Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F1884EF6E788EB8A39510CE0A51DB48C6523379E.cer
File:                     F1884EF6E788EB8A39510CE0A51DB48C6523379E.cer (raw, json)
Hash identifier:          JJAEhw8JinuyNNLx2rXtZZS5jchUQU+UP76j0a/3NCE=
Subject key identifier:   F1:88:4E:F6:E7:88:EB:8A:39:51:0C:E0:A5:1D:B4:8C:65:23:37:9E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       423A16ACA47B7DB648269C4AB8CF4BD9D9953F40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/1/F1884EF6E788EB8A39510CE0A51DB48C6523379E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Mar 2025 14:26:23 +0000
Certificate not after:    Thu 12 Mar 2026 14:31:23 +0000
Subordinate resources:    AS: 265066
                          IP: 168.121.200.0/22
                          IP: 170.79.96.0/22
                          IP: 170.231.112.0/22
                          IP: 179.42.148.0/22
                          IP: 179.125.20.0/22
                          IP: 2804:3244::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 04:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:3a:16:ac:a4:7b:7d:b6:48:26:9c:4a:b8:cf:4b:d9:d9:95:3f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 13 14:26:23 2025 GMT
            Not After : Mar 12 14:31:23 2026 GMT
        Subject: CN=F1884EF6E788EB8A39510CE0A51DB48C6523379E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3e:7f:6a:5d:13:36:b7:64:63:ad:00:aa:2c:
                    aa:b2:c0:6b:19:3d:fe:ba:16:b2:c2:84:d6:1a:f8:
                    2a:cc:b9:16:ba:e4:d4:03:b8:05:ae:33:da:fa:9f:
                    42:ed:4f:4f:81:3a:06:15:4d:c5:9f:6a:94:ac:8a:
                    0f:ca:a5:fa:1c:50:91:99:b1:15:38:71:7f:e4:90:
                    5d:02:ed:4a:6a:b8:09:73:90:3e:c8:b1:1f:77:7b:
                    f8:56:22:a9:42:06:25:9a:99:00:17:55:33:70:36:
                    61:02:a0:c0:cb:f9:66:31:9d:b6:e0:f9:a2:09:da:
                    92:a7:c9:a4:2f:dc:9a:67:82:0c:97:85:90:60:bf:
                    ae:fb:03:b6:27:8f:4f:10:7d:7b:e5:ec:4a:9d:93:
                    0e:5b:c3:00:77:20:9c:a3:49:93:d9:51:e6:f0:76:
                    9f:a4:ce:8f:a7:77:02:fa:3c:a1:7d:a6:c2:ca:d7:
                    2c:2d:9b:97:3d:6d:96:76:41:39:48:f4:2a:68:26:
                    eb:12:34:53:e1:88:28:76:07:1e:ce:dc:ac:79:1f:
                    76:4f:c0:72:48:27:e6:a2:a7:50:06:6d:81:b8:ca:
                    94:f7:58:58:76:a5:17:16:34:4a:27:60:cb:d5:46:
                    e0:db:1a:c4:3d:1f:83:be:d9:57:87:99:98:52:51:
                    34:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F1:88:4E:F6:E7:88:EB:8A:39:51:0C:E0:A5:1D:B4:8C:65:23:37:9E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/1/F1884EF6E788EB8A39510CE0A51DB48C6523379E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.200.0/22
                  170.79.96.0/22
                  170.231.112.0/22
                  179.42.148.0/22
                  179.125.20.0/22
                IPv6:
                  2804:3244::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265066

    Signature Algorithm: sha256WithRSAEncryption
         32:d6:59:75:61:4b:94:82:17:33:e1:08:75:13:5b:9c:4c:d9:
         af:16:f1:89:d0:cb:38:bc:05:20:e6:1a:fa:52:37:16:1c:46:
         ee:03:d6:a3:51:d8:3a:e3:3e:0f:fb:93:8e:31:85:af:76:60:
         1a:6c:59:fd:bb:56:04:5c:07:ac:be:4a:f1:9e:11:51:21:cc:
         64:30:f1:4a:26:8c:11:d7:45:58:ed:ae:ca:10:91:06:6d:86:
         4c:e1:b9:e9:a4:f1:91:10:5b:87:36:20:9b:ff:a1:bb:82:ff:
         a7:c3:37:74:39:79:22:f7:3d:b7:b8:88:35:b9:d9:3d:d2:72:
         c9:75:2a:e5:42:5c:ba:1c:bd:77:9d:1f:ca:8c:cb:c9:00:7c:
         c8:95:ce:9c:26:04:ce:12:7a:09:bf:8b:8a:2c:70:14:c7:d7:
         80:91:c7:06:a8:09:c2:6d:26:8c:a7:8a:3e:f3:c5:e0:e3:d2:
         fa:74:6f:78:75:f8:8e:e2:f8:5f:21:81:54:ae:81:22:86:9a:
         05:e3:96:22:89:fb:7e:d8:a4:88:12:62:46:2a:55:bd:01:c9:
         1c:9e:0e:96:d7:b2:59:54:2a:45:9f:77:31:4f:67:2f:a3:df:
         2d:80:00:7c:ba:32:f9:65:33:95:5f:de:ee:d7:ad:1a:d9:24:
         2a:40:db:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:46:44 2025 by rpki-client