Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/47F932452F6354876C2CDBACA9AD34D90A502586.cer
File:                     47F932452F6354876C2CDBACA9AD34D90A502586.cer (raw, json)
Hash identifier:          GU87Q5IvtwUdoAnTXnhLSAwec5BO4zDdik0F92Jc/90=
Subject key identifier:   47:F9:32:45:2F:63:54:87:6C:2C:DB:AC:A9:AD:34:D9:0A:50:25:86
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       74BE246F015010D223FF79234C2436322FC5FDDE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 22 Apr 2025 10:37:12 +0000
Certificate not after:    Tue 21 Apr 2026 10:42:12 +0000
Subordinate resources:    AS: 262355
                          IP: 131.161.72.0/22
                          IP: 177.91.172.0/22
                          IP: 177.125.216.0/22
                          IP: 186.195.112.0/20
                          IP: 186.233.188.0/22
                          IP: 2804:82c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 May 2025 21:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:be:24:6f:01:50:10:d2:23:ff:79:23:4c:24:36:32:2f:c5:fd:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 22 10:37:12 2025 GMT
            Not After : Apr 21 10:42:12 2026 GMT
        Subject: CN=47F932452F6354876C2CDBACA9AD34D90A502586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ca:73:14:13:26:97:70:70:30:ab:97:ef:66:
                    8d:0e:e5:e5:85:eb:2a:83:d5:9c:90:a0:ea:42:82:
                    55:3d:7d:09:40:27:bb:25:38:49:0b:d0:d1:5e:83:
                    59:3b:6b:39:8d:8c:85:37:5c:4a:4c:ad:c5:cf:24:
                    29:dd:33:54:c0:b9:98:16:4a:7e:17:38:b9:87:7f:
                    f6:3f:3e:61:ab:17:bd:5f:87:e1:a7:dc:bf:99:09:
                    25:af:48:90:40:93:d5:2a:fc:4b:fb:fe:94:68:fc:
                    7e:04:9e:b0:a2:45:a0:70:22:c0:25:11:36:90:f7:
                    a1:a4:43:9a:be:19:4a:f8:48:61:2e:15:90:b3:0c:
                    9c:7f:94:98:00:3d:87:a5:cc:8f:09:d7:ca:ec:2a:
                    6e:30:cd:1a:ec:5a:1d:bc:96:f7:a9:5b:78:91:b1:
                    63:34:21:5e:56:73:4c:98:41:e6:fe:36:cc:00:54:
                    e9:1c:ec:32:b7:63:1d:52:4d:08:d4:e4:cf:79:02:
                    6d:86:b8:5b:f3:14:93:53:43:2e:b2:42:89:62:3f:
                    59:19:92:49:e5:f8:af:9a:c6:91:3e:20:80:06:78:
                    26:6b:70:aa:5e:33:c7:c0:47:bb:f2:c6:4f:a7:ea:
                    bd:42:a5:07:68:68:95:f8:08:11:ec:7d:f5:8c:57:
                    23:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                47:F9:32:45:2F:63:54:87:6C:2C:DB:AC:A9:AD:34:D9:0A:50:25:86
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.72.0/22
                  177.91.172.0/22
                  177.125.216.0/22
                  186.195.112.0/20
                  186.233.188.0/22
                IPv6:
                  2804:82c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262355

    Signature Algorithm: sha256WithRSAEncryption
         99:19:8c:1b:b1:d5:6f:39:21:2f:a0:a7:c3:b6:2d:6e:60:6a:
         26:a5:0c:62:1d:57:a2:6b:41:68:96:6a:65:d2:ab:62:cf:e4:
         d6:14:d6:66:01:8b:58:2d:ab:f9:4d:99:aa:42:f8:9d:1c:a4:
         ae:19:2f:d0:62:d8:64:fb:59:b7:f8:3a:75:22:b9:ab:a3:44:
         a7:18:ee:95:9a:71:55:b4:64:4a:57:6e:60:39:69:c6:a8:dc:
         37:4c:67:a3:7c:39:02:1d:01:e2:64:1b:49:9b:9a:39:c3:07:
         f6:e1:2f:1c:78:61:1c:4d:ee:f3:ec:db:9d:e0:4a:ec:55:00:
         ea:3a:08:04:1c:5f:ff:f3:d4:c6:ef:70:77:85:65:11:2b:02:
         cc:7e:ba:e5:3b:72:df:97:9c:48:03:ff:d3:e5:0a:1a:33:de:
         10:d8:15:97:7e:5f:e4:eb:a9:f4:7e:5a:df:93:26:06:a7:9b:
         3f:fb:68:fb:fc:dd:07:7e:95:b6:ee:c8:1e:23:77:08:34:8a:
         b1:ef:0d:b4:3c:d8:a5:3e:67:e1:bf:6e:bc:fa:7a:c9:4c:52:
         22:8e:a8:4f:87:65:0e:d6:92:61:ae:29:f0:ae:2b:00:b7:88:
         59:c3:6f:d6:ab:d2:2f:0e:92:70:a6:90:c4:95:09:06:48:00:
         7b:99:9e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:36:39 2025 by rpki-client