Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F976CD824C8D193A1DDC32222B9CE1F619152F24.cer
File:                     F976CD824C8D193A1DDC32222B9CE1F619152F24.cer (raw, json)
Hash identifier:          0UF8u75JMwxvoIVtOZzAmpM/WSfcEf8+vz4BDcOETLo=
Subject key identifier:   F9:76:CD:82:4C:8D:19:3A:1D:DC:32:22:2B:9C:E1:F6:19:15:2F:24
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       79957821FEE08E6AF9F3C362B355B382655F8D28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/F976CD824C8D193A1DDC32222B9CE1F619152F24.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 30 Apr 2025 20:36:26 +0000
Certificate not after:    Wed 29 Apr 2026 20:41:26 +0000
Subordinate resources:    AS: 264278
                          IP: 138.121.48.0/22
                          IP: 2804:2564::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 04 May 2025 01:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:95:78:21:fe:e0:8e:6a:f9:f3:c3:62:b3:55:b3:82:65:5f:8d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 30 20:36:26 2025 GMT
            Not After : Apr 29 20:41:26 2026 GMT
        Subject: CN=F976CD824C8D193A1DDC32222B9CE1F619152F24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5c:48:a0:11:45:c9:e1:5a:3e:68:80:a1:c1:
                    1c:c6:70:5a:fd:d3:ed:6b:d8:da:c6:31:fc:6d:b3:
                    03:46:2f:3d:2b:3c:dc:0a:7d:0a:00:5f:51:d3:36:
                    6e:e2:ac:47:10:45:d2:cd:3e:41:a9:96:11:24:03:
                    ef:9c:ec:77:37:97:6b:9d:fa:5e:43:63:de:b5:1f:
                    cf:64:d0:68:25:19:ea:80:b8:d5:28:34:2e:61:8b:
                    16:40:68:4e:a3:c3:19:ea:90:c2:41:ed:c3:ef:9d:
                    e4:51:6c:47:7a:ef:72:f5:b7:31:7f:fa:30:1a:44:
                    d0:73:f5:a6:12:a2:f1:dd:9a:1b:96:6f:b6:eb:7d:
                    bb:5c:1b:ba:df:e7:43:a2:92:51:94:b0:ec:cb:aa:
                    33:3c:1b:01:6f:29:c2:56:8e:50:2a:bf:b3:d3:7a:
                    70:94:60:1f:13:86:06:ef:c4:32:9a:de:a6:13:d7:
                    c5:0a:d1:81:9e:f0:67:d8:f9:23:7f:b9:b2:3a:85:
                    0f:eb:23:a6:bb:b9:c6:9a:b3:ad:cb:bb:f1:c0:dd:
                    40:83:dc:1a:7d:b5:ae:2c:02:f8:77:7c:11:15:03:
                    e7:65:94:50:a6:54:b0:83:49:a1:5b:3a:54:78:bd:
                    59:54:4a:15:e4:81:4c:b7:00:19:fe:ab:0b:b3:da:
                    ff:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F9:76:CD:82:4C:8D:19:3A:1D:DC:32:22:2B:9C:E1:F6:19:15:2F:24
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/F976CD824C8D193A1DDC32222B9CE1F619152F24.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.48.0/22
                IPv6:
                  2804:2564::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264278

    Signature Algorithm: sha256WithRSAEncryption
         d0:e0:89:4f:b3:d2:1d:74:76:c9:48:d9:96:db:6a:a5:93:60:
         c6:d7:81:f9:cc:2c:35:63:5a:b6:4a:a3:a7:24:07:b5:e0:4b:
         4c:c1:87:a7:01:73:b5:20:59:37:a7:48:23:d5:17:93:e3:82:
         13:19:71:5b:56:f1:09:e5:4a:82:4e:4b:f8:28:2e:10:3e:e5:
         02:87:22:e2:b7:30:dc:6f:8f:34:7e:e5:c9:3b:fc:28:2e:31:
         c3:16:4e:ed:54:d3:f1:44:78:28:6c:48:cc:a4:02:bb:14:4a:
         93:1f:b3:62:51:55:a7:98:53:a2:ed:94:54:8f:5f:d3:5a:4e:
         7a:81:4f:ca:54:73:ca:b5:a2:41:0d:98:a0:9c:30:a4:59:48:
         06:00:09:3d:53:68:79:bb:57:05:c2:bf:88:0c:d7:6f:0f:3b:
         d4:40:b7:1f:1d:dc:6f:ec:0a:79:95:99:0c:1d:98:a9:4b:e6:
         1e:f3:35:19:2e:fc:b7:2d:9d:e2:57:ed:d8:30:e1:e8:ac:de:
         8a:15:db:a1:23:97:a7:91:4f:b4:d0:30:49:9c:61:4a:34:3a:
         9e:d0:18:a7:75:d3:8d:7c:6b:f5:7b:ca:84:6c:1f:8b:78:1b:
         44:60:2a:ed:4b:59:3e:8b:37:67:98:a5:2e:f9:16:fa:10:5c:
         11:11:58:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:23:32 2025 by rpki-client