Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.cer
File:                     EC08655821585A0A5B7D6A0E52FC74EF51F90E73.cer (raw, json)
Hash identifier:          BmNXw6PSNPTGe1akh5MbHSFtiJHngsPAkvPfIxlejmM=
Subject key identifier:   EC:08:65:58:21:58:5A:0A:5B:7D:6A:0E:52:FC:74:EF:51:F9:0E:73
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5988385E347D5EB8371FF7FB57D72F6B723EBC2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:35:41 +0000
Certificate not after:    Wed 04 Mar 2026 18:40:41 +0000
Subordinate resources:    AS: 52635
                          IP: 177.125.20.0/22
                          IP: 2804:d80::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 04:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:88:38:5e:34:7d:5e:b8:37:1f:f7:fb:57:d7:2f:6b:72:3e:bc:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:35:41 2025 GMT
            Not After : Mar  4 18:40:41 2026 GMT
        Subject: CN=EC08655821585A0A5B7D6A0E52FC74EF51F90E73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:34:c9:c1:62:4b:c1:b5:a7:9f:8f:f3:56:ed:
                    d3:27:2d:21:cc:94:b3:e8:07:f0:f8:3d:c7:33:74:
                    a2:9d:35:c5:c3:68:2e:d9:a8:bc:ea:d8:b0:f5:b0:
                    a0:c8:44:da:dd:77:4c:15:73:c7:0c:48:8a:45:e6:
                    fb:78:d5:3f:f2:4b:44:2b:de:53:76:2d:57:91:74:
                    cf:d6:24:5b:df:77:4b:f6:cd:32:8f:fd:7a:f8:8d:
                    e2:30:62:41:dd:67:12:72:2a:82:8e:2a:55:ae:b2:
                    ac:87:3a:e0:ea:ae:70:2f:fe:69:eb:63:a0:42:78:
                    a7:01:76:ec:5f:39:49:51:bb:80:c9:34:7c:92:6a:
                    6a:af:f1:6c:74:00:db:59:f4:e1:59:55:66:94:04:
                    9a:5a:f9:e9:34:47:88:56:3b:9c:0d:dc:34:0a:6b:
                    9d:23:3c:cc:30:80:2d:f8:ee:6c:57:6e:16:22:17:
                    70:b1:93:3d:04:2a:2e:a1:c0:0f:6f:ec:df:1e:19:
                    e9:80:ce:09:0e:c3:82:2a:13:14:ae:d5:7b:ab:29:
                    af:88:a9:0c:f6:76:bc:5b:29:2b:6e:85:5a:f7:52:
                    64:c1:84:d0:71:bf:54:e1:7e:ad:47:76:46:8a:f5:
                    3f:83:11:1f:09:fc:9f:70:f2:de:c9:ec:91:9f:fe:
                    f3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EC:08:65:58:21:58:5A:0A:5B:7D:6A:0E:52:FC:74:EF:51:F9:0E:73
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.20.0/22
                IPv6:
                  2804:d80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52635

    Signature Algorithm: sha256WithRSAEncryption
         d7:70:1f:5c:8c:c0:f0:f9:71:6a:2f:01:93:ba:53:70:fe:fb:
         19:18:20:88:68:9b:1c:3d:96:6c:60:4f:8f:9e:55:4f:93:b6:
         8e:c4:98:58:9a:5a:bd:e6:fb:da:b4:42:47:5e:06:7a:1a:c7:
         ee:d3:7c:55:b8:2f:b5:9f:4b:90:5d:f4:95:1e:df:4b:7e:85:
         65:f4:b1:8b:61:e9:16:f0:1e:ed:0e:d0:86:e9:47:f1:4e:ca:
         46:f8:e2:5d:c9:b2:96:2c:7d:b0:9b:3e:04:79:8b:26:30:aa:
         37:11:c5:66:55:6c:56:19:88:c4:da:cb:74:53:93:f1:1f:73:
         6e:d4:11:f0:2d:c2:f5:7a:45:81:43:e7:81:17:8e:1c:c6:c4:
         f5:00:e7:b7:f9:4c:6a:86:83:7b:ee:b5:48:97:7a:29:be:54:
         6b:23:52:17:5a:15:9e:41:0f:4f:b2:7c:9b:d6:4c:8b:4d:b7:
         f5:02:ff:ec:d9:4b:c6:cf:17:c7:5b:96:e5:ae:49:3f:6f:cd:
         55:a8:43:61:57:c3:9d:65:26:07:e8:fb:68:2d:61:21:63:4c:
         df:e4:7a:2e:65:bf:67:2a:1a:ac:5e:71:77:ea:49:8d:99:d8:
         2c:2f:e1:02:4f:75:97:f9:6c:60:6b:58:5d:c1:73:35:56:c4:
         35:dd:0b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:50:42 2025 by rpki-client