Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/258ECE436F837048C74260D70C5C4816AE1FC553.cer
File:                     258ECE436F837048C74260D70C5C4816AE1FC553.cer (raw, json)
Hash identifier:          HztIkq19Ma5e5+n+NYU20GFcYX+T5yHXMeEkiHwKzUI=
Subject key identifier:   25:8E:CE:43:6F:83:70:48:C7:42:60:D7:0C:5C:48:16:AE:1F:C5:53
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       25688E7D21C6E944677306065DACB17BBCC6A971
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/74EFCWkHJfUVQZksZHFeiBhdUM578pwimoCa6CmNotJ8/0/258ECE436F837048C74260D70C5C4816AE1FC553.mft
caRepository:             rsync://rpki-repo.registro.br/repo/74EFCWkHJfUVQZksZHFeiBhdUM578pwimoCa6CmNotJ8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Aug 2025 21:01:15 +0000
Certificate not after:    Thu 13 Aug 2026 21:06:15 +0000
Subordinate resources:    AS: 269049
                          IP: 45.177.220.0/22
                          IP: 2804:5eac::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 04:52:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:68:8e:7d:21:c6:e9:44:67:73:06:06:5d:ac:b1:7b:bc:c6:a9:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 14 21:01:15 2025 GMT
            Not After : Aug 13 21:06:15 2026 GMT
        Subject: CN=258ECE436F837048C74260D70C5C4816AE1FC553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e8:8d:3f:6d:0a:e7:ea:71:0d:5c:de:f7:52:
                    1d:ee:2b:d8:81:c7:54:20:56:a7:0d:5e:82:27:bc:
                    27:07:96:da:06:5d:22:0e:ef:7f:52:2f:f4:f2:0e:
                    27:2e:26:57:dc:a0:fa:56:7e:3e:d5:69:68:19:78:
                    17:15:5b:20:56:5a:50:6f:db:c9:e6:8c:06:94:1d:
                    bb:39:c3:37:1e:d4:c8:b8:83:02:6d:fa:e8:f0:ef:
                    8f:c7:2b:2e:86:1e:4f:7b:3e:d1:ba:6f:00:17:a1:
                    e8:9e:00:64:c4:fe:12:e1:3f:f3:41:b2:f7:f9:ae:
                    32:b5:99:39:b0:dc:32:77:94:ff:a4:f4:86:b9:4e:
                    0c:63:25:88:c7:da:fa:a0:cc:76:f1:5d:af:04:00:
                    0d:fb:6d:26:86:2e:7d:ae:ae:d5:9f:43:c2:7a:aa:
                    87:ed:c3:fb:5d:2b:46:cd:d3:80:74:2f:2a:85:bd:
                    b1:11:4c:03:ae:be:c5:06:9e:03:91:ec:a2:06:bc:
                    1e:a0:26:87:76:99:a7:5c:58:5b:f0:77:a4:0c:aa:
                    9c:71:c0:8f:f1:65:cd:0e:8a:69:42:31:5f:ae:86:
                    06:55:9e:0c:58:15:c7:2c:94:5f:51:6f:de:e2:b4:
                    68:80:ed:0e:c7:35:0d:2f:09:98:fd:cd:26:cf:0c:
                    97:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                25:8E:CE:43:6F:83:70:48:C7:42:60:D7:0C:5C:48:16:AE:1F:C5:53
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/74EFCWkHJfUVQZksZHFeiBhdUM578pwimoCa6CmNotJ8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/74EFCWkHJfUVQZksZHFeiBhdUM578pwimoCa6CmNotJ8/0/258ECE436F837048C74260D70C5C4816AE1FC553.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.220.0/22
                IPv6:
                  2804:5eac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269049

    Signature Algorithm: sha256WithRSAEncryption
         80:53:4d:54:e6:aa:62:dc:8f:c9:90:46:9b:b0:8d:c7:6d:9a:
         b3:f0:72:4f:93:e3:7d:18:66:d0:b0:1f:7b:3b:4b:31:9f:20:
         b9:83:9e:fd:5b:3d:ad:1e:41:c4:44:f1:84:cf:ad:9e:a7:0d:
         2e:2b:d5:66:4f:d3:3e:59:0f:2d:42:f2:91:57:6b:5e:14:1b:
         5a:97:1e:d1:81:a4:12:c5:c4:93:85:2a:ca:4e:11:9b:95:fa:
         84:35:21:25:c0:72:d1:49:19:f2:a6:f8:bb:fb:3f:52:0d:fe:
         e5:04:6b:5b:7f:9f:10:38:84:b1:82:c7:51:46:b1:22:d2:79:
         32:87:f5:ce:2f:f8:c9:64:b7:0e:7b:2b:17:33:9e:f1:e4:a3:
         43:77:0d:7f:ba:13:01:36:b7:fc:c7:99:98:47:8d:06:97:7c:
         6e:3d:86:f1:ab:fb:91:0b:24:f6:4e:6c:94:06:93:b9:0c:45:
         81:51:22:c1:d4:d3:51:92:08:53:f7:49:62:ce:df:f6:6a:f3:
         a9:66:e9:21:12:00:9a:bd:ce:58:81:f0:78:be:96:45:4e:0a:
         40:5c:0e:8b:84:92:d7:8b:a7:08:c3:6a:16:f7:2f:cb:63:d5:
         51:ed:d3:a4:9c:18:2a:70:f5:6a:53:1a:bb:af:5a:cc:b5:00:
         ef:28:97:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:11:44 2025 by rpki-client