Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D5DA077DAEF3F74CB48A14E1CCA1756A32D46ECE.cer
File:                     D5DA077DAEF3F74CB48A14E1CCA1756A32D46ECE.cer (raw, json)
Hash identifier:          cRlrgWgvqh2VO6YGA5mkwPFgxCUsIxSDWDdbyTxSsIk=
Subject key identifier:   D5:DA:07:7D:AE:F3:F7:4C:B4:8A:14:E1:CC:A1:75:6A:32:D4:6E:CE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       235CFFEDAD4F1BC8DA452EC10BD7CC26AF6C1378
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/D5DA077DAEF3F74CB48A14E1CCA1756A32D46ECE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 26 Dec 2024 18:04:13 +0000
Certificate not after:    Thu 25 Dec 2025 18:09:13 +0000
Subordinate resources:    AS: 269288
                          IP: 45.183.164.0/22
                          IP: 2804:6248::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 20:42:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:5c:ff:ed:ad:4f:1b:c8:da:45:2e:c1:0b:d7:cc:26:af:6c:13:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 26 18:04:13 2024 GMT
            Not After : Dec 25 18:09:13 2025 GMT
        Subject: CN=D5DA077DAEF3F74CB48A14E1CCA1756A32D46ECE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3f:a1:d1:6b:28:7a:3d:e0:16:44:66:7e:04:
                    2e:00:e6:c9:b0:90:d2:13:e3:60:09:33:c1:eb:45:
                    d2:ae:31:20:d5:74:23:3e:ad:ce:88:01:3e:e0:3e:
                    dc:0d:2c:c6:f5:60:39:78:70:81:c0:ad:ff:e8:72:
                    42:df:36:76:89:4a:b3:f1:22:f7:97:15:8e:7a:b5:
                    2a:29:0d:38:42:fc:ae:e3:8f:2a:fd:45:0f:6a:b9:
                    53:b1:b5:7f:5f:f4:15:c7:2a:36:a8:43:a2:45:b6:
                    96:b9:d8:6d:a4:7d:79:41:92:d8:4f:d7:3e:f9:8d:
                    a7:04:d1:a3:9e:15:93:bf:d6:64:8c:ad:36:3d:8a:
                    72:e9:fc:72:79:4f:6a:2a:af:0f:c6:e4:88:d3:d1:
                    56:45:f8:4e:19:50:25:c6:a0:d8:c1:a0:9d:24:ef:
                    90:a5:78:65:29:d3:af:c9:28:18:11:06:ae:58:0d:
                    20:17:e5:28:8d:91:6a:e4:ce:5e:15:a7:87:fe:1f:
                    58:43:53:1f:24:54:cb:5d:d5:e9:9d:99:69:6a:a4:
                    50:75:cb:ab:a9:ab:8b:ac:dd:63:a8:95:b1:f7:17:
                    a6:04:80:34:62:a6:c7:9f:f8:21:dc:31:c0:50:be:
                    5d:cf:8d:d8:89:fc:59:1d:bf:cf:6f:3a:cf:54:f3:
                    d0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D5:DA:07:7D:AE:F3:F7:4C:B4:8A:14:E1:CC:A1:75:6A:32:D4:6E:CE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/D5DA077DAEF3F74CB48A14E1CCA1756A32D46ECE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.164.0/22
                IPv6:
                  2804:6248::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269288

    Signature Algorithm: sha256WithRSAEncryption
         5c:b3:e7:c8:1d:5f:be:63:25:32:1f:84:cd:b9:de:58:d7:c8:
         2b:34:d9:c4:de:ac:54:11:b5:21:4f:1b:a7:4c:d7:ef:3a:3c:
         d8:5a:60:29:0b:c8:4c:12:bb:ee:bd:68:de:27:91:87:ce:d5:
         65:1b:4f:94:f1:fa:8b:0e:9d:8f:73:dc:b8:2c:5a:4a:49:19:
         10:dc:06:f0:d0:e1:fc:1d:c9:82:98:c4:8b:18:bb:2f:67:75:
         6c:c2:ca:55:00:dd:a3:7c:66:32:14:f1:60:cc:c5:eb:57:7d:
         60:d0:e4:70:6e:cf:06:d8:3f:72:42:51:cd:30:28:df:ec:c5:
         19:b1:b3:0e:4d:23:f8:2b:89:91:a5:35:53:0e:c2:fb:89:38:
         e0:0e:4c:b9:3b:7b:66:b4:98:82:af:3c:e8:10:4e:90:f8:2a:
         b6:69:84:7f:cd:95:36:50:a3:8b:b1:03:5e:c3:dd:e8:5b:48:
         84:2c:27:0d:5b:f0:1d:2c:40:37:a8:e7:19:bf:1f:09:fe:a4:
         1c:b6:07:5f:5f:b6:f6:06:96:b5:6f:b8:1f:43:86:e9:43:be:
         dd:3f:49:30:8c:a6:62:60:ee:ad:66:0f:bf:37:ff:8b:b8:c7:
         be:d9:f4:5e:2d:f4:b8:9e:ef:eb:64:9c:f4:da:74:b5:1f:8f:
         0d:31:a0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:52:05 2025 by rpki-client