Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer
File:                     1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer (raw, json)
Hash identifier:          bna0ZqAYfKDf569seYW7CmlwRHV2nC0KEEfXuLYZm5k=
Subject key identifier:   1D:8D:63:16:65:74:8A:7E:3D:1B:22:EA:B3:E9:67:5F:5F:67:56:D0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       540182B672C2A2CAC0C08B3515F84BAC17D4F5C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:35:13 +0000
Certificate not after:    Wed 04 Mar 2026 18:40:13 +0000
Subordinate resources:    AS: 263585
                          IP: 179.109.128.0/19
                          IP: 2804:f6c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 22:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:01:82:b6:72:c2:a2:ca:c0:c0:8b:35:15:f8:4b:ac:17:d4:f5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:35:13 2025 GMT
            Not After : Mar  4 18:40:13 2026 GMT
        Subject: CN=1D8D631665748A7E3D1B22EAB3E9675F5F6756D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a2:a4:23:d1:58:dc:4c:86:8e:ec:14:68:ef:
                    7c:3e:6d:27:f0:5d:5a:9c:f8:53:f8:b7:d9:11:7b:
                    d5:45:bb:63:c4:b0:ef:45:c2:ce:c3:53:90:30:3e:
                    45:49:84:6c:45:ff:d0:a7:9a:c8:71:9b:37:75:2c:
                    27:2b:34:88:ae:f8:eb:79:d0:c0:30:f4:2a:b4:ed:
                    22:14:cb:ec:c5:58:20:20:44:b3:cb:3c:3f:c2:39:
                    33:6b:e1:e2:f7:7e:6d:de:20:f1:a0:cf:2e:19:cb:
                    b1:4a:d3:84:00:77:bd:de:3a:da:f6:4a:fb:66:0b:
                    fb:3e:df:d7:8c:8a:b8:93:be:ca:66:aa:68:62:b9:
                    bc:56:e6:fb:4c:02:52:71:97:4f:41:4a:a4:1b:eb:
                    3f:56:78:af:ee:8a:7e:20:fd:ea:d0:34:d9:44:f8:
                    54:02:f3:02:7f:00:a4:ca:b2:d6:12:a2:85:cd:a5:
                    f8:f0:44:4a:06:a3:35:ea:f8:2e:db:03:78:21:d6:
                    7d:d1:09:5b:f4:b1:39:93:14:b2:67:69:89:28:45:
                    8f:02:29:63:4c:18:99:13:f0:07:a4:73:b4:3a:37:
                    79:35:7f:34:0d:d2:9f:86:bc:c6:98:17:ad:58:c8:
                    39:8e:9f:9c:22:2f:14:1f:09:ee:83:3f:dc:98:f3:
                    3d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1D:8D:63:16:65:74:8A:7E:3D:1B:22:EA:B3:E9:67:5F:5F:67:56:D0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.128.0/19
                IPv6:
                  2804:f6c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263585

    Signature Algorithm: sha256WithRSAEncryption
         89:a4:8c:ca:11:ce:ea:14:95:41:fd:23:a9:98:21:4a:b7:25:
         0c:9b:a7:23:e2:62:2d:67:75:ca:7b:1a:9e:f9:df:60:36:1b:
         9c:a7:23:95:5d:4f:9b:b9:53:df:aa:c3:c3:2e:e5:86:a5:6a:
         7c:64:94:10:ec:bf:b1:36:b3:b5:0f:f7:9e:f6:c3:20:46:70:
         db:81:8a:42:bc:f3:a3:52:77:03:33:ea:b1:12:b2:3a:02:da:
         c4:bc:48:63:fd:92:59:3b:4f:02:f0:30:44:df:44:23:c9:7c:
         5e:87:c0:f2:7e:0b:9d:42:18:05:d1:af:6c:4d:a6:74:bf:55:
         4b:a9:b9:08:97:f5:32:a7:f6:43:7e:dd:95:33:21:cd:21:45:
         90:af:4d:a2:6a:56:bd:e6:03:ec:8c:32:de:61:a8:df:79:e4:
         09:77:36:73:a5:9e:77:4c:89:a6:7c:9c:82:5d:b7:6b:e4:73:
         0f:45:10:18:0c:8e:15:79:07:d4:78:5a:28:f9:2f:d2:a1:59:
         ae:17:83:24:e2:f0:b9:34:e0:c0:d2:17:a6:35:f2:2e:0f:b7:
         55:17:b1:ab:a4:fe:5e:33:0e:ff:47:75:f1:bd:af:91:d1:d9:
         82:06:b8:27:0e:ba:39:3f:71:32:2e:c0:91:78:bf:73:08:1f:
         ad:de:18:02
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUVAGCtnLCosrAwIs1FfhLrBfU9cAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDUxODM1MTNaFw0yNjAzMDQxODQwMTNaMDMxMTAvBgNV
BAMTKDFEOEQ2MzE2NjU3NDhBN0UzRDFCMjJFQUIzRTk2NzVGNUY2NzU2RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCboqQj0VjcTIaO7BRo73w+bSfw
XVqc+FP4t9kRe9VFu2PEsO9Fws7DU5AwPkVJhGxF/9Cnmshxmzd1LCcrNIiu+Ot5
0MAw9Cq07SIUy+zFWCAgRLPLPD/COTNr4eL3fm3eIPGgzy4Zy7FK04QAd73eOtr2
SvtmC/s+39eMiriTvspmqmhiubxW5vtMAlJxl09BSqQb6z9WeK/uin4g/erQNNlE
+FQC8wJ/AKTKstYSooXNpfjwREoGozXq+C7bA3gh1n3RCVv0sTmTFLJnaYkoRY8C
KWNMGJkT8Aekc7Q6N3k1fzQN0p+GvMaYF61YyDmOn5wiLxQfCe6DP9yY8z2nAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQdjWMWZXSKfj0b
Iuqz6WdfX2dW0DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOFBS
UldDV1dqUUxuZFR0aHg3UGVHV2hOOHVlb2J2SnVtRHI5OHBoU2ttTVQvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhQ
UlJXQ1dXalFMbmRUdGh4N1BlR1doTjh1ZW9idkp1bURyOThwaFNrbU1ULzEvMUQ4
RDYzMTY2NTc0OEE3RTNEMUIyMkVBQjNFOTY3NUY1RjY3NTZEMC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQFs22AMA0EAgACMAcDBQAoBA9sMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQFoTANBgkqhkiG9w0BAQsFAAOCAQEAiaSMyhHO6hSVQf0j
qZghSrclDJunI+JiLWd1ynsanvnfYDYbnKcjlV1Pm7lT36rDwy7lhqVqfGSUEOy/
sTaztQ/3nvbDIEZw24GKQrzzo1J3AzPqsRKyOgLaxLxIY/2SWTtPAvAwRN9EI8l8
XofA8n4LnUIYBdGvbE2mdL9VS6m5CJf1Mqf2Q37dlTMhzSFFkK9NompWveYD7Iwy
3mGo33nkCXc2c6Wed0yJpnycgl23a+RzD0UQGAyOFXkH1HhaKPkv0qFZrheDJOLw
uTTgwNIXpjXyLg+3VRexq6T+XjMO/0d18b2vkdHZgga4Jw66OT9xMi7AkXi/cwgf
rd4YAg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:49:48 2025 by rpki-client