Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DB055820B43AFF7A7173228557B8758637A96D68.cer
File:                     DB055820B43AFF7A7173228557B8758637A96D68.cer (raw, json)
Hash identifier:          a2AEmy0PB/raJ0jIa/Hfq3zqy1i/3L9GvJzRWPA1VyQ=
Subject key identifier:   DB:05:58:20:B4:3A:FF:7A:71:73:22:85:57:B8:75:86:37:A9:6D:68
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2EBDF1AF90F6A174B28C56A5D8A8E1EACA179224
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/DB055820B43AFF7A7173228557B8758637A96D68.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 02 May 2025 18:03:16 +0000
Certificate not after:    Fri 01 May 2026 18:08:16 +0000
Subordinate resources:    AS: 265487
                          IP: 168.197.144.0/22
                          IP: 2804:34e8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Jun 2025 11:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:bd:f1:af:90:f6:a1:74:b2:8c:56:a5:d8:a8:e1:ea:ca:17:92:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  2 18:03:16 2025 GMT
            Not After : May  1 18:08:16 2026 GMT
        Subject: CN=DB055820B43AFF7A7173228557B8758637A96D68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e9:5d:b5:80:9f:01:f8:55:89:21:57:24:51:
                    f4:65:2a:3e:ea:8e:af:a8:e2:5d:a1:a3:3c:d4:7d:
                    ed:c9:87:34:f0:57:cb:e7:2a:22:d8:df:73:c5:48:
                    9d:1d:09:c3:24:4c:56:35:ae:02:c1:52:41:8b:27:
                    74:df:79:bc:93:43:9e:92:7c:f4:50:44:c1:69:1b:
                    49:74:c9:67:3b:b1:a9:d5:be:a3:04:74:23:1f:a4:
                    30:28:8e:3e:44:88:19:fc:f1:18:33:c1:e5:48:6b:
                    da:0d:07:9e:89:34:36:b0:42:4e:18:69:4d:45:1a:
                    0e:02:f1:58:6e:d2:17:00:fc:23:0e:35:9a:78:39:
                    11:f5:9e:8b:c2:1e:b1:df:0a:25:b4:11:62:ff:7e:
                    67:40:c9:d6:96:41:e5:62:f3:b5:87:fd:74:56:80:
                    dc:cc:03:5e:c9:9b:9c:59:1a:08:bd:e0:37:e4:cd:
                    9f:2f:38:59:ad:43:e3:5a:ff:7d:ef:8a:19:c1:fd:
                    ff:e3:c4:e0:fa:16:0b:03:62:e2:62:ce:c7:a0:ae:
                    75:de:46:f4:97:39:b8:1b:01:f0:85:0e:f9:fe:70:
                    2b:eb:40:7a:9d:9d:7f:44:52:83:44:8a:3b:b5:2d:
                    c7:96:87:45:92:e9:dd:4b:dc:aa:fd:6f:23:c0:0a:
                    40:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DB:05:58:20:B4:3A:FF:7A:71:73:22:85:57:B8:75:86:37:A9:6D:68
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/DB055820B43AFF7A7173228557B8758637A96D68.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.144.0/22
                IPv6:
                  2804:34e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265487

    Signature Algorithm: sha256WithRSAEncryption
         d7:26:84:ac:88:08:fa:4c:d4:d1:9b:20:74:6b:f7:bd:30:2f:
         f7:0d:4a:6b:fe:a0:6a:3f:c0:9b:35:03:33:5c:d2:b8:2e:80:
         15:4c:5d:33:6d:44:c2:62:dd:41:71:1d:a0:1b:cf:2a:94:b3:
         d0:3e:bb:8b:31:26:96:c9:cb:63:f5:d1:da:23:11:1f:ae:3d:
         f7:91:f7:1c:c3:19:69:0d:3a:f4:8f:33:74:c9:48:f8:a7:6c:
         f4:5e:f8:e0:87:aa:d6:b5:2f:0f:67:25:d3:17:f6:eb:c0:dc:
         28:a8:90:b3:6d:3d:8d:03:25:d7:14:6a:e6:90:fc:17:2b:90:
         ca:85:5e:bd:78:74:0f:98:3f:3d:b5:b6:38:b5:7d:c9:19:29:
         82:aa:9b:47:2e:64:c2:3e:5f:49:71:ab:2c:e7:19:ea:e4:00:
         c6:ec:bd:96:16:87:b6:b2:bc:70:8e:12:f6:8a:67:30:59:1b:
         76:12:24:16:8e:10:ee:cc:97:96:5c:5a:17:23:50:07:a9:f5:
         1e:d2:96:b2:54:70:36:ec:c4:b6:74:18:b8:c0:45:08:03:ef:
         3b:9f:ba:db:3a:cb:64:46:02:b2:76:cb:df:a2:a5:dc:0a:e6:
         ea:31:33:91:9e:55:41:37:7b:80:f4:44:06:48:73:b0:33:e5:
         69:b9:46:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:17:17 2025 by rpki-client