Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
File:                     A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer (raw, json)
Hash identifier:          vzBlkVANfp2LUGbejUigKYF1j1Ut5ZJVkWhh6TqAIsM=
Subject key identifier:   A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4024F32ABBCEAC7C63C06B25B57C65FCF9144817
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 03 Jun 2025 16:31:02 +0000
Certificate not after:    Tue 02 Jun 2026 16:36:02 +0000
Subordinate resources:    AS: 268131
                          IP: 45.169.188.0/22
                          IP: 2804:5878::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 16 Jun 2025 05:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:24:f3:2a:bb:ce:ac:7c:63:c0:6b:25:b5:7c:65:fc:f9:14:48:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  3 16:31:02 2025 GMT
            Not After : Jun  2 16:36:02 2026 GMT
        Subject: CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:23:9f:20:30:61:5f:a5:a5:a7:17:f6:b5:a5:
                    43:8a:38:e3:70:d6:87:5a:b7:6d:dd:5c:4e:6d:51:
                    a4:f3:d6:40:5e:9f:34:c0:6e:70:ec:dd:04:69:1e:
                    14:a5:a9:4b:80:38:4c:e1:20:d9:5a:98:97:2b:5a:
                    58:aa:44:04:8f:10:e9:a9:0c:79:cd:c5:79:ce:52:
                    92:c5:97:d3:92:b9:99:a3:73:b7:e7:8d:20:32:48:
                    35:51:99:a1:87:cc:7c:21:e6:24:b5:94:f6:a3:18:
                    db:66:f4:57:83:1a:94:93:b1:4e:0f:a6:22:44:eb:
                    13:1b:7c:8f:e0:fe:99:fd:63:f6:a0:4c:78:bb:9c:
                    57:1e:c9:e4:9b:ac:05:fd:4a:b7:5f:f1:d0:2f:98:
                    e5:ec:29:04:22:06:6e:62:7d:c8:d7:14:d3:48:69:
                    7f:3f:59:0a:63:96:f6:6e:7b:2c:34:f4:52:c2:81:
                    01:05:d7:48:8f:b7:26:45:c7:17:82:18:df:de:7e:
                    b5:1c:3b:93:27:83:16:4d:2e:13:7d:f1:d5:50:64:
                    f6:41:32:b2:e4:ea:0a:d7:48:7f:53:fe:f5:90:db:
                    fb:d2:81:18:a1:f2:03:cf:9e:2b:87:3a:dd:96:37:
                    27:00:8a:e6:53:42:24:23:95:88:4c:ff:df:9a:11:
                    1a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.188.0/22
                IPv6:
                  2804:5878::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268131

    Signature Algorithm: sha256WithRSAEncryption
         3f:49:5c:92:d6:9b:44:e0:b7:e9:15:b0:35:2b:45:90:a1:10:
         0f:f4:74:39:0c:a7:19:13:30:e1:7a:79:35:da:b5:56:fd:42:
         75:2f:dd:b0:95:b8:34:32:ac:7e:7b:5a:05:95:56:59:2b:f5:
         df:ec:3e:d6:28:3c:64:3e:8f:20:92:96:83:9f:2e:d7:3d:f7:
         96:d6:99:12:c2:24:e6:0c:ba:21:22:e1:37:0b:3b:0f:77:3b:
         8e:91:77:92:30:7c:3e:56:11:98:85:53:b7:a0:5a:ba:d7:17:
         12:3f:38:bd:b7:4e:75:c5:09:5b:a3:c8:9d:43:36:07:54:81:
         72:fb:03:5a:69:08:30:45:48:e1:c1:81:0d:b4:fd:c1:41:8a:
         27:65:86:16:c6:de:f8:3f:b6:2a:b0:88:3a:89:5a:ea:b2:b1:
         72:ed:5e:0a:79:35:80:e5:bf:e1:16:a9:9a:1f:c5:4a:48:09:
         91:62:2b:a0:82:fd:0d:1d:86:af:9c:c2:81:9a:37:d1:71:9e:
         62:f3:8d:32:4f:f4:15:06:de:c2:bb:24:04:bb:51:f7:c3:df:
         9b:67:73:fa:3d:01:8a:bb:fa:45:55:87:a7:3f:41:7a:e3:93:
         af:90:ee:a6:ed:01:c2:1c:ac:4b:f9:a4:f8:25:93:3b:f0:af:
         2b:c6:53:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:09:57 2025 by rpki-client