Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0F78626D3BF8B07214C737318E62EE73094347B3.cer
File:                     0F78626D3BF8B07214C737318E62EE73094347B3.cer (raw, json)
Hash identifier:          WcK6tYoreLI8zUVs0JB/QiKL+AuCd5qpDZU288GactI=
Subject key identifier:   0F:78:62:6D:3B:F8:B0:72:14:C7:37:31:8E:62:EE:73:09:43:47:B3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2D6B3FCC77FBB89F57EE5C978C0263D505969130
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/0F78626D3BF8B07214C737318E62EE73094347B3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 09 Aug 2024 20:29:24 +0000
Certificate not after:    Fri 08 Aug 2025 20:34:24 +0000
Subordinate resources:    AS: 53208
                          AS: 268646
                          IP: 45.164.192.0/22
                          IP: 186.195.192.0/20
                          IP: 2804:5460::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:6b:3f:cc:77:fb:b8:9f:57:ee:5c:97:8c:02:63:d5:05:96:91:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  9 20:29:24 2024 GMT
            Not After : Aug  8 20:34:24 2025 GMT
        Subject: CN=0F78626D3BF8B07214C737318E62EE73094347B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4e:12:95:34:3e:4b:18:ab:7d:bb:78:b0:2c:
                    c6:7e:34:c9:3e:e1:12:f3:9f:df:83:d7:4c:8e:25:
                    f3:bb:60:ed:5f:79:6e:51:a7:4c:be:d1:b9:d9:c3:
                    3d:f9:9b:b4:be:fe:e0:c6:6c:13:bc:91:c7:d6:62:
                    9d:9d:4c:ab:e3:ce:7c:0d:66:ea:e6:18:38:ec:4f:
                    1d:a4:58:8e:89:1e:99:00:33:8e:33:f0:75:0a:32:
                    2b:4e:3a:61:76:16:55:f0:b7:f9:41:52:55:08:03:
                    ca:e0:4c:98:b3:91:91:5d:4a:52:9f:3f:b1:75:95:
                    28:ea:d0:92:b9:d7:4d:f4:a7:bb:b0:d3:23:8b:ad:
                    bc:56:e6:66:12:4d:8b:72:a5:4a:a3:45:df:97:cc:
                    c3:60:5c:4d:14:b3:0f:9a:6e:27:1e:22:6e:dd:eb:
                    cc:0e:83:b3:10:5a:d0:12:67:8e:d8:71:41:10:8b:
                    5e:49:8f:ec:ee:fd:f2:aa:b5:ed:b3:ce:9c:34:a4:
                    78:0f:d7:72:2b:ae:c3:88:38:3b:9d:9a:4f:b3:17:
                    c9:f3:0f:e7:ae:b5:d2:54:1f:d7:3e:19:a4:45:fd:
                    bd:4d:8b:f8:ed:45:9a:e6:e1:06:f6:5a:38:aa:d6:
                    2e:35:0e:ef:e9:04:03:67:95:9b:d0:24:fc:13:86:
                    d7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0F:78:62:6D:3B:F8:B0:72:14:C7:37:31:8E:62:EE:73:09:43:47:B3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/0F78626D3BF8B07214C737318E62EE73094347B3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.192.0/22
                  186.195.192.0/20
                IPv6:
