Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.cer
File:                     F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.cer (raw, json)
Hash identifier:          UtSK6PHo5ct0RjFJVD/zHPLXHswcScqV3vwoHRA0Xas=
Subject key identifier:   F0:EF:5A:E4:94:31:89:7F:FD:D3:75:9A:B5:AC:D5:D5:F9:D5:CB:3E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6A1C90E3311085FB23F99CBC5406E97C00070BDB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/33wsswsjEF1KVEGfEEMQuXEHHvMvmCgXd2XAmm9QYVzW/0/F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/33wsswsjEF1KVEGfEEMQuXEHHvMvmCgXd2XAmm9QYVzW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 30 Apr 2025 14:53:05 +0000
Certificate not after:    Wed 29 Apr 2026 14:58:05 +0000
Subordinate resources:    AS: 269185
                          IP: 45.181.144.0/22
                          IP: 2804:60b4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 May 2025 14:18:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:1c:90:e3:31:10:85:fb:23:f9:9c:bc:54:06:e9:7c:00:07:0b:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 30 14:53:05 2025 GMT
            Not After : Apr 29 14:58:05 2026 GMT
        Subject: CN=F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:26:90:f9:e6:d4:51:58:b0:ac:9b:64:ed:4c:
                    c7:21:68:1e:c7:c0:38:59:53:4c:b9:80:9b:d6:ad:
                    64:68:21:c6:a3:68:6b:a4:fa:6a:3a:a8:dc:8d:63:
                    3b:c9:cf:d1:e8:c1:65:94:61:1e:cf:a7:cf:8b:1a:
                    d0:9c:2f:66:d6:74:8b:a7:75:1a:93:00:aa:ff:45:
                    12:25:df:72:7f:aa:9e:11:b4:02:f3:33:04:5b:1f:
                    49:04:64:18:6e:52:97:a7:48:80:39:35:a0:65:99:
                    59:f6:b5:06:38:dd:a3:d1:94:4d:69:38:08:13:b1:
                    fe:7c:d5:f2:48:28:8f:8e:50:0b:8d:fa:d2:b1:ff:
                    67:f0:5a:62:90:af:e0:1f:a2:dc:d9:62:e6:e7:2b:
                    02:05:e0:e3:5d:e2:8f:a9:c6:1b:15:00:10:7d:70:
                    cb:8f:b0:a6:1c:70:e2:6b:f7:28:c2:2e:54:6c:60:
                    1d:d1:1f:8a:fc:a8:2b:c9:d6:20:99:16:73:63:98:
                    4f:08:fe:d1:0b:16:04:6d:7c:22:ac:df:9b:24:79:
                    96:4c:24:90:f2:10:cc:10:16:59:e9:6f:52:c9:21:
                    26:65:94:42:2f:09:7d:fc:c0:be:9c:6f:03:48:fb:
                    6a:87:73:ae:e1:ac:2b:d2:30:64:24:65:6b:66:67:
                    c9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F0:EF:5A:E4:94:31:89:7F:FD:D3:75:9A:B5:AC:D5:D5:F9:D5:CB:3E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/33wsswsjEF1KVEGfEEMQuXEHHvMvmCgXd2XAmm9QYVzW/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/33wsswsjEF1KVEGfEEMQuXEHHvMvmCgXd2XAmm9QYVzW/0/F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.144.0/22
                IPv6:
                  2804:60b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269185

    Signature Algorithm: sha256WithRSAEncryption
         16:4e:4b:83:7f:90:a9:1b:fb:ef:1a:73:dc:b4:05:b7:25:83:
         bd:e5:df:53:1a:8d:ae:45:93:30:ef:1b:49:d7:c9:c7:c7:ab:
         46:1f:57:2f:2b:3b:31:c5:d4:08:c3:20:5c:81:06:67:94:55:
         f1:ac:92:fc:ae:56:6e:30:4d:43:ac:4f:7c:48:68:84:cc:8e:
         2e:8c:b6:95:f3:39:b5:ad:68:ba:09:de:63:63:e6:37:35:cb:
         58:13:40:a6:c0:3d:5b:68:04:fa:76:9f:a7:f4:24:37:49:83:
         83:75:12:72:14:d5:25:a5:ba:67:e4:6c:d1:1c:ee:84:00:82:
         c4:df:0f:b6:88:4f:e4:e5:3c:c3:ed:b3:24:26:1b:10:40:99:
         88:43:44:e4:70:32:82:28:23:88:be:f8:57:0a:ad:4d:3d:27:
         d3:1c:cf:bd:46:d7:9e:be:74:b5:b4:64:82:4b:7f:d4:00:ea:
         9e:9d:0a:6e:0d:31:24:13:e6:9d:13:34:99:b8:4a:28:d4:b6:
         37:a0:66:7c:6b:cd:40:04:48:f0:fa:76:1f:b9:27:56:0b:53:
         79:98:3c:e2:73:a8:15:b1:80:9f:85:d8:39:ba:6f:e1:fe:0b:
         ee:ae:9a:98:82:f2:41:62:79:e2:bc:5d:8d:96:e0:53:e6:55:
         c1:8a:d9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:00:03 2025 by rpki-client