Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EA48F6970280B064226B470130F7ADE0F415C5C1.cer
File:                     EA48F6970280B064226B470130F7ADE0F415C5C1.cer (raw, json)
Hash identifier:          ezyExJ7nI3cPy+b9q2dr1rfeQ8TBjjHpjkEpEUb5vAI=
Subject key identifier:   EA:48:F6:97:02:80:B0:64:22:6B:47:01:30:F7:AD:E0:F4:15:C5:C1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       50AEBA6FEB6CF351D276DE0C3C364C63EABF7785
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5h3fpQ9nDXC6aXvcva9yU6dJFSP87iTSm5LZwjikEfp8/0/EA48F6970280B064226B470130F7ADE0F415C5C1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5h3fpQ9nDXC6aXvcva9yU6dJFSP87iTSm5LZwjikEfp8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 04 Feb 2025 02:58:08 +0000
Certificate not after:    Tue 03 Feb 2026 03:03:08 +0000
Subordinate resources:    AS: 268883
                          IP: 45.175.56.0/22
                          IP: 2804:5c04::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 16:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ae:ba:6f:eb:6c:f3:51:d2:76:de:0c:3c:36:4c:63:ea:bf:77:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb  4 02:58:08 2025 GMT
            Not After : Feb  3 03:03:08 2026 GMT
        Subject: CN=EA48F6970280B064226B470130F7ADE0F415C5C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:92:0c:31:03:78:63:45:ca:de:d4:1d:53:fa:
                    3c:42:7a:c0:61:fa:b5:8a:e0:55:01:3c:f9:17:48:
                    e0:81:b2:8f:c4:7e:1a:d0:f9:f1:9f:cb:4a:37:40:
                    7e:53:df:e1:58:b4:cc:26:04:d3:09:6c:a4:7d:f5:
                    47:40:e2:66:cb:a3:74:4b:c0:eb:92:17:4a:59:19:
                    ea:5b:86:1b:54:cd:20:fc:1c:e8:21:21:65:04:63:
                    b4:38:32:95:31:f5:0e:2d:8d:49:ad:49:50:d1:b9:
                    81:bc:87:2c:ee:39:70:8e:a4:ec:8a:4c:29:73:70:
                    6a:4b:14:c5:9c:a1:fc:c7:62:13:a2:89:26:e9:a3:
                    56:dd:bc:37:22:8c:0b:42:a6:90:c6:d1:d3:fe:e8:
                    b1:7b:3c:65:0d:17:72:e5:b9:95:97:11:1f:33:6e:
                    63:f9:51:8b:6d:dd:11:81:92:c5:50:72:cc:bf:a9:
                    7b:3d:f6:9e:97:b6:6a:4e:f0:fb:5d:fa:59:cd:85:
                    a0:30:2f:6d:8b:6c:c0:7c:13:07:d8:5f:9b:4d:c9:
                    e5:2d:37:b9:39:c9:7b:a9:02:24:97:ab:b1:f2:42:
                    98:1b:e0:3b:5d:87:d7:f1:9a:23:99:d1:0a:fd:e5:
                    80:c1:e8:8b:2f:da:86:26:a4:1d:88:77:9c:cc:8e:
                    fe:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EA:48:F6:97:02:80:B0:64:22:6B:47:01:30:F7:AD:E0:F4:15:C5:C1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5h3fpQ9nDXC6aXvcva9yU6dJFSP87iTSm5LZwjikEfp8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5h3fpQ9nDXC6aXvcva9yU6dJFSP87iTSm5LZwjikEfp8/0/EA48F6970280B064226B470130F7ADE0F415C5C1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.56.0/22
                IPv6:
                  2804:5c04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268883

    Signature Algorithm: sha256WithRSAEncryption
         85:a4:60:93:a7:6f:ad:40:d3:85:42:e0:05:4c:50:69:40:9c:
         df:5b:0d:08:bc:2c:10:33:62:80:e3:88:bf:bc:a1:0c:64:f4:
         27:6e:ed:0c:ea:0b:a9:1b:5b:c5:10:9e:a9:8f:cb:4f:f0:f1:
         d5:9e:b1:49:c0:38:0a:d9:17:37:d1:fe:41:20:b5:15:f6:89:
         00:ab:d6:61:c5:42:72:13:da:da:cd:f3:e9:8a:6f:ad:02:de:
         15:bf:1b:c9:78:ea:f1:14:cf:88:92:a8:6f:ab:ea:79:03:72:
         bb:b3:bc:27:be:b1:03:73:a0:2a:0d:ee:76:b1:64:7b:c5:7a:
         62:a8:13:d4:41:cf:ec:c2:f1:d5:96:d2:a7:90:0a:32:7a:f6:
         b5:3e:ba:b4:ee:6c:23:2b:76:c7:a3:15:70:2c:7f:a9:1c:9e:
         ed:d9:8c:b6:a4:e6:b8:0d:85:c0:ac:f3:89:31:e0:ae:9d:55:
         47:3e:3b:42:96:9c:85:81:ee:d1:cf:3f:0a:30:81:6d:a7:8f:
         e2:89:f8:f7:75:42:77:f5:83:cd:b0:ce:64:39:5c:4e:52:93:
         7c:71:61:c8:5f:79:cd:07:ae:9f:85:33:73:84:c5:23:7a:06:
         f3:d6:0f:16:4a:f5:da:2e:f1:0a:e5:03:c8:e3:1e:c8:2c:f0:
         0d:4f:33:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:39:24 2025 by rpki-client