Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BBAC19E92B4587A3AD58AD449516DFD76BB3CD73.cer
File:                     BBAC19E92B4587A3AD58AD449516DFD76BB3CD73.cer (raw, json)
Hash identifier:          Ywz25ALIyz1h7KoeovsYqOC7mF9yoOZuKFKkf3Y43b4=
Subject key identifier:   BB:AC:19:E9:2B:45:87:A3:AD:58:AD:44:95:16:DF:D7:6B:B3:CD:73
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4CB24F634618E913EAA1627FE0E5D18082222D2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4epocpKUp1Q9fFFL4QGa9CnsLFZyrJ4Xn4uFGj8qxT7E/0/BBAC19E92B4587A3AD58AD449516DFD76BB3CD73.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4epocpKUp1Q9fFFL4QGa9CnsLFZyrJ4Xn4uFGj8qxT7E/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 26 Mar 2025 23:37:46 +0000
Certificate not after:    Wed 25 Mar 2026 23:42:46 +0000
Subordinate resources:    AS: 267286
                          IP: 45.233.8.0/22
                          IP: 2804:4b24::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 04:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:b2:4f:63:46:18:e9:13:ea:a1:62:7f:e0:e5:d1:80:82:22:2d:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 26 23:37:46 2025 GMT
            Not After : Mar 25 23:42:46 2026 GMT
        Subject: CN=BBAC19E92B4587A3AD58AD449516DFD76BB3CD73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cf:7a:4d:76:12:40:22:d1:ea:5e:3c:0f:3b:
                    37:69:21:95:9a:27:6c:d9:06:75:f5:ad:e9:89:3d:
                    f0:8e:f3:f4:a9:a7:3f:8c:82:58:65:30:1c:01:78:
                    35:45:45:71:9a:af:2e:02:b1:8d:d5:b4:f6:c4:b2:
                    69:6e:82:ac:23:89:80:cb:97:64:f7:27:ae:2c:75:
                    bd:05:01:50:48:c9:e7:74:61:d1:53:c6:df:ef:09:
                    6f:22:26:3d:ea:cb:f0:1a:a1:b2:59:35:d7:8e:6e:
                    e8:2b:a5:dc:3e:4a:22:04:20:63:3e:4c:77:be:af:
                    fb:ec:37:ac:14:59:0c:f4:21:7e:cd:f4:94:bd:f1:
                    27:7d:a9:01:1b:2f:e6:28:b5:4c:47:4e:c1:5f:8c:
                    59:b5:80:98:fb:ad:e2:3a:da:60:68:aa:5b:e2:55:
                    96:af:ac:fe:f1:dc:81:c2:af:2e:2d:45:2e:14:d2:
                    16:1c:0a:76:15:52:a2:fa:87:1c:4b:4f:93:c9:3f:
                    0f:43:33:96:dc:3f:ad:12:2a:c7:25:6a:6a:2f:bb:
                    e2:5a:be:d5:de:da:79:7e:ba:82:ce:bf:87:10:f1:
                    18:fc:8d:08:3b:4f:d7:4e:44:05:78:76:3f:b0:8a:
                    19:4e:e2:de:ef:03:75:2b:a9:71:7c:30:dc:47:27:
                    4a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BB:AC:19:E9:2B:45:87:A3:AD:58:AD:44:95:16:DF:D7:6B:B3:CD:73
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4epocpKUp1Q9fFFL4QGa9CnsLFZyrJ4Xn4uFGj8qxT7E/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4epocpKUp1Q9fFFL4QGa9CnsLFZyrJ4Xn4uFGj8qxT7E/0/BBAC19E92B4587A3AD58AD449516DFD76BB3CD73.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.8.0/22
                IPv6:
                  2804:4b24::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267286

    Signature Algorithm: sha256WithRSAEncryption
         ae:04:ae:01:00:cc:05:da:13:ad:82:8c:72:5e:04:00:46:4c:
         48:be:55:12:6c:ab:9e:2e:59:a5:fe:c4:53:d5:11:11:b9:78:
         75:8b:ca:ec:fb:53:92:0b:eb:bd:94:3f:7b:93:13:b0:c6:c4:
         42:7e:88:42:0b:15:df:81:17:15:ee:8c:5d:78:2c:13:c4:8f:
         18:05:19:12:c8:d1:73:04:89:1b:d6:4e:85:e6:9c:66:67:04:
         43:61:eb:26:b5:6a:07:27:a1:5a:3d:d1:e3:6f:c5:44:12:03:
         fd:1a:29:a7:9a:88:d3:67:06:7d:1d:15:f6:e6:b4:0c:67:2d:
         1b:03:e8:6a:01:f3:7e:fa:38:39:ee:61:12:d7:8e:0e:bf:c2:
         66:da:d5:00:78:c1:64:bf:00:03:e9:bd:a6:59:11:be:4d:73:
         b9:87:7b:2a:25:85:84:42:93:fb:43:00:23:98:6d:13:c5:3c:
         01:7c:e3:4c:eb:4a:ab:d4:40:0e:39:64:0c:b4:eb:41:9d:91:
         7d:cd:8a:8f:a5:00:47:36:5d:c2:46:5f:fa:ef:bc:b1:c4:94:
         00:87:7c:aa:e2:ab:56:5c:0a:c0:22:7d:28:67:66:16:fc:20:
         87:f0:65:8c:9f:b8:19:b3:b8:c3:00:0b:f6:3b:d6:8b:fc:e3:
         db:de:e8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:01:35 2025 by rpki-client