                  2804:5460::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53208
                  268646

    Signature Algorithm: sha256WithRSAEncryption
         aa:c3:40:3d:cb:b3:a7:42:5f:2a:0f:36:cb:00:a9:4d:02:b1:
         c1:25:a1:03:1e:cd:65:ab:eb:b5:4c:ed:01:2c:2b:89:cc:de:
         3e:4e:6e:91:38:8c:bf:b1:5c:d0:09:4c:51:da:7c:e8:fc:69:
         e4:f7:98:f0:39:c2:38:df:0b:95:97:26:ef:2b:fd:9f:95:56:
         18:93:85:33:da:52:af:da:54:73:b1:b3:ac:5e:e7:64:90:f7:
         55:97:8c:ca:3f:8c:b0:e6:b9:0f:54:8f:d5:9e:bf:0f:a1:af:
         fc:ce:11:76:bd:28:a4:ef:4e:b6:fd:7c:42:d7:9b:ed:e4:7b:
         cb:f2:4a:c7:2c:2c:21:a2:99:cc:2f:77:f2:ea:ef:c7:90:e7:
         e2:6f:ab:90:11:ae:b2:ac:69:69:ac:d3:a8:90:35:e2:65:86:
         48:90:8c:1f:91:c2:75:1a:1a:57:1a:2f:d7:62:e9:69:7a:33:
         3f:00:cc:5e:7d:76:f7:39:58:28:fa:0e:8a:7e:e7:75:82:57:
         dd:df:2e:69:3a:85:9f:13:4b:03:12:aa:1c:b3:d3:3b:12:df:
         21:fd:04:41:96:3b:92:21:dc:83:06:cf:2d:45:5f:ec:07:5a:
         02:f4:00:4b:1b:aa:25:36:f5:f9:2a:78:10:a3:8c:a1:df:6c:
         74:f5:9d:e7
-----BEGIN CERTIFICATE-----
MIIGOzCCBSOgAwIBAgIULWs/zHf7uJ9X7lyXjAJj1QWWkTAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA4MDkyMDI5MjRaFw0yNTA4MDgyMDM0MjRaMDMxMTAvBgNV
BAMTKDBGNzg2MjZEM0JGOEIwNzIxNEM3MzczMThFNjJFRTczMDk0MzQ3QjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ThKVND5LGKt9u3iwLMZ+NMk+
4RLzn9+D10yOJfO7YO1feW5Rp0y+0bnZwz35m7S+/uDGbBO8kcfWYp2dTKvjznwN
ZurmGDjsTx2kWI6JHpkAM44z8HUKMitOOmF2FlXwt/lBUlUIA8rgTJizkZFdSlKf
P7F1lSjq0JK51030p7uw0yOLrbxW5mYSTYtypUqjRd+XzMNgXE0Usw+abiceIm7d
68wOg7MQWtASZ47YcUEQi15Jj+zu/fKqte2zzpw0pHgP13IrrsOIODudmk+zF8nz
D+eutdJUH9c+GaRF/b1Ni/jtRZrm4Qb2Wjiq1i41Du/pBANnlZvQJPwThtf3AgMB
AAGjggNFMIIDQTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQPeGJtO/iwchTH
NzGOYu5zCUNHszAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMnJN
QVoyRnRYOERvQng4bXJCbzZvVHRZMW5CWmQ1NnB0eHFtankyYnVjZHEvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJy
TUFaMkZ0WDhEb0J4OG1yQm82b1R0WTFuQlpkNTZwdHhxbWp5MmJ1Y2RxLzAvMEY3
ODYyNkQzQkY4QjA3MjE0QzczNzMxOEU2MkVFNzMwOTQzNDdCMy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQCLaTAAwQEusPAMA0EAgACMAcDBQAoBFRgMB8GCCsG
AQUFBwEIAQH/BBAwDqAMMAoCAwDP2AIDBBlmMA0GCSqGSIb3DQEBCwUAA4IBAQCq
w0A9y7OnQl8qDzbLAKlNArHBJaEDHs1lq+u1TO0BLCuJzN4+Tm6ROIy/sVzQCUxR
2nzo/Gnk95jwOcI43wuVlybvK/2flVYYk4Uz2lKv2lRzsbOsXudkkPdVl4zKP4yw
5rkPVI/Vnr8Poa/8zhF2vSik7062/XxC15vt5HvL8krHLCwhopnML3fy6u/HkOfi
b6uQEa6yrGlprNOokDXiZYZIkIwfkcJ1GhpXGi/XYulpejM/AMxefXb3OVgo+g6K
fud1glfd3y5pOoWfE0sDEqocs9M7Et8h/QRBljuSIdyDBs8tRV/sB1oC9ABLG6ol
NvX5KngQo4yh32x09Z3n
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:27:46 2025 by rpki-client