Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0B7D5851E99113F3832ED12CBE5DB4437990968F.cer
File:                     0B7D5851E99113F3832ED12CBE5DB4437990968F.cer (raw, json)
Hash identifier:          OM7zH4Yj/TWedCKGtyUF5Tn+4XaQ+2CrQbRpzWwwUB4=
Subject key identifier:   0B:7D:58:51:E9:91:13:F3:83:2E:D1:2C:BE:5D:B4:43:79:90:96:8F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       619CDEC92F1574D94A25088ACC1C4F727087CB02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7dGkkyBprDPFgs6zzv3a6wVAssBKUmqX57byAR3DygK/1/0B7D5851E99113F3832ED12CBE5DB4437990968F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7dGkkyBprDPFgs6zzv3a6wVAssBKUmqX57byAR3DygK/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 22:07:14 +0000
Certificate not after:    Thu 05 Mar 2026 22:12:14 +0000
Subordinate resources:    AS: 271600
                          IP: 200.24.120.0/22
                          IP: 2804:7e10::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 20:36:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:9c:de:c9:2f:15:74:d9:4a:25:08:8a:cc:1c:4f:72:70:87:cb:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 22:07:14 2025 GMT
            Not After : Mar  5 22:12:14 2026 GMT
        Subject: CN=0B7D5851E99113F3832ED12CBE5DB4437990968F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:da:31:d7:76:9f:a0:80:84:a1:0a:86:78:0f:
                    99:ad:69:36:0b:2e:b6:aa:15:75:a9:6c:a0:2e:b4:
                    95:a1:0d:e7:4b:c5:65:97:34:56:d3:4f:40:82:bb:
                    9e:41:51:8b:90:91:4d:21:7d:98:8a:73:aa:05:19:
                    44:4e:8f:50:02:1e:e9:1f:88:2c:a2:8d:47:90:9d:
                    64:cb:d6:f3:00:d7:80:06:c1:d1:27:9a:60:92:37:
                    6b:24:53:79:29:2f:cc:66:0b:23:07:a1:95:a2:9c:
                    ce:91:1d:09:69:6e:9c:a4:45:70:9e:9e:7b:0f:ef:
                    9c:af:fd:ee:ce:c7:d6:75:d0:ff:a0:fd:06:aa:49:
                    36:f1:b5:91:c5:ce:0c:97:d5:b7:52:07:6a:4d:6e:
                    45:a7:21:0d:07:a3:3f:72:9b:4f:ad:f8:e2:4a:08:
                    98:27:b0:25:48:fe:2f:d3:cb:5d:e0:2a:b2:28:90:
                    1d:2d:c6:cd:d7:82:02:5b:ed:aa:cd:5d:ab:24:39:
                    97:f4:fa:0d:98:5b:b9:cd:9c:5d:f8:c5:bc:24:1c:
                    33:14:d9:1d:99:40:55:41:9a:00:09:c0:f4:6a:77:
                    5f:d4:00:63:2e:91:87:ee:18:6d:0c:27:17:92:b0:
                    6f:b4:91:65:39:13:5b:26:a1:d4:e1:91:60:69:56:
                    94:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0B:7D:58:51:E9:91:13:F3:83:2E:D1:2C:BE:5D:B4:43:79:90:96:8F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7dGkkyBprDPFgs6zzv3a6wVAssBKUmqX57byAR3DygK/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7dGkkyBprDPFgs6zzv3a6wVAssBKUmqX57byAR3DygK/1/0B7D5851E99113F3832ED12CBE5DB4437990968F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.120.0/22
