Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.cer
File:                     5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.cer (raw, json)
Hash identifier:          lnBAuYhBvT5ME+ptYaEYjMg8sJjoqnzXgSlZlT9Z3L8=
Subject key identifier:   53:00:AE:48:AF:BB:B3:79:3D:0E:14:25:B8:FC:6D:38:F4:3B:DC:50
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3275EE913DA9C840437E18F82FC0F7E8E28505A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 31 Mar 2025 14:15:56 +0000
Certificate not after:    Mon 30 Mar 2026 14:20:56 +0000
Subordinate resources:    AS: 28153
                          IP: 164.163.140.0/22
                          IP: 170.233.60.0/22
                          IP: 186.193.208.0/20
                          IP: 187.60.144.0/20
                          IP: 201.148.252.0/22
                          IP: 2804:1a14::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 21:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:75:ee:91:3d:a9:c8:40:43:7e:18:f8:2f:c0:f7:e8:e2:85:05:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 31 14:15:56 2025 GMT
            Not After : Mar 30 14:20:56 2026 GMT
        Subject: CN=5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4e:d8:07:e1:f5:80:df:11:4e:e7:47:38:8c:
                    54:ac:6a:56:19:7d:ce:46:92:dd:b1:36:3a:ca:4e:
                    79:3b:59:e4:c1:ad:19:6e:98:97:3e:0f:5e:60:d9:
                    31:4a:24:d2:6e:a4:47:53:a0:ee:e7:75:23:7d:f9:
                    e1:9f:d5:17:da:95:6a:a2:4f:40:47:f2:91:8c:18:
                    1e:b9:78:39:80:84:50:b1:e1:e5:c8:35:15:58:23:
                    e6:ee:6c:72:4e:b2:59:98:89:24:ff:e4:6d:9a:fa:
                    db:58:25:65:22:c2:ff:4f:8f:70:b0:93:1d:cd:e2:
                    f9:2a:72:1a:a8:b7:7c:92:0a:64:5a:9f:be:1f:a3:
                    55:5e:c8:54:79:33:9b:40:90:69:13:10:08:49:86:
                    8a:ca:97:ee:7b:ee:80:6e:be:98:75:02:64:b6:86:
                    78:8e:0a:50:61:73:37:d9:bc:07:14:f4:58:a0:b6:
                    9e:95:00:b9:a3:7a:b4:40:c5:a7:6c:99:03:93:91:
                    47:ab:13:2a:fc:8d:a9:2d:5e:12:8e:92:84:f4:a9:
                    1a:e9:4f:41:89:d9:29:44:4d:cc:1c:5f:69:4a:27:
                    aa:98:3b:34:48:71:66:cc:87:81:fc:d6:12:8b:f6:
                    f8:80:d9:28:74:94:07:87:d8:d9:66:3e:5d:19:66:
                    c3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                53:00:AE:48:AF:BB:B3:79:3D:0E:14:25:B8:FC:6D:38:F4:3B:DC:50
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.140.0/22
                  170.233.60.0/22
                  186.193.208.0/20
                  187.60.144.0/20
                  201.148.252.0/22
                IPv6:
                  2804:1a14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28153

    Signature Algorithm: sha256WithRSAEncryption
         82:8a:0b:73:26:16:4e:16:c6:90:98:d1:e7:82:f2:e5:5e:0b:
         d9:9b:e5:00:5e:08:61:4f:cf:50:55:47:be:63:87:21:36:a6:
         f1:c6:a4:2f:01:09:7e:ca:23:94:41:32:c0:4a:09:b8:45:44:
         bf:5f:0c:09:02:07:d3:9e:c0:4b:c5:3d:59:68:80:ca:eb:b1:
         66:86:5e:37:3a:0c:fb:76:9c:5f:93:36:f0:ea:d9:2b:50:f6:
         e8:83:13:6d:9e:ea:68:bc:a5:31:fc:9a:d2:f9:b4:64:34:0d:
         49:99:5d:46:54:28:0f:5e:cf:2d:2f:6d:14:e5:92:54:1a:c0:
         1a:de:56:5d:32:ce:ee:55:84:dc:0f:29:05:88:4d:1c:44:1a:
         6f:ca:b8:f4:9a:98:20:5b:27:2f:b3:1d:b3:c9:7f:15:89:a0:
         53:fc:f8:0f:eb:4e:e7:31:e3:67:28:09:fa:1a:8d:ed:6e:bd:
         a6:6b:d2:48:41:e6:a1:fc:0a:65:cb:7f:1c:93:f1:25:42:5e:
         49:2c:bc:24:ea:93:9f:5f:7c:1e:0e:b3:f6:9d:5b:17:d3:38:
         e4:fd:85:47:18:a9:79:9e:72:ef:6e:6b:34:64:f1:cb:01:f8:
         61:3b:91:c7:6f:87:6a:74:b2:3b:ef:b6:71:2f:1a:ca:0c:38:
         23:88:ba:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:07:19 2025 by rpki-client on console.sobornost.net