Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1A57F0046A898E6B7D56895412B21D8FB1DEF705.cer
File:                     1A57F0046A898E6B7D56895412B21D8FB1DEF705.cer (raw, json)
Hash identifier:          obr3bQTBdJYGtE2OgwkAMqyQZPvdIBcq7Stz7C4ZgcA=
Subject key identifier:   1A:57:F0:04:6A:89:8E:6B:7D:56:89:54:12:B2:1D:8F:B1:DE:F7:05
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5F91A8D0009674C7ED169031530F7500B710AE32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/1A57F0046A898E6B7D56895412B21D8FB1DEF705.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 30 Apr 2025 19:39:26 +0000
Certificate not after:    Wed 29 Apr 2026 19:44:26 +0000
Subordinate resources:    AS: 264091
                          IP: 143.208.128.0/22
                          IP: 2804:2abc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 06 May 2025 18:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:91:a8:d0:00:96:74:c7:ed:16:90:31:53:0f:75:00:b7:10:ae:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 30 19:39:26 2025 GMT
            Not After : Apr 29 19:44:26 2026 GMT
        Subject: CN=1A57F0046A898E6B7D56895412B21D8FB1DEF705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:47:94:4c:f8:bf:55:2e:4b:8a:4b:c2:54:6d:
                    66:43:ac:33:b5:75:47:f4:2b:bb:41:63:45:13:8b:
                    24:c1:d4:61:ef:78:59:20:68:cc:e3:56:4a:a1:b4:
                    d2:65:d9:17:88:fa:bb:53:0d:a4:3e:bc:b4:1b:6c:
                    4a:fe:a0:f1:0a:53:cf:b2:ab:e2:96:2f:e6:c6:59:
                    16:47:ab:91:70:89:b2:a6:3f:1e:59:b0:5a:75:40:
                    7e:c4:b7:54:7b:3b:3f:f6:3c:92:00:d8:39:0d:b2:
                    b8:3f:a5:d2:03:a8:9b:03:80:a0:ba:44:3f:48:20:
                    1f:58:0a:8a:96:c4:ce:c8:30:39:f6:1f:d2:3b:33:
                    21:90:59:5b:c5:2f:3b:a3:03:7f:01:fd:91:cc:c5:
                    0b:c4:aa:c0:3f:50:a7:88:bf:da:ae:1a:1f:98:55:
                    87:9f:5d:06:1f:d9:a0:32:93:29:4c:74:20:26:07:
                    f7:70:d9:a8:d9:a0:58:b3:52:1b:2e:b0:1a:60:0f:
                    38:09:48:ab:68:53:09:66:94:9c:a0:88:5c:f5:51:
                    f3:dc:f3:48:dc:ff:68:2d:ef:ec:0d:53:98:bd:3a:
                    e7:33:63:6f:40:f3:dc:c5:bc:87:09:9f:65:e1:0f:
                    68:42:20:11:a9:42:43:88:40:ab:a0:61:6b:32:49:
                    eb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1A:57:F0:04:6A:89:8E:6B:7D:56:89:54:12:B2:1D:8F:B1:DE:F7:05
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/1A57F0046A898E6B7D56895412B21D8FB1DEF705.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.128.0/22
                IPv6:
                  2804:2abc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264091

    Signature Algorithm: sha256WithRSAEncryption
         a8:03:96:5e:a6:ff:a6:da:a7:f7:f4:86:75:d2:a8:09:cb:ae:
         46:21:4e:5f:35:c7:7f:68:c6:80:91:ae:8f:c8:77:16:90:fc:
         75:45:74:dd:0a:f5:b3:29:f4:5c:f9:99:ef:12:f5:12:94:71:
         00:23:f2:f6:7f:f0:0b:5f:da:f8:a1:67:fc:32:46:56:b4:70:
         5f:03:41:2a:8f:49:7b:05:5a:0f:1d:8b:16:b7:b1:25:e5:6a:
         64:2c:d2:2c:89:55:fa:c1:1c:69:5e:42:37:80:99:4e:94:bf:
         7f:27:14:ac:5c:a6:cf:18:84:7a:f9:03:66:b4:0c:82:65:07:
         ba:61:ad:8f:0d:04:5b:c8:ed:77:05:01:d2:8b:76:88:75:67:
         8c:07:d4:b2:89:6d:e2:bf:26:68:f2:b2:a9:2b:49:4c:42:b7:
         f9:8f:a4:4c:86:be:dd:20:e4:1b:ab:39:ea:76:da:f0:3d:a3:
         d2:9a:81:56:be:5e:c4:f3:06:84:2c:59:e9:9b:7a:30:1b:55:
         91:4e:70:58:8c:fd:04:38:65:58:40:6b:1f:16:75:51:6b:6e:
         62:0f:fa:62:33:6d:1e:93:66:aa:79:21:29:77:34:7d:e1:28:
         d6:0b:e4:1e:d3:42:84:c8:5f:c3:35:2c:3e:1e:f6:55:d1:97:
         c8:8e:4d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:24:11 2025 by rpki-client