Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D23AEA3BF9686D794967BECAC226FA9648876870.cer
File:                     D23AEA3BF9686D794967BECAC226FA9648876870.cer (raw, json)
Hash identifier:          DQGGY4kjUXk4USjcCwu1HukR8V+Fm1Ulin/aPvRhh38=
Subject key identifier:   D2:3A:EA:3B:F9:68:6D:79:49:67:BE:CA:C2:26:FA:96:48:87:68:70
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0E8B67ED33BCD6C34DD1358DA32F9D57691BAEAB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 29 Apr 2025 18:16:49 +0000
Certificate not after:    Tue 28 Apr 2026 18:21:49 +0000
Subordinate resources:    AS: 270437
                          IP: 200.11.104.0/22
                          IP: 2804:6bf8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 May 2025 18:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:8b:67:ed:33:bc:d6:c3:4d:d1:35:8d:a3:2f:9d:57:69:1b:ae:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 29 18:16:49 2025 GMT
            Not After : Apr 28 18:21:49 2026 GMT
        Subject: CN=D23AEA3BF9686D794967BECAC226FA9648876870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6e:75:46:c2:d3:70:6b:48:42:5c:c2:46:96:
                    bf:72:43:48:3b:0c:3f:af:23:a9:6e:42:07:93:0f:
                    95:80:46:38:80:0a:ff:50:13:7c:21:ed:48:14:a5:
                    8c:4b:19:fb:e5:4f:10:bb:32:e3:33:ec:c6:ee:ff:
                    59:4f:90:1f:ee:7a:4d:87:58:d9:c5:6e:4e:67:40:
                    45:98:37:75:05:27:10:d9:2f:d1:5a:3c:f5:0a:4a:
                    28:31:e8:8f:ee:5c:e0:d6:d2:97:ef:f3:cd:25:c4:
                    6c:2d:62:76:6b:df:33:e1:11:00:ff:31:6c:48:d6:
                    55:96:2b:80:16:ea:50:be:d8:59:37:73:3b:45:2f:
                    69:2f:42:ad:36:fc:46:34:da:38:c8:6d:41:6e:34:
                    f4:24:3b:d4:f9:5f:43:8b:e1:0e:98:33:29:70:ed:
                    67:c3:90:5a:da:d0:9f:8f:ea:82:07:60:bb:2f:79:
                    46:c3:09:41:5c:6b:c7:03:a2:a1:b5:f9:ba:15:6f:
                    a2:66:61:bb:42:c5:52:1a:f1:9c:13:74:da:80:db:
                    47:4c:77:59:57:a2:2a:7d:5a:89:39:09:3f:65:80:
                    70:32:fd:fc:ed:00:0b:9f:9e:3e:1f:f2:be:ec:fe:
                    bf:f4:b6:50:d9:cf:a8:2a:81:19:8f:34:01:ac:b1:
                    61:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D2:3A:EA:3B:F9:68:6D:79:49:67:BE:CA:C2:26:FA:96:48:87:68:70
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.11.104.0/22
                IPv6:
                  2804:6bf8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270437

    Signature Algorithm: sha256WithRSAEncryption
         4c:7c:da:62:f0:5c:2a:36:5d:1f:55:19:8b:55:50:b3:0a:00:
         a1:43:1e:b2:df:89:80:2d:42:68:50:f0:1a:64:d2:a5:c9:72:
         e8:28:55:eb:d3:1c:31:6c:a9:73:4c:7f:f6:36:21:6c:29:1a:
         aa:1b:d3:1d:3a:f4:22:73:57:6b:0b:44:6f:51:73:74:73:a5:
         1d:02:7b:f7:42:2e:c1:0d:21:8c:51:29:7a:12:81:d8:60:40:
         5f:ab:44:d1:84:49:c6:82:5d:60:ff:14:68:91:f7:05:09:69:
         2c:94:47:62:29:d7:c1:4e:30:c4:6b:9f:99:93:0a:3a:93:f4:
         c2:22:74:37:75:27:1a:46:e6:33:a5:49:72:6f:1d:41:89:52:
         30:63:94:8f:c9:59:a6:97:4e:26:df:47:18:ef:3e:a2:a1:ff:
         99:1e:f2:a4:e9:ec:a5:32:68:68:53:59:cf:f7:02:f1:e0:84:
         b4:17:b1:74:72:99:2d:63:4b:c7:8b:6f:6c:83:5d:1d:bc:95:
         26:85:bc:42:9d:c8:66:e0:cc:25:7a:9d:96:3c:34:98:8e:00:
         c3:88:dd:64:5d:6c:ee:b0:43:d8:99:c3:15:cd:4b:5d:04:ff:
         34:99:ce:31:2d:89:7d:4d:cb:d8:7f:dc:59:2d:84:2c:25:3f:
         83:eb:3f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 18:41:53 2025 by rpki-client