Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2544A744BF63CAFEE703C310B888A17EEA5620E4.cer
File:                     2544A744BF63CAFEE703C310B888A17EEA5620E4.cer (raw, json)
Hash identifier:          z7kXU4VHbfnD+54gD1UkBU4vfrgXstZZFVEoQmttTh0=
Subject key identifier:   25:44:A7:44:BF:63:CA:FE:E7:03:C3:10:B8:88:A1:7E:EA:56:20:E4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5E79F1B17C5F1B391D33C6766928F5A13A0DB6B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9Jntmgh3CAPNBCL9EALqgi6ffxESBTypqRrVfqixHCsj/0/2544A744BF63CAFEE703C310B888A17EEA5620E4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9Jntmgh3CAPNBCL9EALqgi6ffxESBTypqRrVfqixHCsj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 08 Feb 2025 20:33:02 +0000
Certificate not after:    Sat 07 Feb 2026 20:38:02 +0000
Subordinate resources:    AS: 267385
                          IP: 45.234.208.0/22
                          IP: 2804:4cb0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 20:36:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:79:f1:b1:7c:5f:1b:39:1d:33:c6:76:69:28:f5:a1:3a:0d:b6:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb  8 20:33:02 2025 GMT
            Not After : Feb  7 20:38:02 2026 GMT
        Subject: CN=2544A744BF63CAFEE703C310B888A17EEA5620E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:56:97:be:50:90:36:11:95:7f:77:cd:5f:af:
                    79:62:ad:bc:25:87:93:5b:66:30:54:e4:15:7b:b3:
                    52:05:49:9d:3a:36:df:ac:02:0a:1c:1b:d0:9b:93:
                    d0:f1:9c:f9:7b:26:06:a5:1d:1b:b2:bb:32:9e:6c:
                    bb:35:f6:94:80:2c:38:17:13:ff:c1:d2:ea:b0:d3:
                    70:36:a8:d3:e4:a2:04:7d:7c:27:cb:7b:4e:65:c6:
                    b6:48:02:91:32:b0:08:47:11:01:35:6e:82:e4:6b:
                    05:25:7b:ed:ba:be:9c:cc:f9:b6:c1:74:9b:6d:12:
                    6a:61:85:5d:98:97:1f:3f:4d:54:1d:70:b7:ec:62:
                    8a:b5:1d:88:96:b7:82:49:04:0f:f8:87:26:00:9a:
                    83:99:b3:ca:5d:79:56:f6:73:cc:fe:94:4d:85:7e:
                    e6:99:b9:78:fe:d7:f4:29:d6:0e:9b:38:eb:a3:52:
                    9c:e6:d8:30:6e:ec:9b:31:60:91:b9:a4:08:9d:f7:
                    a7:40:fd:dd:23:af:3d:f2:ff:88:a2:40:35:d1:04:
                    68:95:d8:fa:ca:47:ae:0b:d9:cb:2b:89:1d:21:50:
                    a0:91:31:a4:86:3c:99:5c:22:aa:56:98:41:36:9b:
                    5e:20:5b:04:55:56:37:c6:b4:1a:a9:86:e4:82:53:
                    3b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                25:44:A7:44:BF:63:CA:FE:E7:03:C3:10:B8:88:A1:7E:EA:56:20:E4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9Jntmgh3CAPNBCL9EALqgi6ffxESBTypqRrVfqixHCsj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9Jntmgh3CAPNBCL9EALqgi6ffxESBTypqRrVfqixHCsj/0/2544A744BF63CAFEE703C310B888A17EEA5620E4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.208.0/22
