Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1E71509DDAF040F68CB7D75B73108CE2284487D7.cer
File:                     1E71509DDAF040F68CB7D75B73108CE2284487D7.cer (raw, json)
Hash identifier:          3WO8dtpMQKeDXvOII+9W6yoq1GIYpsKXjbK6MnBESTc=
Subject key identifier:   1E:71:50:9D:DA:F0:40:F6:8C:B7:D7:5B:73:10:8C:E2:28:44:87:D7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       49FFA62B69C2FDF0CDF225D611BF4348002C6E59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/1E71509DDAF040F68CB7D75B73108CE2284487D7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 02 Mar 2025 14:08:39 +0000
Certificate not after:    Sun 01 Mar 2026 14:13:39 +0000
Subordinate resources:    AS: 272645
                          IP: 201.216.104.0/22
                          IP: 2804:8678::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 04:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ff:a6:2b:69:c2:fd:f0:cd:f2:25:d6:11:bf:43:48:00:2c:6e:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  2 14:08:39 2025 GMT
            Not After : Mar  1 14:13:39 2026 GMT
        Subject: CN=1E71509DDAF040F68CB7D75B73108CE2284487D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:43:14:a7:65:c7:ea:06:c9:55:d6:ad:01:41:
                    03:d2:53:28:b9:3f:3a:3e:82:4f:94:40:ad:c9:b6:
                    cf:de:8a:dd:81:25:1b:1c:ce:40:58:eb:8f:c4:86:
                    e1:80:6e:de:f0:d8:de:8f:ca:ef:63:aa:d9:c4:12:
                    cc:4c:55:05:e8:c2:2c:95:03:66:1f:07:c7:f8:26:
                    cf:76:b6:78:16:a2:30:b4:ea:77:45:bc:cd:d2:6a:
                    25:33:48:a5:32:24:97:2e:8d:2d:03:39:5a:a2:36:
                    3a:89:62:bb:b9:25:73:d0:62:42:32:32:4d:2b:97:
                    30:da:fe:74:74:c6:f5:1e:f3:63:7c:bf:9b:06:3f:
                    8d:37:da:ca:b5:8a:6c:0e:61:cb:63:56:db:6f:d5:
                    e7:5e:c0:20:c9:c0:27:63:5a:c5:64:dc:44:e7:5c:
                    56:d9:c5:f9:52:f1:0f:91:4b:f5:e4:e7:60:b1:7d:
                    ea:2a:ef:fe:cf:a7:b9:9a:f0:c7:ed:51:c4:76:e5:
                    09:81:4e:79:ab:a5:cc:97:c1:2b:c4:11:b7:17:1c:
                    bc:9d:cc:00:c3:dc:50:0d:30:89:be:ce:5a:7e:08:
                    b7:ea:6f:8a:5c:d6:67:4d:e3:c5:a1:62:89:76:9e:
                    02:c0:9e:9d:68:3a:14:b0:ed:38:45:bc:e3:88:27:
                    0c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1E:71:50:9D:DA:F0:40:F6:8C:B7:D7:5B:73:10:8C:E2:28:44:87:D7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/1E71509DDAF040F68CB7D75B73108CE2284487D7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.104.0/22
                IPv6:
                  2804:8678::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272645

    Signature Algorithm: sha256WithRSAEncryption
         a0:a3:32:cc:47:99:0c:e9:ff:e8:21:02:8c:1a:ca:b5:cb:12:
         81:f9:f0:e5:a4:55:7a:9e:04:23:12:d6:9e:d9:2f:4b:73:f5:
         9c:b1:12:8a:03:5d:13:94:c8:e2:4a:d3:7f:20:01:12:61:37:
         99:68:cb:75:5f:4c:be:fa:3c:74:09:45:af:37:8a:7e:c1:50:
         da:4c:8f:ef:54:98:58:9e:fb:d1:58:1b:98:99:3d:11:78:d3:
         d0:c6:ea:79:ab:ad:dc:58:d5:d3:00:9d:74:9a:b2:d8:61:5c:
         f8:a7:53:fe:95:56:93:58:b2:77:36:6f:20:2f:80:4c:84:4a:
         8b:16:43:81:e0:d5:8e:74:60:9d:4c:b7:09:1a:96:83:40:42:
         e0:d3:c6:81:44:ec:06:73:ef:80:11:a6:e6:00:fd:32:c6:39:
         5d:18:14:f8:48:d8:9b:f1:05:48:97:1a:89:54:39:af:20:07:
         af:ce:72:73:eb:de:a6:3a:7a:8d:5b:7d:ab:5c:14:a4:3d:86:
         c9:df:14:01:6c:8d:aa:7d:f1:a4:eb:72:10:e2:2f:81:d1:58:
         e2:34:c2:60:93:c0:ff:0c:7f:c9:e2:40:5a:28:52:b8:06:98:
         6e:4e:d1:f2:90:e9:c5:67:00:ae:bf:85:95:43:6d:df:1a:1f:
         2e:bd:eb:57
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUSf+mK2nC/fDN8iXWEb9DSAAsblkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDIxNDA4MzlaFw0yNjAzMDExNDEzMzlaMDMxMTAvBgNV
BAMTKDFFNzE1MDlEREFGMDQwRjY4Q0I3RDc1QjczMTA4Q0UyMjg0NDg3RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrQxSnZcfqBslV1q0BQQPSUyi5
Pzo+gk+UQK3Jts/eit2BJRsczkBY64/EhuGAbt7w2N6Pyu9jqtnEEsxMVQXowiyV
A2YfB8f4Js92tngWojC06ndFvM3SaiUzSKUyJJcujS0DOVqiNjqJYru5JXPQYkIy
Mk0rlzDa/nR0xvUe82N8v5sGP4032sq1imwOYctjVttv1edewCDJwCdjWsVk3ETn
XFbZxflS8Q+RS/Xk52Cxfeoq7/7Pp7ma8MftUcR25QmBTnmrpcyXwSvEEbcXHLyd
zADD3FANMIm+zlp+CLfqb4pc1mdN48WhYol2ngLAnp1oOhSw7ThFvOOIJwzPAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQecVCd2vBA9oy3
11tzEIziKESH1zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOWl6
UFdReGRRaXlUdmFmN3lKcWh6NWZYRlNwVVJTd2l1QlRCMXdza0haNEIvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlp
elBXUXhkUWl5VHZhZjd5SnFoejVmWEZTcFVSU3dpdUJUQjF3c2tIWjRCLzAvMUU3
MTUwOUREQUYwNDBGNjhDQjdENzVCNzMxMDhDRTIyODQ0ODdENy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCydhoMA0EAgACMAcDBQAoBIZ4MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQpBTANBgkqhkiG9w0BAQsFAAOCAQEAoKMyzEeZDOn/6CEC
jBrKtcsSgfnw5aRVep4EIxLWntkvS3P1nLESigNdE5TI4krTfyABEmE3mWjLdV9M
vvo8dAlFrzeKfsFQ2kyP71SYWJ770VgbmJk9EXjT0Mbqeaut3FjV0wCddJqy2GFc
+KdT/pVWk1iydzZvIC+ATIRKixZDgeDVjnRgnUy3CRqWg0BC4NPGgUTsBnPvgBGm
5gD9MsY5XRgU+EjYm/EFSJcaiVQ5ryAHr85yc+vepjp6jVt9q1wUpD2Gyd8UAWyN
qn3xpOtyEOIvgdFY4jTCYJPA/wx/yeJAWihSuAaYbk7R8pDpxWcArr+FlUNt3xof
Lr3rVw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:29:33 2025 by rpki-client