Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.cer
File:                     EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.cer (raw, json)
Hash identifier:          3KI1toejxRpW5GIHIiTkgSEBz5XPoI43k60ihPR/Kbk=
Subject key identifier:   EA:89:78:EA:32:6E:0C:13:5B:17:DA:6D:CA:46:3E:FC:4F:31:3F:D7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5416BEDC823E75CCA36AC0DE388D1CCB4BDE475B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 25 Jun 2025 12:37:56 +0000
Certificate not after:    Wed 24 Jun 2026 12:42:56 +0000
Subordinate resources:    AS: 270602
                          IP: 177.85.240.0/22
                          IP: 2804:6e84::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 09:41:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:16:be:dc:82:3e:75:cc:a3:6a:c0:de:38:8d:1c:cb:4b:de:47:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 25 12:37:56 2025 GMT
            Not After : Jun 24 12:42:56 2026 GMT
        Subject: CN=EA8978EA326E0C135B17DA6DCA463EFC4F313FD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:63:8c:2d:e2:7b:aa:35:3e:1c:61:ce:50:2b:
                    e6:40:45:06:dc:1b:5d:2c:ea:df:62:95:f2:d0:ae:
                    25:f5:4e:4c:ca:b9:40:35:86:37:02:85:99:c6:e9:
                    eb:3b:f2:dc:69:31:15:9b:7b:76:b6:27:6b:c1:57:
                    bd:03:cb:d6:4f:4c:bc:8e:8b:a7:4e:87:33:4b:bd:
                    0d:ce:ad:24:80:f6:e1:1a:08:62:fd:6e:cf:08:40:
                    30:8f:04:1f:54:f9:36:2a:6a:31:64:1f:31:c1:0d:
                    38:37:9d:ed:4f:ec:ad:2e:ca:f9:bc:7e:78:c9:a7:
                    75:14:69:02:90:7b:8e:b9:b5:60:50:5b:81:8b:8f:
                    9d:66:80:12:e5:84:01:ab:7f:47:36:5d:ed:0e:69:
                    df:0d:b0:89:43:be:9a:78:0a:77:0a:db:d9:ca:89:
                    c2:84:4d:b5:44:56:6f:96:a1:33:57:1b:30:46:6e:
                    53:11:21:5c:67:99:4d:bf:a9:6c:86:35:f0:0a:4f:
                    e1:d0:60:bf:ce:87:bb:f0:05:d1:51:53:bc:01:51:
                    e7:6e:ef:1a:1a:25:9b:c7:55:8f:2c:2a:b8:be:5a:
                    26:dc:89:38:d1:2e:67:9d:99:a3:2e:c4:fc:18:51:
                    20:d0:37:fe:62:b4:fc:65:48:8d:96:15:73:6a:d1:
                    6a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EA:89:78:EA:32:6E:0C:13:5B:17:DA:6D:CA:46:3E:FC:4F:31:3F:D7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.240.0/22
                IPv6:
                  2804:6e84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270602

    Signature Algorithm: sha256WithRSAEncryption
         3d:c6:cc:bc:12:20:99:36:7d:89:28:b4:74:5d:4f:f3:00:5a:
         a2:a9:db:0f:73:8f:23:9b:76:77:43:1b:ee:3a:4e:17:eb:cf:
         64:5f:1f:25:27:59:a3:89:40:03:bf:c9:f5:93:c0:12:f1:61:
         2e:6a:3d:91:43:14:c5:d1:d3:de:26:bd:1e:c2:dd:17:9b:b9:
         f4:4d:92:45:05:59:7d:43:d7:c2:5a:1c:2e:f3:85:93:51:0b:
         20:a8:e3:07:24:e8:f6:20:0e:ad:ec:69:bd:09:f0:f8:d5:2f:
         4e:b4:9c:d4:2b:d0:33:38:fc:fb:7a:cb:4f:77:d2:86:f6:43:
         ab:dc:56:54:09:f0:71:29:69:41:7e:70:4c:1c:44:56:ac:f8:
         03:ab:b7:b1:74:be:e1:1d:88:a7:e4:a2:fe:46:2f:e5:44:29:
         28:1c:09:a7:c9:ef:c1:65:4a:94:76:1b:f1:53:03:74:2e:42:
         bb:26:ad:c7:6e:71:ef:de:81:b9:fd:3d:b3:9b:7e:67:20:ea:
         1f:f6:80:52:83:b2:78:1f:a9:40:6c:34:83:3b:63:4e:2a:e6:
         33:fe:cb:ea:81:4e:de:a5:63:bb:ab:e9:d0:2b:e4:bc:ff:e5:
         5e:c5:bb:c2:51:86:a5:97:90:b1:94:20:fc:81:c4:72:42:c7:
         8c:3a:15:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:30:32 2025 by rpki-client