Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B99BCBB2975CCC597837197FB941B244052D47D4.cer
File:                     B99BCBB2975CCC597837197FB941B244052D47D4.cer (raw, json)
Hash identifier:          TCdEZOKw+MiDud7j5QhralKLwarjx7fLXEcdjgFE1I4=
Subject key identifier:   B9:9B:CB:B2:97:5C:CC:59:78:37:19:7F:B9:41:B2:44:05:2D:47:D4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3E62CAC0D72DAEF381A66D8AD937371FD672A3B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/B99BCBB2975CCC597837197FB941B244052D47D4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 02 Apr 2025 12:11:34 +0000
Certificate not after:    Wed 01 Apr 2026 12:16:34 +0000
Subordinate resources:    AS: 268092
                          IP: 45.168.220.0/22
                          IP: 2804:57e0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 12:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:62:ca:c0:d7:2d:ae:f3:81:a6:6d:8a:d9:37:37:1f:d6:72:a3:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  2 12:11:34 2025 GMT
            Not After : Apr  1 12:16:34 2026 GMT
        Subject: CN=B99BCBB2975CCC597837197FB941B244052D47D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d1:20:ec:5b:01:c7:4a:96:ae:2a:66:87:1a:
                    75:aa:c6:4d:54:12:f6:13:e5:46:2f:03:22:3c:32:
                    b2:52:2a:de:f8:63:da:86:f9:9e:ad:07:2f:fd:28:
                    b5:52:79:22:cf:af:73:64:b3:65:53:d3:b5:c7:9f:
                    28:90:be:e1:75:76:7e:09:3b:37:8d:88:dc:ff:01:
                    83:0a:d5:7d:41:8b:3d:8a:3e:cb:53:21:5d:cb:ae:
                    1b:07:57:a2:c7:22:3b:71:0a:4a:25:c5:f8:ba:1b:
                    97:bf:cd:e4:ad:7c:4b:9e:09:8b:06:33:9b:6e:c8:
                    47:e3:73:b0:ec:15:ff:00:56:5e:2b:48:e3:7b:16:
                    6d:86:7f:99:9f:c5:85:1f:56:2f:ef:4b:bc:51:c4:
                    00:b9:3c:21:f8:a2:de:75:c3:07:a3:71:d2:99:fa:
                    12:70:31:28:38:7e:62:79:d5:14:fc:6d:24:0b:5f:
                    6f:04:e1:05:c3:65:53:28:56:21:41:82:8b:4e:60:
                    3d:4d:14:1d:d9:6b:e4:76:36:8c:cb:b7:b4:00:f5:
                    4d:5f:02:fe:c8:d8:da:cd:a2:34:3e:c1:5a:dc:4e:
                    33:22:86:47:47:40:58:4a:ca:f1:e8:b8:1f:55:93:
                    44:6b:39:bc:c3:70:05:28:31:51:26:b0:c5:67:42:
                    1c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B9:9B:CB:B2:97:5C:CC:59:78:37:19:7F:B9:41:B2:44:05:2D:47:D4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/B99BCBB2975CCC597837197FB941B244052D47D4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.220.0/22
                IPv6:
                  2804:57e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268092

    Signature Algorithm: sha256WithRSAEncryption
         16:33:57:1d:14:35:ab:79:d2:10:d4:1a:11:5b:7d:00:7f:43:
         0b:8b:bb:01:cf:eb:a1:73:f8:0a:32:8b:9f:e3:7c:a9:af:61:
         3d:9a:d1:20:fa:36:66:d8:78:c9:17:7f:73:17:e9:99:c7:62:
         94:33:23:15:2f:92:b7:1a:e6:24:6f:a1:f5:93:c1:3e:7a:e9:
         d0:3e:28:af:70:80:24:25:83:9d:ef:37:15:de:d2:95:dc:c7:
         35:ca:56:01:7c:0d:21:18:26:10:2b:37:09:df:c1:69:3a:2e:
         4c:c2:c6:b8:35:6c:65:a0:f7:15:a6:70:d7:50:df:9d:da:a3:
         c7:97:95:45:69:7d:9a:3a:a2:c8:ea:6b:0a:38:50:d4:85:d0:
         b2:1b:81:57:94:90:20:78:a9:21:6d:05:12:52:d6:7d:71:96:
         7d:6b:ea:ce:36:8d:9e:56:18:1c:f2:25:ff:16:44:b5:0f:ff:
         6b:99:5a:20:de:bc:95:08:cb:89:ee:85:6a:fc:34:e8:fa:e2:
         98:12:14:11:8c:03:f3:4e:41:dd:6b:4e:43:e9:e2:b0:8b:fa:
         6d:bd:62:48:5f:fa:4c:bc:0e:1e:60:23:e0:14:b3:75:b3:6b:
         25:08:89:37:9b:e8:9f:bf:fe:60:57:04:55:df:4b:65:af:44:
         4e:bd:ea:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:32:20 2025 by rpki-client