Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EA07CB42A7DCEB708A94E2A15AA0C46FA5271E34.cer
File:                     EA07CB42A7DCEB708A94E2A15AA0C46FA5271E34.cer (raw, json)
Hash identifier:          Oy1XgoXXbFiSPuXoqDOTu/rQ06mZ4TI/TeKB+txL7k0=
Subject key identifier:   EA:07:CB:42:A7:DC:EB:70:8A:94:E2:A1:5A:A0:C4:6F:A5:27:1E:34
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       719648936F7F9B28C263ABF01BC1C2F30E4E75E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C2LDajWWHoJXmfj6T2WNHFuAKtERWzKe9CUawCMLkZpo/1/EA07CB42A7DCEB708A94E2A15AA0C46FA5271E34.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C2LDajWWHoJXmfj6T2WNHFuAKtERWzKe9CUawCMLkZpo/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 05 May 2025 04:09:52 +0000
Certificate not after:    Mon 04 May 2026 04:14:52 +0000
Subordinate resources:    AS: 61709
                          IP: 131.0.228.0/22
                          IP: 2804:1b1c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 23:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:96:48:93:6f:7f:9b:28:c2:63:ab:f0:1b:c1:c2:f3:0e:4e:75:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  5 04:09:52 2025 GMT
            Not After : May  4 04:14:52 2026 GMT
        Subject: CN=EA07CB42A7DCEB708A94E2A15AA0C46FA5271E34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:17:fb:d7:a3:ab:84:a5:22:45:d5:56:9d:04:
                    1f:ad:4f:f6:4c:78:ac:ff:0a:0f:77:9e:d5:02:44:
                    ba:65:9a:4a:f2:93:55:e2:0a:c9:2b:95:42:a4:8f:
                    af:5c:9c:d6:1d:11:39:7a:fb:bc:4b:14:e0:f8:36:
                    f2:65:91:db:20:17:4a:d6:d1:9c:7d:61:f8:37:12:
                    f4:bc:90:99:7a:a4:9a:b5:69:70:9b:42:de:1b:8f:
                    d6:25:85:67:73:f7:61:c0:0c:ca:57:a2:c1:bf:49:
                    75:3f:4e:f1:54:48:f2:d3:ac:c4:92:22:42:69:0d:
                    b0:e1:f1:e6:81:0c:99:03:7f:19:f7:dd:29:5a:f4:
                    ca:08:da:53:31:7f:94:bb:aa:ad:7f:24:be:4f:ca:
                    1a:9b:26:45:02:b9:6f:a5:7a:6f:fe:f3:df:e1:a4:
                    bd:c0:02:c1:69:49:3b:10:df:c4:6f:5d:d4:de:ba:
                    cc:10:31:de:f5:d1:fd:f0:8d:07:84:74:17:24:22:
                    54:10:c8:3f:4a:05:4f:03:9e:f3:72:a4:7d:7d:20:
                    be:f1:dd:9b:39:c5:ea:e2:25:c5:94:e6:c8:82:73:
                    3c:c4:ef:19:10:56:80:8c:02:b3:81:0e:27:48:da:
                    e1:f0:8c:f6:47:58:91:82:e4:80:64:dc:ca:43:ad:
                    a2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EA:07:CB:42:A7:DC:EB:70:8A:94:E2:A1:5A:A0:C4:6F:A5:27:1E:34
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C2LDajWWHoJXmfj6T2WNHFuAKtERWzKe9CUawCMLkZpo/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C2LDajWWHoJXmfj6T2WNHFuAKtERWzKe9CUawCMLkZpo/1/EA07CB42A7DCEB708A94E2A15AA0C46FA5271E34.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.228.0/22
                IPv6:
                  2804:1b1c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61709

    Signature Algorithm: sha256WithRSAEncryption
         a6:17:d0:c6:98:1b:83:6e:b6:d0:49:3a:4c:e0:0f:67:26:60:
         a9:48:70:a2:f3:b2:69:49:a6:14:4a:8a:79:58:0c:ed:f1:37:
         9c:6a:b3:3b:4f:37:46:e9:e6:49:94:c2:d4:e2:5e:98:28:ca:
         1a:8a:1d:91:9d:7b:a4:44:1e:88:88:bc:26:21:c0:a8:5b:29:
         da:38:ce:cc:74:49:db:bd:93:cc:ab:e4:62:d8:39:30:e7:ed:
         e1:b1:49:bb:62:60:08:e9:e9:3a:7e:a7:66:9d:5e:e2:3f:8a:
         0b:45:f1:46:ca:cb:66:7c:c2:b4:54:93:7c:a2:c9:01:2f:d5:
         d1:71:ad:c2:f2:93:c3:a3:d1:15:2e:9b:0e:8a:53:39:4a:78:
         47:e0:d1:d8:7b:69:d2:a0:e7:1c:3a:d7:80:21:b5:66:e8:d8:
         f4:87:6c:e8:64:7a:0c:80:a4:c4:0c:bc:69:01:8a:78:5c:fa:
         ad:ab:14:2c:8f:bf:a2:48:a3:1f:e9:8f:5e:af:0d:e2:c1:c6:
         ec:8c:1b:02:0f:f5:4f:4b:11:78:c6:ca:a4:d7:84:41:bc:9e:
         92:f7:19:07:fb:5b:f4:1c:6a:54:1a:ad:a1:ad:fa:f0:44:f6:
         01:15:c6:5e:7c:ba:3e:1d:de:f8:be:d1:3a:15:65:cb:34:7a:
         3e:5c:cd:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:18:47 2025 by rpki-client