Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F17F43B744350E31BD18C9AD8D92295024810F8B.cer
File:                     F17F43B744350E31BD18C9AD8D92295024810F8B.cer (raw, json)
Hash identifier:          X3mpKdfSSSmoFt8vAFboCxpWk271uE64fivacArADDc=
Subject key identifier:   F1:7F:43:B7:44:35:0E:31:BD:18:C9:AD:8D:92:29:50:24:81:0F:8B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3FFFDF07B78F2B6A42CF4297F8C8FA226B510434
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5uEjBDAkwaG1DKGRuzD4VfFpeQ4JhKMDRhBzf9oYpQBf/0/F17F43B744350E31BD18C9AD8D92295024810F8B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5uEjBDAkwaG1DKGRuzD4VfFpeQ4JhKMDRhBzf9oYpQBf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 03 Mar 2025 17:22:05 +0000
Certificate not after:    Mon 02 Mar 2026 17:27:05 +0000
Subordinate resources:    AS: 266045
                          IP: 45.4.36.0/22
                          IP: 2804:39b4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 16:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ff:df:07:b7:8f:2b:6a:42:cf:42:97:f8:c8:fa:22:6b:51:04:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  3 17:22:05 2025 GMT
            Not After : Mar  2 17:27:05 2026 GMT
        Subject: CN=F17F43B744350E31BD18C9AD8D92295024810F8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e1:77:c7:7d:79:83:4e:22:12:42:8f:42:07:
                    f9:ba:22:c2:e9:e0:ba:64:c8:58:34:ef:53:d3:b1:
                    40:a0:d1:ee:67:38:2c:7e:7c:77:35:ff:07:f3:3d:
                    ce:e2:bb:cc:d9:dd:e6:43:10:95:e1:14:f8:28:2b:
                    a5:99:e4:2b:4d:2d:34:ef:70:69:68:0e:80:ad:5b:
                    d6:ef:d9:b1:4f:ed:ec:a0:01:d2:9c:b2:6a:1e:d3:
                    32:7d:fd:7a:56:76:37:2f:0e:a7:c5:67:d1:c5:2d:
                    cd:0f:6a:b0:a0:63:b5:b8:37:ab:d2:cd:87:0e:93:
                    f5:2c:87:59:73:7f:24:ed:d7:ac:f9:0b:33:e8:8c:
                    4d:1e:2c:df:05:af:c7:77:de:65:98:ac:d9:67:09:
                    4d:b0:9c:4e:88:95:5a:8a:ca:a0:59:29:76:6c:bc:
                    bb:22:df:e4:74:c6:0e:ce:51:c3:18:a2:5a:80:02:
                    b7:da:01:74:9d:e5:b3:ce:8a:78:fc:f6:44:79:86:
                    05:44:68:4a:81:51:16:b9:a8:9b:1e:af:dd:95:df:
                    12:27:15:6d:4f:03:05:ab:69:70:e1:45:9f:74:be:
                    74:ab:4c:d8:cc:6e:c1:a5:f2:0c:3f:dd:a5:2f:d3:
                    a5:38:88:a2:a4:e0:af:01:ae:6f:74:f5:ac:bc:96:
                    b7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F1:7F:43:B7:44:35:0E:31:BD:18:C9:AD:8D:92:29:50:24:81:0F:8B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5uEjBDAkwaG1DKGRuzD4VfFpeQ4JhKMDRhBzf9oYpQBf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5uEjBDAkwaG1DKGRuzD4VfFpeQ4JhKMDRhBzf9oYpQBf/0/F17F43B744350E31BD18C9AD8D92295024810F8B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.36.0/22
                IPv6:
                  2804:39b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266045

    Signature Algorithm: sha256WithRSAEncryption
         92:29:e9:aa:b0:cc:99:9a:c5:81:85:09:41:d5:43:e6:a2:be:
         86:6f:36:c3:41:70:04:4a:5b:54:7a:0f:df:17:3d:94:ab:d8:
         6a:97:06:3d:77:e1:42:69:36:d0:d1:2f:0d:9c:35:67:14:15:
         3e:62:dc:51:7d:34:13:be:ea:df:e8:7f:72:79:0c:e7:93:6d:
         66:ca:69:f5:26:c2:c7:42:e4:bd:1e:06:3f:50:55:46:a7:6d:
         37:5b:f4:2c:39:d9:0e:ec:9e:24:9c:ee:36:f1:b7:65:f2:10:
         db:19:75:48:1a:10:c2:5a:b0:44:76:df:7b:6a:e0:04:da:c8:
         3c:bf:2b:a8:61:67:46:59:81:e5:95:70:3f:00:05:97:a2:b6:
         a3:fc:a5:67:1c:6d:be:1e:45:57:49:85:ba:34:53:29:4c:3e:
         b2:e2:d5:fa:b9:fd:53:c1:9a:fe:7f:cc:69:c2:ed:25:17:d8:
         53:18:5e:71:a1:09:1f:f3:c9:ac:15:27:11:1c:4a:62:6d:02:
         cb:b8:29:b5:48:7f:a4:22:6a:86:0d:4a:65:f0:0e:48:3d:fd:
         c4:28:09:31:37:64:11:a5:f2:d9:d7:15:c2:a9:6d:60:39:fb:
         f7:61:33:8c:40:af:42:4f:7f:52:67:ab:4b:0f:17:43:6a:5c:
         36:ff:d8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:43:21 2025 by rpki-client