Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AEFCE99BCCB845E4188E4E279659D0E23617385F.cer
File:                     AEFCE99BCCB845E4188E4E279659D0E23617385F.cer (raw, json)
Hash identifier:          rzplHqDvDcP/+7PU697yWbFp5FDCfUWlRk+eLmxyq+4=
Subject key identifier:   AE:FC:E9:9B:CC:B8:45:E4:18:8E:4E:27:96:59:D0:E2:36:17:38:5F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2495851169B89BE3F4D18F5C91544895BA505E85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/27xVxwVG1vgqEetHrzrLHyUMK7rfSj18MxT7vfTd1wFV/0/AEFCE99BCCB845E4188E4E279659D0E23617385F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/27xVxwVG1vgqEetHrzrLHyUMK7rfSj18MxT7vfTd1wFV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 28 Jan 2025 13:50:40 +0000
Certificate not after:    Tue 27 Jan 2026 13:55:40 +0000
Subordinate resources:    AS: 270953
                          IP: 186.26.100.0/22
                          IP: 2804:7404::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:95:85:11:69:b8:9b:e3:f4:d1:8f:5c:91:54:48:95:ba:50:5e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 28 13:50:40 2025 GMT
            Not After : Jan 27 13:55:40 2026 GMT
        Subject: CN=AEFCE99BCCB845E4188E4E279659D0E23617385F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:17:da:3d:1d:27:96:b7:17:1a:62:df:af:2a:
                    59:0d:d7:a1:52:4c:bf:8f:b5:9d:e7:a1:5a:2a:63:
                    a9:97:6a:40:0b:4f:45:38:35:26:b0:32:0b:97:cb:
                    5f:3f:ec:d6:a8:66:5e:58:09:26:2d:54:3d:46:ef:
                    b0:8b:27:6b:a7:d3:5a:71:7d:34:3f:43:78:7e:21:
                    21:67:4c:90:3f:ba:47:2e:d0:b2:b8:86:05:e7:c2:
                    60:10:eb:1a:6c:48:fc:64:cb:ab:d7:61:e3:c7:e0:
                    10:f7:a6:e5:52:6c:77:24:75:8e:16:89:3e:59:da:
                    7a:5b:b1:db:2d:95:8a:0b:57:83:93:f4:0c:0a:49:
                    23:01:b1:19:a7:33:35:10:a4:91:2c:c4:8c:10:9c:
                    88:18:95:9d:66:c4:f1:50:9a:50:2e:f9:31:59:2c:
                    6a:ba:12:48:12:42:d4:2b:9d:a6:47:eb:71:92:8f:
                    75:8c:a6:05:26:5b:a6:c2:20:82:d6:9d:2f:de:53:
                    4d:1b:1c:e8:7c:4d:70:65:3b:5d:a9:8f:95:6c:fc:
                    dd:c2:c9:cc:87:59:51:a8:48:c3:b1:e9:cf:9f:81:
                    e3:39:47:0d:7d:48:b5:aa:84:96:94:74:35:89:2d:
                    30:b6:92:de:e9:95:9e:7e:ec:d5:9f:db:63:e5:4e:
                    f0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AE:FC:E9:9B:CC:B8:45:E4:18:8E:4E:27:96:59:D0:E2:36:17:38:5F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/27xVxwVG1vgqEetHrzrLHyUMK7rfSj18MxT7vfTd1wFV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/27xVxwVG1vgqEetHrzrLHyUMK7rfSj18MxT7vfTd1wFV/0/AEFCE99BCCB845E4188E4E279659D0E23617385F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.26.100.0/22
                IPv6:
                  2804:7404::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270953

    Signature Algorithm: sha256WithRSAEncryption
         4a:d0:6a:d5:a8:a4:61:f3:c7:d3:68:9a:09:f3:91:e2:a6:06:
         2b:be:b8:c8:fd:2f:a9:d4:46:7e:a4:0b:b0:d6:eb:ef:fb:f5:
         c1:f3:a9:e9:a1:34:2d:a3:46:74:80:fd:9a:5c:d3:b4:7d:be:
         0f:da:19:14:ac:7b:92:85:7f:5d:b0:de:b5:e5:85:3a:20:36:
         97:52:15:94:8c:19:8e:78:ab:bf:bc:ad:a4:4e:60:83:a9:57:
         09:22:71:a2:2f:57:c4:b2:c6:90:79:77:02:4e:b6:bb:e0:7d:
         f5:42:04:9a:21:30:7e:07:07:ef:47:86:07:7d:67:96:9f:e8:
         6f:58:dd:e8:eb:fa:5e:dd:5c:62:6d:d4:b4:1b:7f:c0:81:b6:
         61:97:9b:14:d0:45:a6:3e:f9:80:4b:18:c3:5b:10:08:3e:6d:
         86:29:a1:72:46:fc:c4:6b:cb:9e:71:32:06:e3:01:9f:d1:0c:
         b5:a6:b7:f2:00:46:b6:3f:42:10:7a:e6:82:8e:39:fa:90:94:
         cc:94:37:00:9f:ae:c9:a4:c3:c2:23:02:77:b4:f3:6f:65:49:
         17:7d:2d:55:4c:cd:c5:76:4d:a7:c1:b8:1e:b2:16:9d:95:16:
         6f:f9:f3:95:00:a7:d9:37:9b:b8:4f:ed:d9:ab:15:05:4a:68:
         8c:1b:87:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:38:15 2025 by rpki-client