Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/141D0D9BF25D7F0F2EE720E63711904974FDDC7F.cer
File:                     141D0D9BF25D7F0F2EE720E63711904974FDDC7F.cer (raw, json)
Hash identifier:          BH0Qv90kHX2riwZj6KS8kPcA30iX4t3OQgaNG9PNh84=
Subject key identifier:   14:1D:0D:9B:F2:5D:7F:0F:2E:E7:20:E6:37:11:90:49:74:FD:DC:7F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       606B278273C050EFEED59CC89321AC9085E8B0F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/141D0D9BF25D7F0F2EE720E63711904974FDDC7F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 02 Jul 2025 20:12:16 +0000
Certificate not after:    Wed 01 Jul 2026 20:17:16 +0000
Subordinate resources:    AS: 269608
                          IP: 45.190.20.0/22
                          IP: 2804:6728::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 00:39:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:6b:27:82:73:c0:50:ef:ee:d5:9c:c8:93:21:ac:90:85:e8:b0:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  2 20:12:16 2025 GMT
            Not After : Jul  1 20:17:16 2026 GMT
        Subject: CN=141D0D9BF25D7F0F2EE720E63711904974FDDC7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:33:b7:de:ec:26:e8:2e:a3:33:94:e3:56:53:
                    65:ca:a8:55:3a:97:9c:ee:23:f7:34:73:c5:4c:eb:
                    96:a1:24:f6:bc:60:aa:a3:e2:d4:59:64:cf:79:a0:
                    c9:03:9e:12:fb:59:1e:6a:0d:4b:dd:51:d1:e5:01:
                    8e:e4:80:30:56:54:f7:85:73:4f:cf:9f:e5:1f:fc:
                    10:2f:b4:b9:60:e1:b9:9e:1f:85:0f:08:02:c5:4c:
                    53:2b:70:b4:63:bb:d3:11:d2:f2:31:0f:8a:ca:66:
                    5c:df:e1:5d:52:8b:13:c7:a0:28:da:63:56:1c:9f:
                    0b:42:12:f9:0d:14:70:cd:b1:38:cd:0a:bc:75:89:
                    12:19:5a:0b:ae:12:6b:25:05:fe:18:8a:79:bd:d7:
                    6f:9d:b7:e4:02:4b:d2:99:34:a8:1c:df:48:89:1f:
                    7d:71:0c:03:e4:be:15:4f:0c:ed:41:14:6b:8f:a4:
                    da:28:8b:8a:d5:25:00:55:b3:72:4a:76:01:2f:ac:
                    37:1d:71:52:56:64:b7:f7:09:69:13:84:1b:94:62:
                    a0:8c:7a:5a:eb:54:bb:dd:6d:d6:da:fa:b0:4d:e9:
                    1d:73:1b:10:eb:af:14:1f:42:41:cd:c5:88:f4:ac:
                    7f:73:b8:2b:29:af:d0:97:16:f1:f7:c2:cd:42:ed:
                    95:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                14:1D:0D:9B:F2:5D:7F:0F:2E:E7:20:E6:37:11:90:49:74:FD:DC:7F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/141D0D9BF25D7F0F2EE720E63711904974FDDC7F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.20.0/22
                IPv6:
