Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.cer
File:                     3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.cer (raw, json)
Hash identifier:          w/qbEvlij5A6fbQmukjTCyQs/p6UrT8oj8YjOIZcQdg=
Subject key identifier:   3B:18:B7:DC:9E:3A:9E:E8:2B:ED:80:DD:09:B5:7D:20:04:5B:0C:30
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       47CC9F6F9977DF611ADD1FE559B646565C97E436
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 12 Jun 2025 15:21:17 +0000
Certificate not after:    Thu 11 Jun 2026 15:26:17 +0000
Subordinate resources:    AS: 269007
                          IP: 45.176.152.0/22
                          IP: 2804:5e08::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Jun 2025 04:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:cc:9f:6f:99:77:df:61:1a:dd:1f:e5:59:b6:46:56:5c:97:e4:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 12 15:21:17 2025 GMT
            Not After : Jun 11 15:26:17 2026 GMT
        Subject: CN=3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e0:99:a1:38:93:24:eb:bb:8a:e5:85:65:cd:
                    ca:f7:9c:41:d1:1c:e4:13:2a:ac:60:0a:b0:5a:0c:
                    07:9b:bd:bf:c3:d4:e7:c2:1a:1c:8a:20:bb:ae:58:
                    51:30:20:7f:11:d1:1a:a7:c4:07:f1:57:6d:b5:cb:
                    80:48:f2:22:36:21:86:ec:f0:d7:4e:14:11:e7:31:
                    73:c4:48:0d:5f:ba:47:6b:5a:4c:6c:04:f0:74:76:
                    2a:52:e9:c6:f5:d4:18:cb:b9:8b:63:4f:e0:e8:7f:
                    d1:24:e1:68:94:cc:25:76:dd:4d:fa:0c:a9:b9:46:
                    33:e7:21:9a:41:74:b5:84:59:6a:e3:b7:8a:1a:57:
                    42:1e:bc:f6:79:f7:c7:42:96:1d:77:c2:fc:52:c5:
                    e7:64:31:07:b8:bd:c4:c5:58:58:0f:57:c9:93:89:
                    89:c5:9f:af:af:8f:ff:21:80:ca:9b:50:95:09:86:
                    e9:07:ad:81:ff:00:4e:ea:ad:fb:d0:3c:df:d3:66:
                    8b:79:f0:93:cb:8b:07:8c:26:de:78:20:79:7f:3d:
                    dc:b2:f4:6b:c1:54:56:5a:2b:b6:5c:91:49:f8:36:
                    0d:9d:cd:73:c3:bd:09:8e:45:d9:0c:69:2d:29:37:
                    a1:c1:fa:07:54:f5:e3:d3:c2:ab:f8:55:d4:90:4b:
                    22:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3B:18:B7:DC:9E:3A:9E:E8:2B:ED:80:DD:09:B5:7D:20:04:5B:0C:30
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.152.0/22
                IPv6:
                  2804:5e08::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269007

    Signature Algorithm: sha256WithRSAEncryption
         5e:dc:5a:25:ed:66:67:37:91:1b:ff:b5:f6:f4:52:21:94:e6:
         54:e7:94:9b:6c:47:48:cd:31:d6:f8:3e:3b:46:ea:66:95:be:
         35:76:c7:27:0f:fd:52:4b:da:64:5a:ba:b8:3a:30:7a:f6:4b:
         9d:de:5e:cd:08:bb:e5:ca:ee:c2:21:4f:1d:6f:0f:4d:78:e3:
         41:8d:2d:1d:44:9a:2e:a0:09:e2:0f:3b:26:fc:a8:9c:9d:4f:
         ac:85:21:c2:0f:9a:34:c9:9c:1b:df:3c:ff:92:d3:a3:06:59:
         dc:e2:1b:6e:c6:4a:80:72:bb:54:da:00:70:bd:7d:d9:5f:17:
         b0:d0:9c:fe:52:4f:8c:82:06:f4:65:74:95:82:a5:23:47:45:
         1a:3a:eb:37:71:05:26:60:ce:30:22:df:b8:bc:32:0e:fa:19:
         c7:0d:76:2b:b3:5b:b7:34:12:5b:dc:12:25:c3:39:03:02:a9:
         a1:71:ff:d1:6d:8e:73:b2:09:d0:05:d2:ae:71:d3:a2:c6:43:
         70:70:fd:30:ef:db:9e:69:8f:2d:0a:91:7c:c0:63:d5:2d:b7:
         ee:ae:5b:3e:32:77:46:da:f8:96:14:ba:01:1e:25:d2:07:36:
         f2:a8:7b:b6:0c:2e:eb:32:43:e2:3c:18:dd:b9:47:ee:8a:ea:
         b3:d1:67:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:34:03 2025 by rpki-client