Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BE068B06DE5C783A9921447A392452ED53F22837.cer
File:                     BE068B06DE5C783A9921447A392452ED53F22837.cer (raw, json)
Hash identifier:          0TtRmGMJhXFOlh7V8l6a/vmDmWKlKsgb9+vWdOQMJn4=
Subject key identifier:   BE:06:8B:06:DE:5C:78:3A:99:21:44:7A:39:24:52:ED:53:F2:28:37
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2AEC18850F3B34EE3EA5B0341618BC6282D50E11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/BE068B06DE5C783A9921447A392452ED53F22837.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 12 May 2025 10:38:32 +0000
Certificate not after:    Mon 11 May 2026 10:43:32 +0000
Subordinate resources:    AS: 262441
                          IP: 177.44.240.0/20
                          IP: 179.106.128.0/20
                          IP: 179.190.64.0/19
                          IP: 2801:80:2800::/40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 02:38:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ec:18:85:0f:3b:34:ee:3e:a5:b0:34:16:18:bc:62:82:d5:0e:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 12 10:38:32 2025 GMT
            Not After : May 11 10:43:32 2026 GMT
        Subject: CN=BE068B06DE5C783A9921447A392452ED53F22837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d0:b5:4a:62:27:ec:90:46:13:dc:34:e5:59:
                    04:e6:8e:fd:03:b6:90:e9:20:cc:36:97:67:b7:1c:
                    aa:ee:40:a7:9a:44:e1:99:5a:fe:d6:50:3e:b8:35:
                    c0:c6:c2:54:be:15:a2:d4:8a:25:ee:37:09:5e:93:
                    87:73:e6:bc:39:5f:2b:3a:09:e6:b2:0b:1f:6a:88:
                    7d:9d:d5:92:59:06:62:aa:bc:6b:23:61:66:49:67:
                    28:32:73:e7:d9:27:a1:29:d3:4c:4a:da:e8:88:0c:
                    26:cc:70:45:f9:e2:e7:c9:31:97:a4:5e:b6:a1:f7:
                    8e:0b:fb:e5:d6:e0:9e:ed:b8:1f:33:f7:ac:3f:8c:
                    b0:9b:c1:11:f1:04:1f:0e:09:3f:a2:91:ac:16:32:
                    e9:22:b5:45:bb:c4:aa:1c:a6:2b:94:8c:eb:2a:9f:
                    42:a4:56:fd:c8:5a:a7:3e:cf:5a:ad:eb:80:35:64:
                    5f:a4:52:5a:87:1b:43:8a:62:d3:58:7d:b0:10:b6:
                    04:eb:b2:30:2c:d0:02:27:a7:3d:c5:30:b5:e0:68:
                    ce:8e:77:2d:6e:3f:9c:3e:68:36:77:9b:25:43:6b:
                    0e:13:1e:b8:f1:47:93:d4:97:05:97:af:cc:a6:21:
                    6e:d1:a0:7c:86:ca:33:4f:ab:52:72:a6:82:80:73:
                    4d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BE:06:8B:06:DE:5C:78:3A:99:21:44:7A:39:24:52:ED:53:F2:28:37
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/BE068B06DE5C783A9921447A392452ED53F22837.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.240.0/20
                  179.106.128.0/20
                  179.190.64.0/19
                IPv6:
                  2801:80:2800::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262441

    Signature Algorithm: sha256WithRSAEncryption
         69:30:eb:d3:1b:ff:58:e6:85:16:d1:d7:2e:37:9a:01:0c:b2:
         3d:6c:21:8a:e6:82:8f:59:bd:ec:f6:fe:f2:b8:8b:84:56:4b:
         43:3e:dd:2c:37:07:f4:d1:d9:04:ae:08:dc:2b:73:b0:9d:c5:
         33:dd:7f:60:7c:b9:75:0c:e0:73:26:00:c8:28:89:98:24:ae:
         7e:26:d7:be:44:88:b8:66:c5:bc:8f:df:3c:bf:90:70:fb:51:
         0c:fc:0f:5b:69:b3:79:81:fc:0c:76:ff:1e:dc:5d:b6:ce:ae:
         81:8a:dc:b3:8b:80:18:47:b5:92:af:de:e9:33:58:c3:9a:54:
         80:83:49:78:e6:bb:34:09:b0:3c:cf:07:a6:e4:a8:84:98:c0:
         1e:59:47:2d:98:2f:d4:6e:8e:88:fc:69:1b:fb:df:18:d1:b3:
         b3:26:e0:27:e5:bc:ae:95:58:65:ae:aa:26:b3:6c:b2:14:8a:
         86:5c:3d:99:b9:af:5f:96:75:07:c2:d4:da:6e:12:25:7d:73:
         5e:78:bd:8d:67:a8:b4:ca:12:a2:53:c6:55:a4:0b:86:c2:25:
         4f:31:a0:d1:d6:9d:3e:a6:80:e0:0a:18:8e:c6:ba:53:9a:d1:
         d9:b0:f0:30:50:5d:55:e3:c6:2a:80:ca:b9:70:13:85:26:2d:
         89:00:56:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:28:15 2025 by rpki-client