Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0D9A4BD6F2310AD615675874C9AA26E744205AAC.cer
File:                     0D9A4BD6F2310AD615675874C9AA26E744205AAC.cer (raw, json)
Hash identifier:          8EjVFQXvPCS/ymrpEi3kJ/LmuRdvnpMHygBpEpMafhE=
Subject key identifier:   0D:9A:4B:D6:F2:31:0A:D6:15:67:58:74:C9:AA:26:E7:44:20:5A:AC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       57CB35D3FA1BDB99E11610AC7BFDC86DDD3C8FC3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/0/0D9A4BD6F2310AD615675874C9AA26E744205AAC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 21 Jan 2025 17:13:28 +0000
Certificate not after:    Tue 20 Jan 2026 17:18:28 +0000
Subordinate resources:    AS: 270567
                          IP: 201.216.80.0/22
                          IP: 2804:6df8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 09:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:cb:35:d3:fa:1b:db:99:e1:16:10:ac:7b:fd:c8:6d:dd:3c:8f:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 21 17:13:28 2025 GMT
            Not After : Jan 20 17:18:28 2026 GMT
        Subject: CN=0D9A4BD6F2310AD615675874C9AA26E744205AAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9d:60:d5:44:d6:96:b0:22:9a:b9:a1:0e:7d:
                    0c:6e:01:48:6e:bd:ae:29:69:ed:8a:d8:6b:b8:f9:
                    d6:d1:08:a3:fb:13:03:0a:a3:16:89:9a:7c:a4:e1:
                    6d:40:81:cf:64:b8:ca:61:6e:e5:0e:35:c4:16:cb:
                    21:ba:cd:bb:f5:1b:11:6d:43:4e:c1:63:45:a4:77:
                    a9:33:8c:3b:fe:89:f7:8a:6a:a5:ec:e9:9c:35:38:
                    5a:3e:10:ef:45:fa:85:45:26:3a:d1:fe:c9:fc:be:
                    92:23:0e:52:e4:8b:61:54:1c:99:af:39:de:26:dd:
                    5e:1d:79:48:26:f0:5b:62:b6:92:7b:5b:00:bb:6f:
                    f1:e8:0f:54:c0:7e:7a:75:13:a7:17:b1:25:37:c4:
                    e0:bd:93:69:5d:cc:f1:b3:e2:42:7e:b6:cc:38:b6:
                    d0:6a:4b:4f:c0:fa:f4:7f:47:fc:12:a6:94:b6:e2:
                    ac:c5:af:6a:90:c0:14:c3:17:17:41:6d:02:df:14:
                    0f:54:c8:ca:e7:c1:d1:da:9a:8f:0c:6c:5f:78:8f:
                    43:bb:1d:2d:45:a7:cf:c6:7e:ee:79:38:07:c0:36:
                    b5:99:8d:9d:01:a4:81:7c:db:a9:78:aa:be:25:24:
                    90:98:87:4e:e5:21:2a:01:58:6f:ee:36:90:38:62:
                    e6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0D:9A:4B:D6:F2:31:0A:D6:15:67:58:74:C9:AA:26:E7:44:20:5A:AC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/0/0D9A4BD6F2310AD615675874C9AA26E744205AAC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.80.0/22
                IPv6:
