Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/058629EB1C805566CA700E3A2EE9B2B066B42FB4.cer
File:                     058629EB1C805566CA700E3A2EE9B2B066B42FB4.cer (raw, json)
Hash identifier:          q0IkRzJS9oUgzxE0RJ9GvCabpmOfDo1ma5wrDOElZ64=
Subject key identifier:   05:86:29:EB:1C:80:55:66:CA:70:0E:3A:2E:E9:B2:B0:66:B4:2F:B4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3DF20208DE4F055DB249A5A54850CE5512DAABEE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/058629EB1C805566CA700E3A2EE9B2B066B42FB4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 29 Apr 2025 18:16:47 +0000
Certificate not after:    Tue 28 Apr 2026 18:21:47 +0000
Subordinate resources:    AS: 52932
                          IP: 177.185.112.0/21
                          IP: 2804:28b0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 01:28:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:f2:02:08:de:4f:05:5d:b2:49:a5:a5:48:50:ce:55:12:da:ab:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 29 18:16:47 2025 GMT
            Not After : Apr 28 18:21:47 2026 GMT
        Subject: CN=058629EB1C805566CA700E3A2EE9B2B066B42FB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:54:f0:f7:e9:ae:8b:e9:af:92:b0:72:29:34:
                    bb:83:d6:05:7d:94:0e:56:b4:1a:66:f3:34:ee:1a:
                    57:c1:1f:e9:64:32:32:8c:17:c0:de:29:0e:34:74:
                    e1:79:4e:6a:b2:c0:06:e4:d6:3c:15:3d:23:4e:51:
                    dc:06:9e:77:41:3d:af:f5:b4:8f:ee:73:74:de:7d:
                    a8:0a:5e:8b:a9:2a:3f:1a:d0:bf:07:ae:9d:2b:ee:
                    53:a6:9a:38:cb:f6:c1:98:0e:82:bb:57:2b:b1:85:
                    61:ab:7d:e2:5d:9b:6f:8a:83:83:9e:38:d1:2f:64:
                    31:92:28:af:55:47:fa:d4:5c:98:f2:66:b9:b5:6d:
                    3d:01:b1:32:e5:55:9f:27:dd:51:86:78:00:31:99:
                    cd:10:65:67:f7:8f:61:96:64:44:13:f8:95:a3:21:
                    08:f0:75:e5:89:ef:cd:2d:e1:1c:ac:01:0b:b9:59:
                    84:21:91:03:5c:7f:3a:0b:26:44:4f:19:49:6f:cc:
                    a9:6d:3c:bc:a6:31:55:70:d2:92:52:04:ed:fe:d1:
                    47:50:5e:1c:56:fa:4a:60:82:61:3a:e3:ce:d4:07:
                    85:16:46:b0:36:53:e9:82:49:de:9f:42:82:e8:7d:
                    5d:e1:a7:e1:2d:c8:9a:df:b9:35:1b:d9:e6:e7:1e:
                    1a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                05:86:29:EB:1C:80:55:66:CA:70:0E:3A:2E:E9:B2:B0:66:B4:2F:B4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/058629EB1C805566CA700E3A2EE9B2B066B42FB4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.112.0/21
                IPv6:
                  2804:28b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52932

    Signature Algorithm: sha256WithRSAEncryption
         cb:21:26:e6:27:86:9d:cb:16:dc:ca:fa:5f:f5:c0:37:e2:ff:
         f1:f7:6c:79:0b:11:39:9e:d2:5d:12:4f:bb:c5:91:da:65:1b:
         a2:f6:37:09:2f:69:66:92:0c:06:5c:25:72:cd:33:40:92:05:
         bf:26:18:10:74:3e:ca:52:21:c2:81:72:d8:2c:f3:69:46:10:
         af:14:4d:9f:1b:99:be:c7:ce:a0:d3:46:43:22:28:aa:11:db:
         f1:d7:0f:07:6b:bc:ca:bb:9d:43:cc:db:44:bd:da:02:10:48:
         e9:0f:62:ce:15:2b:2b:ba:a9:70:2d:92:a0:ba:0b:05:d5:a4:
         98:d7:e3:c7:d2:ef:f5:e6:f9:1b:36:ff:82:66:a6:d7:de:c6:
         49:2d:34:71:19:b0:74:11:cf:e5:19:65:41:71:2b:d1:1b:9f:
         e2:c0:79:0f:e0:1e:6c:eb:85:b0:98:95:31:59:87:39:cc:eb:
         76:40:39:cf:5f:38:bd:22:57:cd:64:f9:60:95:ce:36:34:84:
         4e:82:f1:44:d7:2a:19:41:0d:60:ea:ec:52:d6:5f:f9:61:dd:
         98:cf:85:87:36:81:5b:2d:fc:92:1c:05:5e:47:28:55:f7:98:
         9b:2d:09:0e:bc:c1:f0:e4:97:52:7e:d1:84:48:4f:d6:8c:5d:
         72:04:b9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:30:59 2025 by rpki-client