Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.cer
File:                     3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.cer (raw, json)
Hash identifier:          VJNRilXNeRUK4REytgdhsePkTfUlGUm3G4h9xyyeSaU=
Subject key identifier:   3C:8F:0C:FC:9B:35:F3:28:40:2A:D2:69:F1:4D:94:BF:6C:5C:73:72
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6A91A8BC728AD147271E1939F16C0268BF77059C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.mft
caRepository:             rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 03 Jun 2025 00:20:24 +0000
Certificate not after:    Tue 02 Jun 2026 00:25:24 +0000
Subordinate resources:    AS: 264936
                          IP: 168.232.80.0/22
                          IP: 2804:3034::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 14:11:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:91:a8:bc:72:8a:d1:47:27:1e:19:39:f1:6c:02:68:bf:77:05:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  3 00:20:24 2025 GMT
            Not After : Jun  2 00:25:24 2026 GMT
        Subject: CN=3C8F0CFC9B35F328402AD269F14D94BF6C5C7372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:00:53:8a:a4:ef:d0:1c:97:e9:5c:50:6a:bb:
                    d0:da:c7:c1:84:54:48:29:cf:c5:0d:be:4f:4a:6a:
                    fc:27:9f:7d:b2:0b:96:59:3f:e9:f7:38:68:a4:9f:
                    99:d4:d9:44:62:e7:a1:09:6d:53:b5:a4:61:63:8a:
                    84:25:74:41:ce:27:d8:91:48:ad:2f:4c:e9:0e:ff:
                    5b:04:f1:fd:b0:e9:29:2e:c1:e0:2f:ab:4e:0e:1f:
                    1f:a0:c7:82:1f:c6:1f:97:15:b1:21:fc:19:18:84:
                    f1:6e:68:da:d7:d5:9f:ac:3f:41:19:8c:d0:26:47:
                    27:d1:56:90:ae:39:0f:7d:d8:70:8b:59:8b:73:8c:
                    d3:bb:a6:1e:f6:50:46:a4:ac:44:a4:59:e2:7d:b9:
                    08:06:2a:e1:ea:84:a7:14:79:6a:84:b4:48:98:bf:
                    32:6d:46:3b:36:d8:0f:da:ea:04:c0:30:13:3b:8b:
                    08:f6:7c:9a:b9:b7:47:7c:da:71:60:80:e8:0e:fd:
                    03:55:6a:82:06:70:4d:2f:04:45:31:7c:5f:29:ed:
                    04:14:59:c9:25:be:7d:02:b3:4d:4e:65:b4:ff:6e:
                    16:87:be:17:80:93:81:14:a4:1d:4e:01:38:ac:40:
                    87:f1:d8:26:3d:76:bd:d2:0e:ce:85:e8:50:12:8b:
                    03:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3C:8F:0C:FC:9B:35:F3:28:40:2A:D2:69:F1:4D:94:BF:6C:5C:73:72
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.80.0/22
                IPv6:
                  2804:3034::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264936

    Signature Algorithm: sha256WithRSAEncryption
         3e:4d:5d:34:21:c6:2e:ad:e5:37:00:4e:77:4b:02:af:e7:98:
         64:17:a7:64:7a:6b:a0:5b:36:32:3a:e8:29:25:1f:f3:4f:86:
         93:90:bb:de:b3:c1:3c:85:75:49:46:4d:05:92:3f:98:b5:15:
         56:5f:62:0c:81:79:4d:ea:16:4e:12:09:c8:9e:71:17:15:2c:
         7c:25:ba:12:a9:7a:aa:1d:4c:86:18:1a:dd:e0:df:1b:9a:d4:
         a7:46:8a:a3:f5:3a:c5:dc:af:28:50:1f:b7:44:f2:0a:67:83:
         38:28:e4:1d:29:44:85:7e:b7:ab:18:a2:d9:d1:ad:19:0e:60:
         36:6e:a5:b4:c9:f4:10:05:cf:af:07:04:8c:a6:7a:ac:76:56:
         67:cd:ac:de:82:56:df:e0:a9:15:df:a0:8a:3b:4a:d3:2d:a5:
         09:11:dd:5e:54:62:b5:5c:d8:2f:31:03:26:72:45:f5:f8:7b:
         51:d9:12:bf:43:84:d7:ba:d8:10:86:2f:54:f9:a3:1b:af:11:
         07:9d:dc:91:75:99:dd:4f:f5:f0:05:1e:ea:2d:fe:fb:c4:23:
         0e:3b:9b:51:bc:ef:44:f1:51:23:20:b9:1a:59:0e:ca:fc:7c:
         4c:32:73:f1:b5:8b:90:1a:cf:e3:ea:22:02:4c:7f:8e:23:f7:
         db:10:a9:d9
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUapGovHKK0UcnHhk58WwCaL93BZwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA2MDMwMDIwMjRaFw0yNjA2MDIwMDI1MjRaMDMxMTAvBgNV
BAMTKDNDOEYwQ0ZDOUIzNUYzMjg0MDJBRDI2OUYxNEQ5NEJGNkM1QzczNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVAFOKpO/QHJfpXFBqu9Dax8GE
VEgpz8UNvk9Kavwnn32yC5ZZP+n3OGikn5nU2URi56EJbVO1pGFjioQldEHOJ9iR
SK0vTOkO/1sE8f2w6SkuweAvq04OHx+gx4Ifxh+XFbEh/BkYhPFuaNrX1Z+sP0EZ
jNAmRyfRVpCuOQ992HCLWYtzjNO7ph72UEakrESkWeJ9uQgGKuHqhKcUeWqEtEiY
vzJtRjs22A/a6gTAMBM7iwj2fJq5t0d82nFggOgO/QNVaoIGcE0vBEUxfF8p7QQU
Wcklvn0Cs01OZbT/bhaHvheAk4EUpB1OATisQIfx2CY9dr3SDs6F6FASiwMHAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ8jwz8mzXzKEAq
0mnxTZS/bFxzcjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNDNy
NUh0TnVhQnRmcUNEM0xiVmdHb2F3dmlyaXdWNk5YWXlwYmEzcmFXUG4vMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQz
cjVIdE51YUJ0ZnFDRDNMYlZnR29hd3Zpcml3VjZOWFl5cGJhM3JhV1BuLzAvM0M4
RjBDRkM5QjM1RjMyODQwMkFEMjY5RjE0RDk0QkY2QzVDNzM3Mi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCqOhQMA0EAgACMAcDBQAoBDA0MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQK6DANBgkqhkiG9w0BAQsFAAOCAQEAPk1dNCHGLq3lNwBO
d0sCr+eYZBenZHproFs2MjroKSUf80+Gk5C73rPBPIV1SUZNBZI/mLUVVl9iDIF5
TeoWThIJyJ5xFxUsfCW6Eql6qh1Mhhga3eDfG5rUp0aKo/U6xdyvKFAft0TyCmeD
OCjkHSlEhX63qxii2dGtGQ5gNm6ltMn0EAXPrwcEjKZ6rHZWZ82s3oJW3+CpFd+g
ijtK0y2lCRHdXlRitVzYLzEDJnJF9fh7UdkSv0OE17rYEIYvVPmjG68RB53ckXWZ
3U/18AUe6i3++8QjDjubUbzvRPFRIyC5GlkOyvx8TDJz8bWLkBrP4+oiAkx/jiP3
2xCp2Q==
-----END CERTIFICATE-----
Generated at Mon Jun 9 14:26:37 2025 by rpki-client