Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.cer
File:                     D2986464325E8FD5DF10CBFA8DD303EF12449774.cer (raw, json)
Hash identifier:          AJvjcdto77vPoecq/y/Wapbiiv9EGySLpKedToreyWg=
Subject key identifier:   D2:98:64:64:32:5E:8F:D5:DF:10:CB:FA:8D:D3:03:EF:12:44:97:74
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       37F032AD18C527F92633F82384139DC8EF4ADE38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 03:19:15 +0000
Certificate not after:    Fri 06 Mar 2026 03:24:15 +0000
Subordinate resources:    AS: 267640
                          IP: 45.71.248.0/22
                          IP: 2804:4494::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 07:09:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f0:32:ad:18:c5:27:f9:26:33:f8:23:84:13:9d:c8:ef:4a:de:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 03:19:15 2025 GMT
            Not After : Mar  6 03:24:15 2026 GMT
        Subject: CN=D2986464325E8FD5DF10CBFA8DD303EF12449774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:45:67:36:5f:71:42:09:aa:e3:e4:51:7a:bb:
                    5b:1b:26:39:56:68:fe:7a:56:ad:37:47:1c:38:e2:
                    08:7c:5a:4e:46:cd:3d:92:e8:29:4f:c9:9a:e0:4a:
                    bb:46:88:4a:97:73:28:d6:3b:b4:f1:a7:18:ac:1f:
                    d4:6d:d4:b8:e8:31:e2:7a:51:01:2b:b0:ee:4b:11:
                    0f:b2:ff:6d:a4:31:f2:f7:84:c9:1b:63:75:73:5d:
                    01:2e:9f:47:41:09:60:3e:7d:d5:87:ec:4b:48:d6:
                    ff:5d:c3:28:7a:f3:5d:2a:88:e0:0e:ba:7e:23:60:
                    25:89:1f:55:f4:24:6b:65:a8:77:66:cc:7d:51:fd:
                    77:9d:82:32:cd:d6:37:b0:df:6b:c5:65:40:73:a7:
                    7a:44:85:19:83:e6:3c:9c:13:3c:b3:0f:db:29:cb:
                    1a:0d:af:16:a3:ab:d9:d3:f4:29:a5:97:24:5f:90:
                    e9:3a:94:4d:f0:75:7a:9a:76:53:a3:35:c3:90:68:
                    fa:fa:a8:41:c3:df:ba:e3:0a:d0:65:b7:ed:35:29:
                    f5:03:31:c3:41:92:ed:ea:96:bc:98:c5:b8:78:65:
                    17:cd:48:47:3e:a5:9d:c6:c5:66:07:4d:e5:34:35:
                    c2:85:e1:47:bf:c4:a9:d3:7f:37:55:65:6f:97:24:
                    bb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D2:98:64:64:32:5E:8F:D5:DF:10:CB:FA:8D:D3:03:EF:12:44:97:74
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.248.0/22
                IPv6:
                  2804:4494::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267640

    Signature Algorithm: sha256WithRSAEncryption
         06:a4:fd:83:37:6f:10:45:6d:9c:88:c1:9c:21:c5:7c:2c:20:
         a2:9e:b8:4e:3f:92:ec:2d:20:68:8f:ee:a8:de:a1:53:8a:e8:
         b4:e2:e7:4e:aa:e7:8e:54:67:0d:44:8e:eb:e6:80:71:b4:9c:
         a5:fa:ee:b7:8c:d9:1d:5e:51:02:14:39:fd:b9:88:48:a4:63:
         ac:fa:27:39:f3:c6:04:1e:70:50:da:07:b2:ac:9c:5b:37:21:
         b6:9a:c0:c0:1e:ce:85:bd:cd:ee:fc:15:c2:b3:ce:6c:67:c2:
         dd:98:03:87:c9:de:73:5c:7c:f4:e2:a8:11:61:4c:3c:34:8f:
         06:ad:fa:9d:fc:94:ff:e6:34:06:71:87:55:d4:62:80:3f:13:
         10:68:b9:70:5c:c3:b8:4e:0f:b1:91:25:ab:96:c7:61:fb:27:
         14:b6:88:8e:44:92:dd:b7:bd:cf:05:f6:3a:8d:2d:15:b6:af:
         8a:a2:c0:3a:6c:d1:05:11:71:8e:43:3e:f5:5a:53:fd:c4:a4:
         69:45:db:e8:9d:f7:18:3c:3a:07:0f:3b:5b:98:e5:e3:a6:7f:
         cf:6f:f6:2c:dc:ae:f2:d1:01:44:17:f7:10:b4:40:a5:ea:d5:
         d4:32:a5:f9:fc:d9:68:12:c0:21:3f:bd:59:7c:05:2e:a8:b2:
         75:cd:ea:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:44:51 2025 by rpki-client