Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF.cer
File:                     E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF.cer (raw, json)
Hash identifier:          hbO9UHRPcjZPo7dGEZyvqmX2l280dRFXe5gmxeNF+4w=
Subject key identifier:   E7:B6:FC:B2:A7:49:40:38:5B:FB:79:EA:F3:8C:BA:AF:2F:00:8C:CF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3B3E415AA263A49B5608CC8A6AAB5D677C5441FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 17 Mar 2025 22:21:32 +0000
Certificate not after:    Mon 16 Mar 2026 22:26:32 +0000
Subordinate resources:    AS: 269234
                          IP: 45.182.76.0/22
                          IP: 2804:6170::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 02:36:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:3e:41:5a:a2:63:a4:9b:56:08:cc:8a:6a:ab:5d:67:7c:54:41:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 17 22:21:32 2025 GMT
            Not After : Mar 16 22:26:32 2026 GMT
        Subject: CN=E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:24:eb:1a:01:0b:5d:14:ff:9d:2e:88:96:ee:
                    2f:df:9d:ed:cf:c8:a1:9c:df:50:a6:e1:7e:70:0c:
                    11:ff:5b:b4:8b:bc:21:30:f5:01:6d:09:86:ef:11:
                    87:f8:f3:36:82:0e:78:99:b0:fc:e6:0c:ad:e7:73:
                    80:6f:b4:72:31:4b:72:12:bf:03:e8:56:76:06:7e:
                    da:c3:73:d5:ff:8c:3c:32:0d:0c:a5:47:8e:7b:6c:
                    5d:8f:c7:26:91:0b:dd:da:fd:0f:e0:27:08:05:e8:
                    de:91:c6:4a:68:a4:60:52:48:ec:37:51:ee:2d:37:
                    ac:7f:cd:80:9e:8d:cc:0f:fc:6b:d6:54:96:28:22:
                    53:00:6d:ea:a0:92:57:8c:cc:cd:ad:9e:8f:2b:63:
                    50:9c:25:09:9c:a2:08:f7:ea:f6:29:c2:47:17:5e:
                    ff:6a:b7:2b:4d:58:6b:f2:b2:71:72:05:4b:51:3b:
                    72:b9:5a:00:e8:65:d8:a2:f7:9e:74:4d:aa:a6:00:
                    39:38:a5:ac:80:23:c7:d5:f1:2b:d8:2a:00:0f:14:
                    cc:fc:7f:7b:e7:94:f7:fe:02:8b:f6:02:54:4b:7a:
                    79:95:48:78:83:b2:74:7a:9d:f8:e5:cb:ac:6a:2f:
                    d4:ae:14:3f:78:98:f8:71:7c:8b:2d:28:7e:cf:d0:
                    19:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E7:B6:FC:B2:A7:49:40:38:5B:FB:79:EA:F3:8C:BA:AF:2F:00:8C:CF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.76.0/22
                IPv6:
                  2804:6170::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269234

    Signature Algorithm: sha256WithRSAEncryption
         c4:f2:0a:48:95:57:b0:48:e1:a3:5b:2f:98:52:fe:b6:22:07:
         29:bc:7f:46:a2:a7:82:df:8d:16:e9:b7:52:36:a4:20:0a:64:
         2a:41:6d:49:cb:36:3e:84:1a:33:11:86:86:c3:dd:98:f2:b6:
         07:be:7d:82:78:86:86:26:bb:f7:85:43:72:ae:ef:4e:5d:a9:
         33:ad:55:d5:95:6a:cd:0d:42:d3:8c:c6:7e:aa:84:81:f7:24:
         51:44:c8:86:cf:db:4e:c7:76:4e:00:67:79:05:68:bb:46:68:
         54:e2:b9:92:49:8c:84:47:5c:83:94:74:cf:40:6c:cf:7d:fd:
         d1:5b:0b:6c:d5:9f:6b:87:b4:ae:4f:18:81:c2:28:6b:27:f5:
         c2:d6:e0:8d:74:c6:8b:f7:78:9f:78:02:dd:09:5b:e0:7e:d8:
         20:74:69:34:c3:3e:cc:6d:d4:77:ea:df:04:e0:da:f8:36:ef:
         54:4c:85:37:9f:4e:4a:a2:f6:88:9c:95:30:90:0a:b6:2b:68:
         93:82:f1:0a:b3:7f:a0:b7:bf:23:e0:fe:f0:f9:89:c2:ce:7b:
         32:72:7a:0d:4a:77:90:fe:88:32:82:37:41:9a:4f:a9:72:7d:
         b6:73:db:56:f1:1f:c2:d9:ea:8a:6f:a7:d6:d2:47:a3:2a:1b:
         c0:74:e3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:27:33 2025 by rpki-client