Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1F8731E7DAEAB5D2F1ED5C39CDF0319DE9FB6D2A.cer
File:                     1F8731E7DAEAB5D2F1ED5C39CDF0319DE9FB6D2A.cer (raw, json)
Hash identifier:          IVENHyqJML/ABpekcvccssGErBI7yhfeBZTFESThwZQ=
Subject key identifier:   1F:87:31:E7:DA:EA:B5:D2:F1:ED:5C:39:CD:F0:31:9D:E9:FB:6D:2A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5303AF53A270AD9732B7E164EF5A814AD0055B82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CTo7EoHYMuqfLAdkgBoj7BeuNknmSowvKkzBMP3qV7cH/0/1F8731E7DAEAB5D2F1ED5C39CDF0319DE9FB6D2A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CTo7EoHYMuqfLAdkgBoj7BeuNknmSowvKkzBMP3qV7cH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 20 May 2025 19:55:46 +0000
Certificate not after:    Tue 19 May 2026 20:00:46 +0000
Subordinate resources:    AS: 270303
                          IP: 201.216.116.0/22
                          IP: 2804:69f8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 05:09:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:03:af:53:a2:70:ad:97:32:b7:e1:64:ef:5a:81:4a:d0:05:5b:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 20 19:55:46 2025 GMT
            Not After : May 19 20:00:46 2026 GMT
        Subject: CN=1F8731E7DAEAB5D2F1ED5C39CDF0319DE9FB6D2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ae:c6:48:e5:7d:92:b8:68:b7:8a:85:c0:13:
                    ea:a3:35:6c:9f:c4:47:52:1c:83:3f:e7:52:e2:33:
                    ec:4e:26:fa:80:13:a9:8d:22:90:ba:bd:8a:c4:8f:
                    a4:31:4d:e2:21:9b:07:c0:50:b7:23:cd:2c:d2:35:
                    a1:77:c1:89:a9:ac:c3:b3:65:8b:ed:63:ee:c9:21:
                    50:16:90:99:12:04:ac:24:c9:62:ee:a9:96:28:0b:
                    88:36:a2:94:a1:40:dc:51:d8:18:ed:db:98:ab:04:
                    53:30:9c:e0:23:cd:5e:fd:6a:94:4d:81:e1:3c:d9:
                    50:38:80:ed:80:bf:0f:3b:28:32:a8:b0:3f:17:9e:
                    79:bc:88:6c:38:3d:c7:21:ec:a6:2f:4a:97:9b:18:
                    a0:ea:a3:6c:0d:25:3b:78:e3:5d:42:09:be:3b:2f:
                    1d:74:24:f0:29:b6:8f:1f:b4:38:bb:e4:b1:26:21:
                    5d:cb:eb:b6:d3:d8:76:23:7c:0e:94:35:6f:11:06:
                    e5:41:19:3e:88:4f:10:e7:7b:1e:2a:5a:85:f6:c2:
                    7b:7b:ed:3e:14:61:0e:24:42:0d:f8:59:62:20:df:
                    5e:5d:47:7b:f5:cc:1a:52:4e:ad:a1:ac:4e:0c:0d:
                    eb:f9:5a:af:25:ed:ad:aa:d8:7b:80:8d:b9:f5:28:
                    30:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1F:87:31:E7:DA:EA:B5:D2:F1:ED:5C:39:CD:F0:31:9D:E9:FB:6D:2A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CTo7EoHYMuqfLAdkgBoj7BeuNknmSowvKkzBMP3qV7cH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CTo7EoHYMuqfLAdkgBoj7BeuNknmSowvKkzBMP3qV7cH/0/1F8731E7DAEAB5D2F1ED5C39CDF0319DE9FB6D2A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.116.0/22