                IPv6:
                  2804:7e10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271600

    Signature Algorithm: sha256WithRSAEncryption
         b9:88:96:87:a6:17:ad:bb:c3:35:34:8c:ed:6e:be:f2:d4:02:
         55:41:83:de:67:57:f6:9f:2c:b4:c4:c4:18:7b:5f:10:cc:cc:
         22:87:ac:31:7b:dc:1f:5b:b2:2e:b5:27:bb:4d:1f:cf:88:74:
         17:2a:42:d3:79:46:ad:65:6f:15:92:cf:57:91:7e:52:13:d2:
         1e:4f:64:08:ce:bf:a1:ad:57:67:17:95:b2:f4:db:90:54:07:
         20:38:1f:b2:da:25:62:59:bb:3a:4b:bd:4e:15:2d:84:45:47:
         0c:56:b5:6f:2a:fb:f3:cd:2e:ed:9a:c4:0c:a7:7c:3a:71:d2:
         9c:9e:ca:7a:f6:50:22:05:e4:ad:5f:1d:73:36:54:b4:41:f7:
         35:13:20:64:76:c5:1e:5b:db:ba:ce:96:c5:c9:01:07:56:5f:
         9b:fc:67:8b:22:c9:5a:f8:fa:6c:c5:27:e3:50:2c:8d:55:c8:
         45:42:a4:34:1b:98:4e:89:47:cf:e3:01:aa:7e:61:99:fd:1b:
         d3:b6:f9:0b:4e:04:77:db:51:ef:13:6b:6e:3c:23:1a:58:af:
         89:e3:80:ec:62:be:b5:51:65:50:32:5c:cc:dd:8a:55:50:99:
         87:5b:01:24:0e:bb:5a:83:5a:f4:7e:0f:cb:d9:09:64:cb:e2:
         78:1f:ee:80
-----BEGIN CERTIFICATE-----
MIIGLTCCBRWgAwIBAgIUYZzeyS8VdNlKJQiKzBxPcnCHywIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDYyMjA3MTRaFw0yNjAzMDUyMjEyMTRaMDMxMTAvBgNV
BAMTKDBCN0Q1ODUxRTk5MTEzRjM4MzJFRDEyQ0JFNURCNDQzNzk5MDk2OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC52jHXdp+ggIShCoZ4D5mtaTYL
LraqFXWpbKAutJWhDedLxWWXNFbTT0CCu55BUYuQkU0hfZiKc6oFGUROj1ACHukf
iCyijUeQnWTL1vMA14AGwdEnmmCSN2skU3kpL8xmCyMHoZWinM6RHQlpbpykRXCe
nnsP75yv/e7Ox9Z10P+g/QaqSTbxtZHFzgyX1bdSB2pNbkWnIQ0Hoz9ym0+t+OJK
CJgnsCVI/i/Ty13gKrIokB0txs3XggJb7arNXaskOZf0+g2YW7nNnF34xbwkHDMU
2R2ZQFVBmgAJwPRqd1/UAGMukYfuGG0MJxeSsG+0kWU5E1smodThkWBpVpTFAgMB
AAGjggM3MIIDMzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQLfVhR6ZET84Mu
0Sy+XbRDeZCWjzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT0GCCsGAQUFBwELBIIBLzCCASswXAYI
KwYBBQUHMAWGUHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN2RH
a2t5QnByRFBGZ3M2enp2M2E2d1ZBc3NCS1VtcVg1N2J5QVIzRHlnSy8xMIGJBggr
BgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83ZEdr
a3lCcHJEUEZnczZ6enYzYTZ3VkFzc0JLVW1xWDU3YnlBUjNEeWdLLzEvMEI3RDU4
NTFFOTkxMTNGMzgzMkVEMTJDQkU1REI0NDM3OTkwOTY4Ri5tZnQwPwYIKwYBBQUH
MA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZpY2F0
aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/
BB8wHTAMBAIAATAGAwQCyBh4MA0EAgACMAcDBQAoBH4QMBoGCCsGAQUFBwEIAQH/
BAswCaAHMAUCAwQk8DANBgkqhkiG9w0BAQsFAAOCAQEAuYiWh6YXrbvDNTSM7W6+
8tQCVUGD3mdX9p8stMTEGHtfEMzMIoesMXvcH1uyLrUnu00fz4h0FypC03lGrWVv
FZLPV5F+UhPSHk9kCM6/oa1XZxeVsvTbkFQHIDgfstolYlm7Oku9ThUthEVHDFa1
byr7880u7ZrEDKd8OnHSnJ7KevZQIgXkrV8dczZUtEH3NRMgZHbFHlvbus6WxckB
B1Zfm/xniyLJWvj6bMUn41AsjVXIRUKkNBuYTolHz+MBqn5hmf0b07b5C04Ed9tR
7xNrbjwjGlivieOA7GK+tVFlUDJczN2KVVCZh1sBJA67WoNa9H4Py9kJZMvieB/u
gA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:16 2025 by rpki-client