                IPv6:
                  2804:4cb0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267385

    Signature Algorithm: sha256WithRSAEncryption
         ce:e1:13:da:52:11:f8:5a:e9:ec:7d:32:18:11:e1:4a:e3:79:
         7d:ec:a5:c7:8e:fe:83:7d:31:86:6b:d5:e6:c6:d4:e7:42:30:
         5d:84:cb:1d:ff:ee:31:78:5e:d2:eb:26:5d:68:13:8d:cf:69:
         bc:45:cf:ce:8c:ee:d7:14:4d:a7:9f:0a:68:51:5e:e1:f4:56:
         97:70:fe:8f:24:7f:4d:f1:92:87:d9:77:a7:d1:04:ae:9a:10:
         db:28:0f:fa:6e:3d:6d:03:06:43:8a:47:3e:b1:b0:0a:c8:5c:
         30:0a:16:1f:60:46:b2:c0:e8:f4:ff:45:c0:68:2e:24:a8:dc:
         b2:bc:92:d5:13:77:e5:be:6e:31:0e:9c:9b:50:98:9c:97:d6:
         03:41:20:a0:f0:f3:25:b6:ee:9d:10:50:06:41:e1:2d:5b:d4:
         80:7f:31:45:4c:ea:17:da:95:7f:b5:a2:23:2c:e0:6c:27:2a:
         60:64:7c:42:e9:3e:71:56:66:24:21:08:b9:c4:16:b8:d7:c3:
         ce:24:3e:a6:55:29:f5:3e:e2:1f:ef:91:85:c2:76:80:1e:b0:
         89:5d:fc:3b:10:c0:40:86:3b:64:27:01:d3:f9:77:32:f4:c8:
         fb:a6:85:dc:05:f3:16:a7:22:70:d5:ae:8b:7a:ad:e4:e7:b1:
         27:2f:6f:d4
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUXnnxsXxfGzkdM8Z2aSj1oToNtrcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAyMDgyMDMzMDJaFw0yNjAyMDcyMDM4MDJaMDMxMTAvBgNV
BAMTKDI1NDRBNzQ0QkY2M0NBRkVFNzAzQzMxMEI4ODhBMTdFRUE1NjIwRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHVpe+UJA2EZV/d81fr3lirbwl
h5NbZjBU5BV7s1IFSZ06Nt+sAgocG9Cbk9DxnPl7JgalHRuyuzKebLs19pSALDgX
E//B0uqw03A2qNPkogR9fCfLe05lxrZIApEysAhHEQE1boLkawUle+26vpzM+bbB
dJttEmphhV2Ylx8/TVQdcLfsYoq1HYiWt4JJBA/4hyYAmoOZs8pdeVb2c8z+lE2F
fuaZuXj+1/Qp1g6bOOujUpzm2DBu7JsxYJG5pAid96dA/d0jrz3y/4iiQDXRBGiV
2PrKR64L2csriR0hUKCRMaSGPJlcIqpWmEE2m14gWwRVVjfGtBqphuSCUzvnAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQlRKdEv2PK/ucD
wxC4iKF+6lYg5DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOUpu
dG1naDNDQVBOQkNMOUVBTHFnaTZmZnhFU0JUeXBxUnJWZnFpeEhDc2ovMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlK
bnRtZ2gzQ0FQTkJDTDlFQUxxZ2k2ZmZ4RVNCVHlwcVJyVmZxaXhIQ3NqLzAvMjU0
NEE3NDRCRjYzQ0FGRUU3MDNDMzEwQjg4OEExN0VFQTU2MjBFNC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLerQMA0EAgACMAcDBQAoBEywMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQUeTANBgkqhkiG9w0BAQsFAAOCAQEAzuET2lIR+Frp7H0y
GBHhSuN5feylx47+g30xhmvV5sbU50IwXYTLHf/uMXhe0usmXWgTjc9pvEXPzozu
1xRNp58KaFFe4fRWl3D+jyR/TfGSh9l3p9EErpoQ2ygP+m49bQMGQ4pHPrGwCshc
MAoWH2BGssDo9P9FwGguJKjcsryS1RN35b5uMQ6cm1CYnJfWA0EgoPDzJbbunRBQ
BkHhLVvUgH8xRUzqF9qVf7WiIyzgbCcqYGR8Quk+cVZmJCEIucQWuNfDziQ+plUp
9T7iH++RhcJ2gB6wiV38OxDAQIY7ZCcB0/l3MvTI+6aF3AXzFqcicNWui3qt5Oex
Jy9v1A==
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:21:09 2025 by rpki-client