Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.cer
File:                     13A8F7FF18790DD7526A982E956B58BEB7F34AEE.cer (raw, json)
Hash identifier:          nJLbP5AgIMMqVGKMz9XStTm7FG7JChL9bOOkwtOSu1I=
Subject key identifier:   13:A8:F7:FF:18:79:0D:D7:52:6A:98:2E:95:6B:58:BE:B7:F3:4A:EE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       16218F0F0BBCACD5A06282CF889AA7055E5F3293
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 26 Apr 2025 16:07:43 +0000
Certificate not after:    Sat 25 Apr 2026 16:12:43 +0000
Subordinate resources:    AS: 267059
                          IP: 45.228.108.0/22
                          IP: 2804:4784::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 May 2025 06:52:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:21:8f:0f:0b:bc:ac:d5:a0:62:82:cf:88:9a:a7:05:5e:5f:32:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 26 16:07:43 2025 GMT
            Not After : Apr 25 16:12:43 2026 GMT
        Subject: CN=13A8F7FF18790DD7526A982E956B58BEB7F34AEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:68:4f:a2:2a:77:46:15:75:59:2b:9b:4d:96:
                    c7:53:d4:b6:9e:1e:8c:a7:1d:4b:75:f4:47:7b:bd:
                    35:10:16:d8:44:e4:d6:78:8e:ab:42:8d:ad:d7:72:
                    38:82:50:b8:7f:fa:8c:d9:71:ae:a0:40:1e:4b:34:
                    a3:7c:38:06:23:9b:61:0d:63:d7:e0:ac:ef:40:f7:
                    c2:b9:94:56:36:d0:c7:90:c5:67:c8:19:c3:d0:fa:
                    1f:27:c2:2b:aa:da:12:40:83:8f:b9:b2:d0:b9:d2:
                    c2:2e:f5:a2:19:3f:de:f5:e3:0c:89:13:20:24:dc:
                    ff:15:8d:4c:aa:43:4b:47:80:6a:26:c5:33:1d:09:
                    0c:71:29:f5:fd:46:f7:e6:b5:06:58:18:63:7d:26:
                    d8:22:33:85:87:ba:a2:cd:4b:fe:ec:db:71:69:3b:
                    55:59:16:9d:7e:95:f1:45:6b:fb:05:e2:03:0b:06:
                    1e:82:ae:77:0a:cf:59:2d:36:63:c8:68:19:52:dc:
                    5a:49:b7:78:d8:70:eb:d6:d4:70:a1:99:01:03:09:
                    57:38:9b:5c:37:5c:e5:2e:00:e1:c4:17:e8:61:6f:
                    38:ac:9e:3f:9f:54:1c:20:3f:41:81:96:67:d1:3f:
                    3e:f7:0c:d2:8e:ca:33:86:24:62:21:92:da:8e:3e:
                    e3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                13:A8:F7:FF:18:79:0D:D7:52:6A:98:2E:95:6B:58:BE:B7:F3:4A:EE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.108.0/22
                IPv6:
                  2804:4784::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267059

    Signature Algorithm: sha256WithRSAEncryption
         db:ad:d5:ad:74:22:06:5e:27:68:e4:11:1a:cf:11:11:40:73:
         c4:78:f0:a6:ad:43:72:40:5a:6d:8f:02:01:7d:5c:34:51:fe:
         99:37:54:f6:76:b4:e0:e8:83:48:cb:0a:95:d1:02:dd:d4:13:
         5c:64:1a:1d:78:72:16:cb:c1:b0:e0:4e:2e:4d:5d:0e:01:d7:
         60:74:8e:84:5d:3b:e5:de:02:88:40:32:75:56:1f:9e:84:8d:
         48:55:07:e2:dd:9f:02:da:24:bc:84:42:eb:ac:3c:72:0e:ce:
         c1:6a:41:76:9d:24:56:9e:d6:b9:32:3f:31:88:5f:e0:17:09:
         d6:38:08:67:a0:b7:2b:81:b1:3e:83:bc:1e:ec:cb:54:0d:2e:
         48:56:00:ee:a5:e8:6b:f3:da:bd:53:57:ef:46:26:c3:b1:2d:
         c9:7d:c2:e6:20:93:4f:16:b7:32:b4:0a:18:10:49:8a:42:a9:
         37:b8:ef:15:64:04:7b:f5:0b:a3:32:0f:76:b9:28:ba:6a:f9:
         b5:65:2e:23:04:ca:21:2d:83:b2:fc:6b:0d:3c:75:a9:30:58:
         4b:83:18:65:3a:10:6f:2e:a3:c4:71:12:e9:75:c6:b1:a6:36:
         ee:d1:20:77:23:10:0e:72:77:28:d4:d8:6a:d2:01:f6:9b:1c:
         27:12:28:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 06:27:12 2025 by rpki-client