:e7:05:d9:90:31:6a:5a:21:79:
                    7d:9a:c0:fd:63:36:d0:82:07:b5:27:ac:36:cf:b4:
                    7f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AE:1C:05:89:09:82:6E:8E:DF:13:C5:54:CA:A8:58:EC:59:CA:14:55
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/1/AE1C058909826E8EDF13C554CAA858EC59CA1455.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.140.0/22
                  170.247.112.0/22
                IPv6:
                  2804:2778::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263903

    Signature Algorithm: sha256WithRSAEncryption
         c5:62:94:d1:5b:86:37:f3:c5:81:f6:91:27:17:9f:3d:70:82:
         14:f6:14:e3:c0:ae:87:b5:97:63:99:5b:31:9c:21:63:14:15:
         e5:2d:25:41:30:9b:2a:79:f2:8c:9a:1b:51:27:da:be:71:47:
         7e:3b:3f:c2:cc:65:1e:eb:72:26:c7:2b:88:df:34:3e:d1:eb:
         3c:46:fe:b9:35:9f:a5:a1:8b:d9:9b:70:5a:b6:17:91:95:10:
         4f:8d:6a:76:89:d3:3d:68:00:03:29:b9:2c:8c:b8:d0:ca:64:
         74:cf:16:b1:16:54:2a:a9:9c:23:f1:19:2d:cf:69:c1:85:20:
         47:82:ae:cd:f7:40:61:25:78:99:6d:97:89:a9:36:79:59:55:
         4c:63:e7:be:83:99:1c:7b:e5:a6:f1:90:03:24:44:e3:3f:6e:
         c5:dd:37:12:ec:9a:02:79:89:07:9c:03:8d:10:11:dd:e4:38:
         96:d4:10:33:a9:c6:f1:e4:33:92:d1:5d:3b:c6:51:08:21:89:
         2d:f9:69:c8:1b:a5:23:be:91:ed:a1:7f:25:0e:81:cf:11:08:
         61:bf:4c:1b:6e:52:56:81:a8:56:5f:8f:da:06:70:d9:a4:d3:
         e6:ca:fc:dd:e1:48:76:35:1f:03:6e:b4:a7:ce:fc:bc:af:e9:
         f2:c4:d3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:41:27 2025 by rpki-client