Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.cer
File:                     FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.cer (raw, json)
Hash identifier:          wnjoOlRs/ZFd8mUqBBAasDKk8vUCMYy5bm5tREA6Jrc=
Subject key identifier:   FA:ED:B0:9B:70:5F:EF:6A:6E:14:D8:F6:8D:6E:E4:4B:C2:F1:28:94
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       67428151C6F9216ACC9B10729ED8A124E22A4268
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 04 Jun 2025 21:04:08 +0000
Certificate not after:    Wed 03 Jun 2026 21:09:08 +0000
Subordinate resources:    AS: 52910
                          IP: 186.251.38.0/24
                          IP: 2804:1f3c::/36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Jun 2025 20:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:42:81:51:c6:f9:21:6a:cc:9b:10:72:9e:d8:a1:24:e2:2a:42:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  4 21:04:08 2025 GMT
            Not After : Jun  3 21:09:08 2026 GMT
        Subject: CN=FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a4:b3:a3:b6:b5:b4:ee:24:1d:a6:f8:77:5b:
                    5d:57:77:27:7c:d8:86:d6:c3:d5:a7:29:de:8a:9b:
                    d1:20:9e:9b:f5:ac:45:f4:26:cb:5f:57:cb:0c:21:
                    25:c9:69:34:b5:32:a6:ed:95:f9:2e:0a:8f:1e:15:
                    d6:60:bb:9f:95:0b:2e:2b:2b:03:55:3e:a5:04:69:
                    b2:a0:5d:b0:4d:1b:1a:d8:ed:65:35:40:b9:3d:ac:
                    92:41:72:a1:c5:0e:a3:5c:b0:2a:ff:6e:ff:1e:1e:
                    4e:86:7c:cc:b7:4a:b2:2c:f6:cf:eb:19:30:6d:86:
                    a2:d0:42:da:4a:a8:eb:fe:fc:96:5a:54:0b:ae:24:
                    9e:78:d1:18:92:7b:ee:76:bb:72:0d:e1:d9:76:d2:
                    9c:5b:e7:be:67:3c:6a:91:1f:39:09:d4:3e:ea:ba:
                    a1:c1:02:66:20:fa:96:e3:94:83:9c:bb:56:4e:a1:
                    71:f5:2b:38:58:96:94:39:33:46:b6:70:3e:28:32:
                    71:fa:af:0a:ab:83:cd:7d:07:b2:11:9b:1d:10:0f:
                    ef:ec:d5:85:59:fc:69:d0:51:34:87:6e:d6:fb:7a:
                    22:f4:41:de:35:6f:52:8f:33:a1:f6:28:a5:68:c2:
                    13:49:a7:1a:a3:f2:bc:d3:6a:82:8a:6e:26:49:90:
                    b7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FA:ED:B0:9B:70:5F:EF:6A:6E:14:D8:F6:8D:6E:E4:4B:C2:F1:28:94
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.38.0/24
                IPv6:
                  2804:1f3c::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52910

    Signature Algorithm: sha256WithRSAEncryption
         bb:07:15:0f:fe:cc:69:f5:c3:4e:a2:bb:84:52:a2:95:4b:87:
         cf:2f:db:aa:66:3b:34:76:3b:5d:32:57:ec:f3:0e:03:d9:58:
         51:8b:c8:2b:67:64:84:b6:ce:b2:00:71:60:32:3b:b5:70:1d:
         d8:4d:9e:ea:33:b0:66:d5:d6:f1:0f:cf:6e:a7:5a:33:b7:a9:
         ef:1e:c0:a0:b8:44:4c:bd:5d:a8:f6:4d:f8:7a:2c:15:00:ff:
         f2:9f:dc:1f:2c:68:2c:87:32:53:d4:2c:f1:7e:66:60:e7:d0:
         40:69:96:91:f1:6c:51:bf:61:f2:90:b8:cc:6b:12:01:af:17:
         5e:f0:3b:fe:67:cb:e0:2b:53:14:8f:42:ae:6a:82:dd:ca:2c:
         ba:c8:7f:c3:2c:ff:b6:80:61:29:b2:ac:7d:cf:03:c6:22:9d:
         59:dd:4d:ff:89:88:92:a8:48:51:44:39:0a:49:fd:fa:e9:85:
         e7:db:42:54:49:e1:5a:e4:3a:0f:be:7a:11:f1:75:12:76:46:
         19:a8:ea:d0:52:99:91:02:f4:83:2f:78:0d:20:a4:eb:ae:f9:
         82:11:83:a3:ec:3d:56:8f:f2:c0:82:bc:b4:99:a5:30:f7:68:
         33:9f:50:95:e8:59:f2:54:f9:11:79:a6:10:6a:81:14:86:ff:
         d7:b3:64:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 22:55:49 2025 by rpki-client