Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BE068B06DE5C783A9921447A392452ED53F22837.cer
File:                     BE068B06DE5C783A9921447A392452ED53F22837.cer (raw, json)
Hash identifier:          mipaKL/KhLYdrYQekHi9TszVVMKFw4cKPQ8KHk8aTIc=
Subject key identifier:   BE:06:8B:06:DE:5C:78:3A:99:21:44:7A:39:24:52:ED:53:F2:28:37
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       59D14370CC85C48F27DC187AB49455FAF5D89480
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/BE068B06DE5C783A9921447A392452ED53F22837.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 14:29:24 +0000
Certificate not after:    Fri 06 Mar 2026 14:34:24 +0000
Subordinate resources:    AS: 262441
                          IP: 177.44.240.0/20
                          IP: 179.106.128.0/20
                          IP: 179.190.64.0/19
                          IP: 2801:80:2800::/40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 22:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d1:43:70:cc:85:c4:8f:27:dc:18:7a:b4:94:55:fa:f5:d8:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 14:29:24 2025 GMT
            Not After : Mar  6 14:34:24 2026 GMT
        Subject: CN=BE068B06DE5C783A9921447A392452ED53F22837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d0:b5:4a:62:27:ec:90:46:13:dc:34:e5:59:
                    04:e6:8e:fd:03:b6:90:e9:20:cc:36:97:67:b7:1c:
                    aa:ee:40:a7:9a:44:e1:99:5a:fe:d6:50:3e:b8:35:
                    c0:c6:c2:54:be:15:a2:d4:8a:25:ee:37:09:5e:93:
                    87:73:e6:bc:39:5f:2b:3a:09:e6:b2:0b:1f:6a:88:
                    7d:9d:d5:92:59:06:62:aa:bc:6b:23:61:66:49:67:
                    28:32:73:e7:d9:27:a1:29:d3:4c:4a:da:e8:88:0c:
                    26:cc:70:45:f9:e2:e7:c9:31:97:a4:5e:b6:a1:f7:
                    8e:0b:fb:e5:d6:e0:9e:ed:b8:1f:33:f7:ac:3f:8c:
                    b0:9b:c1:11:f1:04:1f:0e:09:3f:a2:91:ac:16:32:
                    e9:22:b5:45:bb:c4:aa:1c:a6:2b:94:8c:eb:2a:9f:
                    42:a4:56:fd:c8:5a:a7:3e:cf:5a:ad:eb:80:35:64:
                    5f:a4:52:5a:87:1b:43:8a:62:d3:58:7d:b0:10:b6:
                    04:eb:b2:30:2c:d0:02:27:a7:3d:c5:30:b5:e0:68:
                    ce:8e:77:2d:6e:3f:9c:3e:68:36:77:9b:25:43:6b:
                    0e:13:1e:b8:f1:47:93:d4:97:05:97:af:cc:a6:21:
                    6e:d1:a0:7c:86:ca:33:4f:ab:52:72:a6:82:80:73:
                    4d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BE:06:8B:06:DE:5C:78:3A:99:21:44:7A:39:24:52:ED:53:F2:28:37
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/BE068B06DE5C783A9921447A392452ED53F22837.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.240.0/20
                  179.106.128.0/20
                  179.190.64.0/19
                IPv6:
                  2801:80:2800::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262441

    Signature Algorithm: sha256WithRSAEncryption
         d7:d9:62:ed:dc:b0:e0:c1:b8:c2:3d:d6:fe:68:37:b6:18:7b:
         9e:57:31:3d:85:af:27:2e:db:dc:f7:b1:40:7c:12:47:88:e9:
         7f:3b:8a:8f:75:85:00:76:d9:8b:84:c4:01:3a:c0:5f:19:6b:
         da:ac:64:45:f4:0e:bd:9b:f2:cb:d9:e7:f1:dc:b1:e2:a2:13:
         f3:90:ce:4a:7f:21:c6:5e:46:7e:88:48:71:45:4a:4c:1b:30:
         81:86:bc:e0:b0:95:54:78:93:ed:66:af:67:fc:9d:90:e0:83:
         2b:ec:2a:26:80:60:d9:a3:44:4d:71:37:21:95:7d:31:44:97:
         94:61:dc:9e:fb:9d:0d:e2:56:09:17:b2:f7:91:6d:9e:9f:d3:
         21:2c:2c:1e:0c:2b:54:d1:35:ad:7b:84:c4:c3:f9:e9:70:66:
         14:1c:6a:ba:3b:c4:45:68:bf:2f:d4:ad:ad:3e:6c:95:be:f9:
         08:8b:49:ca:02:63:dd:09:38:c5:75:36:8a:87:95:54:8f:46:
         ce:86:08:60:ee:fd:17:e0:cf:bc:cd:5b:ba:76:e8:74:59:fa:
         ce:ad:60:78:3d:c4:a6:a1:0a:77:e6:e0:b7:a7:1e:23:d2:2d:
         db:2b:82:8f:00:36:44:84:98:02:24:a0:96:b0:3d:dd:e3:9b:
         62:0b:10:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:29:28 2025 by rpki-client