                  2804:6df8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270567

    Signature Algorithm: sha256WithRSAEncryption
         ce:3b:7f:79:e5:7f:9c:b8:37:f2:3f:eb:0b:08:1a:0b:a1:16:
         5e:74:2c:ae:6b:fd:30:f2:6d:0a:fe:66:cb:ae:43:d4:6d:01:
         9b:fe:7e:dd:fb:73:3a:61:a7:0d:24:f0:92:5d:9a:02:3b:8a:
         18:ac:4d:89:3d:c3:28:ba:83:aa:ea:37:c9:f4:d5:05:03:4f:
         2d:0b:e7:d7:7b:63:83:82:5a:4a:42:86:4b:3f:3a:e6:34:19:
         b5:7f:1a:6a:57:21:5c:38:0f:d3:62:4b:82:84:1b:14:bc:9c:
         e3:b4:c8:35:b4:ee:04:a2:c5:69:85:e6:7b:2d:90:4d:1d:fa:
         bc:ce:9f:bd:8d:c1:53:a8:c5:2b:7b:0b:55:4f:f0:41:95:e2:
         a2:95:1a:28:b3:6b:ed:0e:d0:23:da:8a:ec:18:87:54:f3:21:
         90:4b:66:4c:d9:1c:e0:13:91:27:c4:ff:a1:81:f9:6a:93:aa:
         69:2d:20:b4:4d:45:03:55:d0:65:4a:96:16:d8:ec:34:33:b1:
         33:a6:e7:33:49:2b:18:e8:65:1a:bb:f8:c5:fc:b3:52:7e:ef:
         54:73:ea:40:a3:1c:02:30:a8:3f:a8:1d:a7:fc:d4:6c:45:64:
         b0:88:1a:c2:8f:9b:e4:e3:2c:74:99:ee:7b:ad:05:99:1d:fe:
         05:f1:24:50
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUV8s10/ob25nhFhCse/3Ibd08j8MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAxMjExNzEzMjhaFw0yNjAxMjAxNzE4MjhaMDMxMTAvBgNV
BAMTKDBEOUE0QkQ2RjIzMTBBRDYxNTY3NTg3NEM5QUEyNkU3NDQyMDVBQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCanWDVRNaWsCKauaEOfQxuAUhu
va4pae2K2Gu4+dbRCKP7EwMKoxaJmnyk4W1Agc9kuMphbuUONcQWyyG6zbv1GxFt
Q07BY0Wkd6kzjDv+ifeKaqXs6Zw1OFo+EO9F+oVFJjrR/sn8vpIjDlLki2FUHJmv
Od4m3V4deUgm8FtitpJ7WwC7b/HoD1TAfnp1E6cXsSU3xOC9k2ldzPGz4kJ+tsw4
ttBqS0/A+vR/R/wSppS24qzFr2qQwBTDFxdBbQLfFA9UyMrnwdHamo8MbF94j0O7
HS1Fp8/Gfu55OAfANrWZjZ0BpIF826l4qr4lJJCYh07lISoBWG/uNpA4YuZpAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQNmkvW8jEK1hVn
WHTJqibnRCBarDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSEM1
TkZFeHpOM2dxN1ZZNzNQOVRKVVFodVp0Y254eHBGS2dqZFRNa2pLN3MvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hD
NU5GRXh6TjNncTdWWTczUDlUSlVRaHVadGNueHhwRktnamRUTWtqSzdzLzAvMEQ5
QTRCRDZGMjMxMEFENjE1Njc1ODc0QzlBQTI2RTc0NDIwNUFBQy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCydhQMA0EAgACMAcDBQAoBG34MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQg5zANBgkqhkiG9w0BAQsFAAOCAQEAzjt/eeV/nLg38j/r
CwgaC6EWXnQsrmv9MPJtCv5my65D1G0Bm/5+3ftzOmGnDSTwkl2aAjuKGKxNiT3D
KLqDquo3yfTVBQNPLQvn13tjg4JaSkKGSz865jQZtX8aalchXDgP02JLgoQbFLyc
47TINbTuBKLFaYXmey2QTR36vM6fvY3BU6jFK3sLVU/wQZXiopUaKLNr7Q7QI9qK
7BiHVPMhkEtmTNkc4BORJ8T/oYH5apOqaS0gtE1FA1XQZUqWFtjsNDOxM6bnM0kr
GOhlGrv4xfyzUn7vVHPqQKMcAjCoP6gdp/zUbEVksIgawo+b5OMsdJnue60FmR3+
BfEkUA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:02:18 2025 by rpki-client