Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B92001871A07D03B31A6C890436B41249FAC3A6E.cer
File:                     B92001871A07D03B31A6C890436B41249FAC3A6E.cer (raw, json)
Hash identifier:          Dg6eByoUwH81nBTnlpmKPyKT4urydFM2bYyO2ehpIIM=
Subject key identifier:   B9:20:01:87:1A:07:D0:3B:31:A6:C8:90:43:6B:41:24:9F:AC:3A:6E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       37CE1C0B84FBA05878413619D8D9E1DF92CA94E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/1/B92001871A07D03B31A6C890436B41249FAC3A6E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 14:37:22 +0000
Certificate not after:    Fri 06 Mar 2026 14:42:22 +0000
Subordinate resources:    AS: 61754
                          IP: 131.100.40.0/22
                          IP: 143.202.52.0/22
                          IP: 170.83.68.0/22
                          IP: 2804:1be0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Apr 2025 14:59:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ce:1c:0b:84:fb:a0:58:78:41:36:19:d8:d9:e1:df:92:ca:94:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 14:37:22 2025 GMT
            Not After : Mar  6 14:42:22 2026 GMT
        Subject: CN=B92001871A07D03B31A6C890436B41249FAC3A6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5a:4f:1e:13:95:42:ad:64:de:de:0e:cd:e6:
                    0d:84:53:22:3f:c9:3d:10:16:28:0e:b1:ea:8b:61:
                    34:21:b2:fd:d6:a3:f2:aa:7b:e8:50:6e:a3:6e:0a:
                    eb:e3:bf:9e:f5:28:48:a6:4e:f7:ef:39:2b:99:03:
                    79:f9:56:0d:5e:39:46:e8:c0:f4:cb:da:66:df:61:
                    e2:19:6e:8b:2a:6c:b6:26:48:08:cf:28:bf:fe:21:
                    ba:c1:61:f3:97:13:11:15:48:17:97:91:54:c0:e1:
                    06:19:9c:25:3b:e0:39:20:ad:89:8a:04:25:6e:71:
                    4f:dd:0a:df:44:f1:26:84:61:5e:61:41:66:97:f7:
                    b1:74:5d:a5:9a:a4:07:d9:2b:31:f7:7f:ff:2f:25:
                    8b:71:fa:9d:d3:d1:f5:8d:fd:f9:09:4f:66:f6:3c:
                    9f:19:e3:7a:b1:a0:2f:c8:ed:cb:35:a9:b3:81:54:
                    b6:dd:cf:60:84:49:02:82:02:ec:f6:5c:8b:a9:33:
                    e7:e1:d7:57:4b:92:74:1e:9f:a5:e4:85:6d:99:43:
                    05:c9:95:9b:e5:12:bc:22:4f:64:fe:39:88:b5:a9:
                    e8:69:7e:69:0f:0c:fa:99:48:bf:5e:ae:5a:aa:2a:
                    52:9c:0c:2e:16:60:9c:93:65:ff:a4:81:46:47:9e:
                    67:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B9:20:01:87:1A:07:D0:3B:31:A6:C8:90:43:6B:41:24:9F:AC:3A:6E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/1/B92001871A07D03B31A6C890436B41249FAC3A6E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.40.0/22
                  143.202.52.0/22
                  170.83.68.0/22
                IPv6:
                  2804:1be0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61754

    Signature Algorithm: sha256WithRSAEncryption
         55:fa:47:35:30:2b:af:0b:9d:60:16:f7:12:70:29:59:d7:c7:
         05:f8:c9:09:21:1e:98:41:4e:ad:75:4a:46:c3:89:69:ec:ca:
         51:bc:81:46:be:3f:4e:f2:82:23:1b:a3:2a:ee:a2:6e:3e:58:
         d6:22:ff:e0:73:46:a8:e6:5e:83:50:75:8f:52:9d:8b:71:3c:
         7f:30:5c:00:67:7b:45:5b:63:76:4d:52:25:de:da:47:b5:dd:
         b0:ed:7c:8e:3c:2c:90:6a:98:54:dd:a2:f0:86:6f:32:a4:cb:
         0c:22:e5:7f:67:5d:4d:df:ef:e0:05:12:fe:6d:a7:22:a3:60:
         bf:c9:d5:2e:62:8b:85:6b:9e:23:5f:26:be:93:3c:2c:59:90:
         be:cc:90:26:4b:5d:3c:be:c4:e8:c3:a4:b6:94:19:c5:71:6c:
         a5:d1:d8:34:50:8f:7e:d7:04:91:03:21:c6:ef:6e:07:f0:a9:
         3e:cb:a0:64:27:bf:39:06:c0:de:7f:30:0d:7b:a0:a9:d4:9b:
         fd:fd:fa:a6:12:14:95:12:03:cf:81:9e:d4:5a:a2:14:ec:2a:
         9f:24:86:66:b5:85:31:e9:ed:29:38:45:f3:dc:55:2b:67:c5:
         b7:78:49:8e:17:9f:2c:23:ec:44:b7:f1:5d:be:c6:59:b5:a4:
         14:c0:05:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:38:37 2025 by rpki-client