                IPv6:
                  2804:69f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270303

    Signature Algorithm: sha256WithRSAEncryption
         ad:d0:85:13:8d:b6:b6:a1:32:a7:51:fa:8f:b5:aa:f0:ff:50:
         55:d9:6b:3e:50:82:d9:2a:76:48:54:9e:d8:2b:d6:18:16:76:
         7c:bd:03:0e:20:98:fa:60:7c:a5:b5:05:fb:5d:96:72:ad:83:
         9c:66:e8:24:6e:d5:3c:08:b9:b6:8e:b3:d3:1d:98:d6:98:ed:
         bd:28:47:34:1c:d4:39:9c:8a:4a:c9:57:0a:55:92:79:a8:fa:
         a9:0e:93:ec:56:06:d0:61:2f:c4:3b:de:01:78:17:7c:af:f6:
         2f:28:db:e6:de:e7:64:46:42:82:e7:33:80:de:bc:bd:8a:18:
         11:12:21:5c:f1:a9:55:84:c6:5f:a8:b9:9c:d3:17:13:6b:61:
         e7:1e:af:dc:7b:6d:57:7d:21:b3:35:80:13:00:ef:da:80:c7:
         24:54:d0:9a:78:f1:78:ad:70:8e:74:1f:42:0b:fa:b9:4d:9a:
         20:e8:16:1b:a1:e4:43:a8:2c:83:c7:55:4f:31:7e:62:95:e0:
         22:15:eb:3b:2a:07:94:04:e9:7e:e4:3a:62:94:81:da:14:43:
         2c:db:1a:9a:e7:5e:d5:79:f2:90:89:b3:5a:6d:d2:58:b3:88:
         1f:d0:36:e5:04:1f:42:1e:29:b1:e0:38:9c:84:47:d4:86:b1:
         2f:ba:df:73
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUUwOvU6JwrZcyt+Fk71qBStAFW4IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA1MjAxOTU1NDZaFw0yNjA1MTkyMDAwNDZaMDMxMTAvBgNV
BAMTKDFGODczMUU3REFFQUI1RDJGMUVENUMzOUNERjAzMTlERTlGQjZEMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDursZI5X2SuGi3ioXAE+qjNWyf
xEdSHIM/51LiM+xOJvqAE6mNIpC6vYrEj6QxTeIhmwfAULcjzSzSNaF3wYmprMOz
ZYvtY+7JIVAWkJkSBKwkyWLuqZYoC4g2opShQNxR2Bjt25irBFMwnOAjzV79apRN
geE82VA4gO2Avw87KDKosD8Xnnm8iGw4Pcch7KYvSpebGKDqo2wNJTt4411CCb47
Lx10JPApto8ftDi75LEmIV3L67bT2HYjfA6UNW8RBuVBGT6ITxDnex4qWoX2wnt7
7T4UYQ4kQg34WWIg315dR3v1zBpSTq2hrE4MDev5Wq8l7a2q2HuAjbn1KDA3AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQfhzHn2uq10vHt
XDnN8DGd6fttKjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ1Rv
N0VvSFlNdXFmTEFka2dCb2o3QmV1TmtubVNvd3ZLa3pCTVAzcVY3Y0gvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NU
bzdFb0hZTXVxZkxBZGtnQm9qN0JldU5rbm1Tb3d2S2t6Qk1QM3FWN2NILzAvMUY4
NzMxRTdEQUVBQjVEMkYxRUQ1QzM5Q0RGMDMxOURFOUZCNkQyQS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCydh0MA0EAgACMAcDBQAoBGn4MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQf3zANBgkqhkiG9w0BAQsFAAOCAQEArdCFE422tqEyp1H6
j7Wq8P9QVdlrPlCC2Sp2SFSe2CvWGBZ2fL0DDiCY+mB8pbUF+12Wcq2DnGboJG7V
PAi5to6z0x2Y1pjtvShHNBzUOZyKSslXClWSeaj6qQ6T7FYG0GEvxDveAXgXfK/2
Lyjb5t7nZEZCguczgN68vYoYERIhXPGpVYTGX6i5nNMXE2th5x6v3HttV30hszWA
EwDv2oDHJFTQmnjxeK1wjnQfQgv6uU2aIOgWG6HkQ6gsg8dVTzF+YpXgIhXrOyoH
lATpfuQ6YpSB2hRDLNsamude1XnykImzWm3SWLOIH9A25QQfQh4pseA4nIRH1Iax
L7rfcw==
-----END CERTIFICATE-----
Generated at Fri Jun 6 04:18:19 2025 by rpki-client