Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C7B317212DB90FCD08BA0577C6C41F8E21F91280.cer
File:                     C7B317212DB90FCD08BA0577C6C41F8E21F91280.cer (raw, json)
Hash identifier:          cJF2/3W5Gxqj9Q8Z+ssdDCZo8Ggi2gN2i8oSs+ZM724=
Subject key identifier:   C7:B3:17:21:2D:B9:0F:CD:08:BA:05:77:C6:C4:1F:8E:21:F9:12:80
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       22BEE7E973D49BEEDDC138CFC8AF9751734DE830
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C7BCFrztVKNksnNEZUWcEM8iFoYPhXbAtF3dA43N82wK/1/C7B317212DB90FCD08BA0577C6C41F8E21F91280.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C7BCFrztVKNksnNEZUWcEM8iFoYPhXbAtF3dA43N82wK/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:35:42 +0000
Certificate not after:    Wed 04 Mar 2026 18:40:42 +0000
Subordinate resources:    AS: 269387
                          IP: 45.185.168.0/22
                          IP: 2804:63d8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:be:e7:e9:73:d4:9b:ee:dd:c1:38:cf:c8:af:97:51:73:4d:e8:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:35:42 2025 GMT
            Not After : Mar  4 18:40:42 2026 GMT
        Subject: CN=C7B317212DB90FCD08BA0577C6C41F8E21F91280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:26:60:89:cb:5f:a7:1e:e1:1f:19:48:c1:0a:
                    1b:ac:c7:06:c6:d7:f2:52:2d:dc:6b:42:c3:27:b5:
                    e2:de:4b:a6:e3:3c:86:36:0e:26:42:d0:96:f7:75:
                    c8:3c:61:f2:96:85:56:91:df:c2:90:ff:3f:01:af:
                    04:ee:b8:ba:19:8e:2f:bd:54:cf:36:5f:7c:36:8f:
                    66:9a:2f:4b:79:e4:4c:85:09:4f:e5:c3:2f:ad:04:
                    b8:ea:e2:24:77:4c:53:22:5f:80:08:7e:d7:da:4c:
                    6e:0c:71:cb:5c:92:f2:73:8b:ad:fb:9f:c4:e6:f4:
                    27:66:c7:8b:5b:af:62:32:c8:2c:f0:89:9a:0f:29:
                    af:31:90:88:e0:6a:e2:e8:4b:be:f8:86:c3:ff:9d:
                    e0:f9:2a:ff:1e:e3:c7:aa:05:9f:3f:ea:48:de:ca:
                    ea:34:41:cb:bb:75:15:b6:11:21:91:59:d7:a2:10:
                    7e:a8:81:52:d0:21:e0:66:71:6d:8b:38:2d:41:e3:
                    de:07:64:a8:83:ce:e2:b1:fd:b6:bc:3c:16:1f:da:
                    bb:22:a7:51:87:c0:2b:d4:6b:a5:48:ef:fc:87:a0:
                    dd:6b:97:92:d7:55:7a:ca:60:01:93:44:87:f7:92:
                    f3:90:da:65:95:18:6d:7a:64:73:26:73:ba:45:cf:
                    37:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C7:B3:17:21:2D:B9:0F:CD:08:BA:05:77:C6:C4:1F:8E:21:F9:12:80
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C7BCFrztVKNksnNEZUWcEM8iFoYPhXbAtF3dA43N82wK/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C7BCFrztVKNksnNEZUWcEM8iFoYPhXbAtF3dA43N82wK/1/C7B317212DB90FCD08BA0577C6C41F8E21F91280.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.168.0/22
                IPv6:
                  2804:63d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269387

    Signature Algorithm: sha256WithRSAEncryption
         d9:b7:22:85:f3:bb:5d:10:05:40:b7:e7:15:22:ea:77:f8:0b:
         5d:ea:91:0c:7f:b1:fe:c6:f0:a2:c1:22:f4:8f:28:49:af:cb:
         2d:b8:e1:ab:e6:f3:a7:7a:0e:a1:b4:c4:0d:8f:2f:d8:3e:44:
         bd:13:0c:62:34:f0:80:0c:b7:db:7c:36:cd:07:5b:db:70:7e:
         89:80:9a:df:1e:ae:ee:80:6f:61:c4:91:04:41:50:b1:9c:0e:
         85:b1:5d:af:67:8c:2a:d7:9a:0d:1c:84:20:b9:93:d0:98:0b:
         bd:f8:e5:e3:a9:f8:6e:f3:ec:bb:5d:a0:0c:6b:86:e3:f4:88:
         e0:3f:4a:f6:1c:0d:f7:8a:ed:c7:4c:3b:e2:08:35:70:cc:4c:
         a3:2a:fd:b7:9a:23:6a:d4:36:84:5c:e4:68:17:38:bc:cb:c4:
         56:21:07:8c:51:3c:c9:e1:ac:9e:a5:ba:88:c8:00:41:7b:67:
         b3:34:03:db:2d:20:4b:2a:3c:db:ac:fe:47:f8:19:3d:20:a9:
         a9:9d:fd:64:05:33:c3:88:d6:5b:54:a0:40:99:c2:e9:88:4b:
         4c:78:c7:a7:a0:7b:dd:a2:ef:95:dd:27:bc:90:45:38:5a:0f:
         09:2b:5b:4f:01:86:07:23:94:fb:06:8a:99:fc:91:10:f2:53:
         71:77:41:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:17:56 2025 by rpki-client