Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E7964E5BF1FF4D49D0A36FCF2B318EB7A64A26A3.cer
File:                     E7964E5BF1FF4D49D0A36FCF2B318EB7A64A26A3.cer (raw, json)
Hash identifier:          4Ru6opMXLS77582cv++6ryMpMu1K7ngjEVBYDHAYriE=
Subject key identifier:   E7:96:4E:5B:F1:FF:4D:49:D0:A3:6F:CF:2B:31:8E:B7:A6:4A:26:A3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       48D96584120E9404DBCC80D7CDE5F7AFAC0C1709
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/2/E7964E5BF1FF4D49D0A36FCF2B318EB7A64A26A3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 22 Apr 2025 17:47:36 +0000
Certificate not after:    Tue 21 Apr 2026 17:52:36 +0000
Subordinate resources:    AS: 266460
                          IP: 170.82.252.0/22
                          IP: 2804:3828::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 21:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d9:65:84:12:0e:94:04:db:cc:80:d7:cd:e5:f7:af:ac:0c:17:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 22 17:47:36 2025 GMT
            Not After : Apr 21 17:52:36 2026 GMT
        Subject: CN=E7964E5BF1FF4D49D0A36FCF2B318EB7A64A26A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:85:6d:44:b7:56:d4:28:68:a4:0c:96:cf:e4:
                    e9:2c:e8:cd:9e:07:9a:79:23:b4:c6:66:10:25:9f:
                    15:4f:0f:43:08:4c:47:55:f4:a5:11:57:c4:ae:70:
                    cc:55:09:44:0f:63:33:24:96:92:73:3c:c9:36:f5:
                    27:2c:94:44:7b:f6:c4:cc:7b:67:4b:ae:9a:e8:4c:
                    bb:fe:01:97:9c:64:07:b4:6a:95:9f:19:ba:21:34:
                    9a:f3:d2:aa:da:c3:92:2d:0d:9b:20:d5:cd:95:eb:
                    f6:64:4e:16:96:3c:36:00:16:f5:6b:61:b8:4f:c4:
                    2c:17:72:64:c4:b3:f4:d6:02:81:49:91:8c:99:a3:
                    e9:2e:9a:29:37:f0:77:f1:43:45:da:88:3c:0e:0e:
                    1e:30:78:0c:54:44:60:cb:e7:20:61:35:27:6e:fe:
                    37:82:49:62:ba:4f:cb:5e:cf:ca:a0:4b:61:5a:4e:
                    2e:2d:61:a8:a3:b1:12:bf:21:50:6b:68:3f:6e:be:
                    9b:93:3d:fb:cc:6a:1f:1e:c3:b7:0d:3b:e6:ac:17:
                    ef:a2:b2:a8:f3:56:b8:7a:12:97:ab:e4:eb:1b:93:
                    b0:c9:4a:38:93:bc:0f:c7:ce:62:8f:8b:69:09:33:
                    20:3f:b1:de:87:75:84:60:ea:44:24:6c:66:b7:b8:
                    e0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E7:96:4E:5B:F1:FF:4D:49:D0:A3:6F:CF:2B:31:8E:B7:A6:4A:26:A3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/2/E7964E5BF1FF4D49D0A36FCF2B318EB7A64A26A3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.252.0/22
                IPv6:
                  2804:3828::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266460

    Signature Algorithm: sha256WithRSAEncryption
         52:79:f0:bf:fb:d4:f4:4f:63:3f:b6:f4:4f:7d:0a:21:5a:f7:
         59:02:35:02:b6:34:c2:67:23:9b:4c:87:a8:49:ab:7f:ff:59:
         96:4d:05:69:dc:99:81:3f:e9:b5:a7:97:79:9b:f8:a8:ba:e8:
         95:21:e9:06:35:61:82:3f:69:9b:91:2b:ac:db:65:56:d7:76:
         2b:13:0d:5d:c2:8e:c0:ca:e8:fa:9e:5e:06:08:18:3a:43:5c:
         30:13:85:dc:6b:d4:0b:86:f4:1b:8c:3f:09:48:e0:9d:27:58:
         31:e5:68:ce:cf:67:b4:6d:0c:a8:0a:fc:77:cd:ce:6b:e3:e8:
         b4:19:02:13:08:16:51:2f:2c:c1:ab:6f:42:38:8b:1d:89:17:
         1c:16:e2:d6:f1:2c:11:59:95:c5:17:bc:07:ba:83:e5:e8:43:
         cf:af:79:4d:85:02:15:35:91:1f:06:dd:26:b7:81:33:af:ca:
         35:2f:1a:16:d3:55:5c:9c:3b:24:22:42:89:5e:b3:cd:0f:00:
         82:6a:72:43:3c:a3:5b:09:3e:74:8e:bd:e1:e5:d2:3f:37:c4:
         52:32:ba:2e:ec:23:b6:8a:f4:dd:a6:95:c8:ba:14:33:cd:41:
         22:6a:4b:05:08:06:3d:2e:6a:4b:78:59:de:e0:53:8a:cd:c1:
         63:f4:fe:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:07:52 2025 by rpki-client on console.sobornost.net