Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193.cer
File:                     EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193.cer (raw, json)
Hash identifier:          TarRfNqVNl8/ThmCbrs8k82BRNQ1HFbOjMdEWGw4t98=
Subject key identifier:   EB:C5:8A:E8:BA:FE:DA:0B:B7:1F:C4:E6:45:19:F7:56:E1:FE:71:93
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       38746E0D5B2CD91B7A3043F7255307C40AB06D4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 27 Jan 2025 17:07:51 +0000
Certificate not after:    Mon 26 Jan 2026 17:12:51 +0000
Subordinate resources:    AS: 53123
                          IP: 187.111.192.0/20
                          IP: 2804:6478::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 04:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:74:6e:0d:5b:2c:d9:1b:7a:30:43:f7:25:53:07:c4:0a:b0:6d:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 27 17:07:51 2025 GMT
            Not After : Jan 26 17:12:51 2026 GMT
        Subject: CN=EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ab:7d:1e:f7:12:a5:b8:d8:40:e3:41:c9:4c:
                    e9:1a:05:ee:35:d7:52:46:17:1d:ad:6c:d7:e2:44:
                    24:3d:09:7b:01:18:95:3e:45:53:f8:00:33:12:49:
                    3b:85:9c:ba:71:2f:03:85:ac:66:8f:8a:13:6e:ef:
                    3f:72:c1:74:fc:8e:ea:4f:5a:ea:8b:08:a1:4f:9b:
                    18:e0:31:1d:69:e6:5b:24:4f:0a:0a:0c:ac:84:27:
                    4d:26:bd:09:2e:96:e8:c9:25:7d:0f:7d:8e:d7:2d:
                    4e:f6:00:4d:c9:37:e6:b4:da:89:6b:0f:eb:b8:64:
                    64:cb:83:48:ff:d4:92:a1:7a:7f:ee:11:ee:66:97:
                    80:76:5f:a0:f4:00:32:2e:4d:ec:c3:5b:66:70:36:
                    da:1b:b7:c4:77:b2:d4:96:0e:f6:3b:4a:c7:62:21:
                    33:30:d6:63:49:9f:36:a3:b3:55:07:0f:99:ba:42:
                    74:53:b5:66:6a:2f:4d:60:4e:f9:4c:57:81:77:5d:
                    7e:c6:aa:5d:c1:f3:4b:66:ea:b6:47:2e:f7:33:86:
                    c9:07:e3:be:68:e9:99:97:1f:d8:3a:34:8e:37:84:
                    50:c4:72:24:d1:6c:92:f7:b6:9c:07:8d:0e:1b:0f:
                    cf:4b:8a:b1:6a:5b:f1:57:71:3d:3e:57:8b:d3:8e:
                    a8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EB:C5:8A:E8:BA:FE:DA:0B:B7:1F:C4:E6:45:19:F7:56:E1:FE:71:93
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.192.0/20
                IPv6:
                  2804:6478::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53123

    Signature Algorithm: sha256WithRSAEncryption
         b2:ed:7e:06:23:42:a2:85:68:47:6d:50:d8:85:a9:97:73:91:
         50:ca:63:fb:d2:b1:9e:28:5c:e7:6d:70:c6:12:99:1a:96:0a:
         a7:f0:53:50:c5:73:d8:65:08:1e:82:a7:df:68:5b:7a:f1:26:
         24:e6:51:5e:39:f5:3f:cf:5f:1e:a4:9e:d6:4f:22:d6:6f:55:
         b8:16:5a:6e:fc:dd:b7:9e:f4:0b:b5:d0:e5:26:be:c3:58:52:
         45:04:eb:bf:29:e7:6c:b9:8a:47:b1:30:8d:95:b1:48:79:43:
         41:08:cf:07:80:64:da:1c:30:15:d5:aa:bc:c4:ef:43:64:5b:
         7c:6f:1e:01:41:78:3e:9a:e7:94:b3:77:e3:6a:c2:cb:11:78:
         b8:c5:17:b0:fb:66:9c:86:25:c0:45:4f:90:1b:c4:e9:97:bf:
         36:d8:6c:3d:6a:74:15:db:a9:19:eb:ec:49:12:44:6a:bc:f2:
         30:f9:2d:f5:ac:69:86:af:18:f8:88:78:53:59:16:35:22:85:
         ae:e7:22:9f:7e:cf:ca:a3:7b:95:83:c2:6b:d9:61:3c:4d:ec:
         e7:13:23:b7:54:ad:2c:12:3f:7e:00:8d:7c:e0:98:c2:b7:1e:
         fb:21:f9:88:77:d4:9f:85:1d:fe:bb:c1:b2:19:a1:0a:c9:a0:
         e9:48:9b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:29:33 2025 by rpki-client