Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/47F7BDC381D25855954B36ACF82259F7CE8074E5.cer
File:                     47F7BDC381D25855954B36ACF82259F7CE8074E5.cer (raw, json)
Hash identifier:          XJ5TQx4U+7hO3x6cmsfA6y3h59q6iga9VDFalPGJwLQ=
Subject key identifier:   47:F7:BD:C3:81:D2:58:55:95:4B:36:AC:F8:22:59:F7:CE:80:74:E5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       090660091991564DFABD09149653AE954BE80E2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8Bh3fi29zqRTptSk9EvogyBPRcWBXebXXdDvhjBXoj9M/0/47F7BDC381D25855954B36ACF82259F7CE8074E5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8Bh3fi29zqRTptSk9EvogyBPRcWBXebXXdDvhjBXoj9M/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 30 Apr 2025 15:03:39 +0000
Certificate not after:    Wed 29 Apr 2026 15:08:39 +0000
Subordinate resources:    AS: 268456
                          IP: 45.161.88.0/22
                          IP: 2804:5180::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 16 Jun 2025 05:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:06:60:09:19:91:56:4d:fa:bd:09:14:96:53:ae:95:4b:e8:0e:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 30 15:03:39 2025 GMT
            Not After : Apr 29 15:08:39 2026 GMT
        Subject: CN=47F7BDC381D25855954B36ACF82259F7CE8074E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ee:3a:0f:20:03:e3:20:19:24:12:8b:8c:32:
                    8b:09:79:27:84:88:0e:b9:f6:de:17:7a:c4:c6:a3:
                    b5:af:bc:10:25:ce:8a:c6:c1:3a:ee:64:b1:78:18:
                    14:e3:43:e4:e8:c3:c6:77:d3:a7:4a:4d:95:e4:f0:
                    5b:67:3e:d0:7f:39:7d:d1:e0:1b:cf:1f:10:3c:82:
                    e2:e8:d2:a4:de:c1:4a:2b:cd:f2:27:e2:d0:1b:cf:
                    51:8b:e9:f8:19:67:22:ae:ac:39:c2:f4:7e:65:48:
                    89:ac:6b:da:4e:38:4d:bf:eb:b5:d0:2b:98:ec:7c:
                    4a:3d:e3:e7:99:0c:67:37:37:6d:d6:50:0a:d9:c9:
                    0b:7a:ac:0b:a7:48:53:db:58:3e:c2:a5:06:d1:ff:
                    84:5d:9d:25:90:69:77:90:be:24:b1:77:60:94:19:
                    cc:ed:46:d8:32:0d:40:26:4f:39:20:eb:0a:4e:7e:
                    e4:1b:62:2b:f7:d9:66:8f:71:e4:f2:ef:03:d0:e5:
                    c2:c9:2d:49:d8:9d:16:f9:58:5c:62:73:0b:7a:c8:
                    da:ff:99:74:ff:42:ad:30:ed:87:6c:12:a4:9a:f5:
                    22:06:c6:76:2a:d0:02:78:d2:59:bf:65:b9:8f:77:
                    c9:54:5f:0e:79:89:d0:bd:38:ae:e7:40:66:ad:0f:
                    32:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                47:F7:BD:C3:81:D2:58:55:95:4B:36:AC:F8:22:59:F7:CE:80:74:E5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Bh3fi29zqRTptSk9EvogyBPRcWBXebXXdDvhjBXoj9M/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Bh3fi29zqRTptSk9EvogyBPRcWBXebXXdDvhjBXoj9M/0/47F7BDC381D25855954B36ACF82259F7CE8074E5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.88.0/22
                IPv6:
                  2804:5180::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268456

    Signature Algorithm: sha256WithRSAEncryption
         cf:c7:e2:6c:81:d3:a1:b3:95:7f:19:64:63:ed:84:15:cc:ae:
         74:4f:35:bf:27:bc:4e:cd:26:f7:3e:18:74:59:05:6e:c9:18:
         9f:b9:4e:de:89:5b:07:a9:42:63:73:1f:8c:b3:c9:09:97:8a:
         5f:0a:6a:89:fb:93:c5:36:83:1a:97:5e:86:80:f5:ac:7b:16:
         28:a1:4e:97:ff:08:dc:bd:69:19:f1:f3:47:8a:ae:91:50:c8:
         b9:ec:b2:86:cc:fd:1d:f1:1b:96:79:4d:c0:36:4b:9c:7f:ac:
         2f:79:61:5e:bd:9c:14:84:b8:c1:34:32:19:fe:25:44:9b:9b:
         ef:1f:99:5e:c1:1e:d8:2d:13:fd:87:4f:72:61:85:92:b4:ca:
         f8:cb:85:e5:69:24:a9:16:da:f6:6e:08:14:c3:fd:d7:6b:ce:
         d5:2e:7c:0f:85:3d:06:18:45:98:74:0a:76:2b:4f:78:08:1d:
         69:1e:a4:8f:da:90:8d:89:90:c0:d2:c9:f9:ff:a4:df:e3:16:
         cb:57:1c:4a:73:a2:bc:0c:72:0c:93:3e:1d:18:fd:74:31:be:
         86:cb:7b:e7:28:ce:24:f9:88:7b:41:a4:83:f6:94:6b:f4:5c:
         f9:47:1c:50:9d:14:cc:bf:91:aa:cb:0e:9b:0c:9d:b5:26:23:
         0f:b4:05:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:04:31 2025 by rpki-client