                  2804:6728::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269608

    Signature Algorithm: sha256WithRSAEncryption
         51:51:16:19:9a:39:80:5c:7c:42:06:53:9f:35:87:5b:12:fd:
         38:24:c2:0e:be:29:56:c1:85:a7:b6:17:35:e1:14:88:70:74:
         c6:1d:19:90:97:b3:c9:2c:95:78:9c:aa:bc:57:cb:55:fb:ee:
         0f:d4:fd:5d:2d:7a:3c:c9:05:6b:be:83:38:81:e0:95:4f:06:
         40:7f:3c:bb:81:54:48:29:0b:56:ba:c9:70:33:bf:d0:1f:a3:
         ce:5c:30:33:a3:20:72:bb:69:af:c6:2e:0e:a5:37:02:cb:88:
         db:c6:a2:39:94:15:41:59:0c:2d:aa:c6:c2:a6:cf:ec:51:36:
         f5:d6:74:4c:00:62:8a:6f:bb:55:46:65:24:35:63:88:6c:81:
         dd:02:a3:12:19:f2:a9:40:13:50:fc:07:e4:87:5e:95:fb:38:
         04:b5:16:78:49:bb:80:ff:fd:46:8f:a9:74:71:f3:d1:64:84:
         cd:ed:f4:29:41:e4:95:27:91:a6:fe:f7:96:51:03:aa:90:eb:
         2c:8d:ce:f6:10:84:03:8d:61:44:b2:aa:65:0f:99:5a:82:70:
         77:10:9a:03:27:6c:1c:ca:16:30:e4:0e:05:85:20:52:e7:70:
         6e:ec:c8:64:40:4f:ea:b6:07:1d:e3:39:7f:66:b2:f3:ad:08:
         a5:3c:71:1b
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUYGsngnPAUO/u1ZzIkyGskIXosPUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA3MDIyMDEyMTZaFw0yNjA3MDEyMDE3MTZaMDMxMTAvBgNV
BAMTKDE0MUQwRDlCRjI1RDdGMEYyRUU3MjBFNjM3MTE5MDQ5NzRGRERDN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcM7fe7CboLqMzlONWU2XKqFU6
l5zuI/c0c8VM65ahJPa8YKqj4tRZZM95oMkDnhL7WR5qDUvdUdHlAY7kgDBWVPeF
c0/Pn+Uf/BAvtLlg4bmeH4UPCALFTFMrcLRju9MR0vIxD4rKZlzf4V1SixPHoCja
Y1YcnwtCEvkNFHDNsTjNCrx1iRIZWguuEmslBf4Yinm912+dt+QCS9KZNKgc30iJ
H31xDAPkvhVPDO1BFGuPpNooi4rVJQBVs3JKdgEvrDcdcVJWZLf3CWkThBuUYqCM
elrrVLvdbdba+rBN6R1zGxDrrxQfQkHNxYj0rH9zuCspr9CXFvH3ws1C7ZW1AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQUHQ2b8l1/Dy7n
IOY3EZBJdP3cfzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNzlN
OWdRRHZpczl5SnZrYkF2WUo2WURucVlKZDU4bTE1V0FXS3Q0b2VaQVcvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzc5
TTlnUUR2aXM5eUp2a2JBdllKNllEbnFZSmQ1OG0xNVdBV0t0NG9lWkFXLzAvMTQx
RDBEOUJGMjVEN0YwRjJFRTcyMEU2MzcxMTkwNDk3NEZEREM3Ri5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLb4UMA0EAgACMAcDBQAoBGcoMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQdKDANBgkqhkiG9w0BAQsFAAOCAQEAUVEWGZo5gFx8QgZT
nzWHWxL9OCTCDr4pVsGFp7YXNeEUiHB0xh0ZkJezySyVeJyqvFfLVfvuD9T9XS16
PMkFa76DOIHglU8GQH88u4FUSCkLVrrJcDO/0B+jzlwwM6Mgcrtpr8YuDqU3AsuI
28aiOZQVQVkMLarGwqbP7FE29dZ0TABiim+7VUZlJDVjiGyB3QKjEhnyqUATUPwH
5Idelfs4BLUWeEm7gP/9Ro+pdHHz0WSEze30KUHklSeRpv73llEDqpDrLI3O9hCE
A41hRLKqZQ+ZWoJwdxCaAydsHMoWMOQOBYUgUudwbuzIZEBP6rYHHeM5f2ay860I
pTxxGw==
-----END CERTIFICATE-----
Generated at Fri Jul 4 07:58:26 2025 by rpki-client