Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/254C729A5155256E1BAF89E48E06C4EBA96761EA.cer
File:                     254C729A5155256E1BAF89E48E06C4EBA96761EA.cer (raw, json)
Hash identifier:          MaIa/FuTQ9rJRlKaEG5u5DQjL1MMV+qLUQYvZuzwMOw=
Subject key identifier:   25:4C:72:9A:51:55:25:6E:1B:AF:89:E4:8E:06:C4:EB:A9:67:61:EA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       43357354FF0666AD5CC5311D060BD8CEB9FCE555
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0/254C729A5155256E1BAF89E48E06C4EBA96761EA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 28 Mar 2025 13:25:04 +0000
Certificate not after:    Fri 27 Mar 2026 13:30:04 +0000
Subordinate resources:    AS: 271725
                          IP: 2804:8008::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 22:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:35:73:54:ff:06:66:ad:5c:c5:31:1d:06:0b:d8:ce:b9:fc:e5:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 28 13:25:04 2025 GMT
            Not After : Mar 27 13:30:04 2026 GMT
        Subject: CN=254C729A5155256E1BAF89E48E06C4EBA96761EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:60:04:d8:88:ae:5d:89:73:94:69:a1:67:ba:
                    b9:76:1b:75:77:c3:95:cf:63:f1:eb:2d:b4:a1:c5:
                    89:49:36:45:e0:8d:00:13:8a:57:1b:2f:36:22:b4:
                    fe:e7:7f:b1:67:47:73:01:d3:06:72:9d:30:ec:31:
                    c9:5c:dc:4a:1c:bd:b6:31:f1:46:b0:b0:1a:c5:85:
                    92:0e:99:8d:ad:17:a7:b8:1e:30:74:33:8c:26:87:
                    04:cb:0c:45:6d:dc:6c:75:fa:58:44:55:43:45:92:
                    e9:15:e6:86:af:d9:51:ee:e1:d6:5b:20:0f:bd:90:
                    de:56:e5:af:dc:21:19:50:d3:93:36:a6:bb:5b:af:
                    b1:f5:2a:1f:43:c2:61:ed:2f:24:7c:c0:47:06:05:
                    2c:69:ff:4f:7b:bf:c3:7d:e1:be:c4:0f:04:2c:0f:
                    01:e8:c0:b5:19:65:69:80:24:94:1a:74:b7:db:33:
                    1e:91:bf:1b:be:86:a8:a5:37:74:c7:76:9c:1e:f2:
                    7c:96:5b:d1:1c:a5:45:06:e0:11:a7:2b:62:28:47:
                    64:7c:3a:3d:eb:03:ed:84:f8:97:c4:91:32:aa:f1:
                    1a:57:d7:fd:cb:42:b5:8e:c2:0a:a3:8a:34:39:6a:
                    b6:7d:cc:5c:36:3a:0a:d3:3a:b3:d2:fb:d1:f2:54:
                    aa:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                25:4C:72:9A:51:55:25:6E:1B:AF:89:E4:8E:06:C4:EB:A9:67:61:EA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0/254C729A5155256E1BAF89E48E06C4EBA96761EA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8008::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271725

    Signature Algorithm: sha256WithRSAEncryption
         a2:83:a9:73:f3:f2:0d:e9:f5:36:34:54:dd:fe:a3:61:82:62:
         ac:c5:98:ea:4c:0c:4f:bc:bd:ea:8d:f4:83:f7:b3:17:a5:02:
         53:11:c8:fd:33:a6:ec:05:ff:2a:7b:9b:69:c9:f7:42:89:2b:
         17:9e:c0:4b:be:47:ca:7a:51:f4:58:35:db:1d:80:6b:8f:d6:
         8f:dd:f8:32:5c:bf:df:32:53:21:0c:13:e8:c4:b6:7a:4c:f0:
         ea:47:d7:bf:24:4d:ae:a0:e9:ec:97:ed:a6:22:36:bb:09:2c:
         92:86:cc:86:a2:65:10:66:93:06:ba:75:7e:3c:a3:7f:e3:32:
         b5:d2:a8:34:4a:ca:0b:2c:5e:f3:2b:1d:e0:8d:0f:e2:44:80:
         e9:ec:ba:13:62:ea:c1:5f:ed:b5:64:f6:7c:cc:f3:30:2c:5d:
         55:3b:3f:1f:3e:46:0f:c3:ca:94:97:fd:22:4e:58:5e:2f:8b:
         67:b1:d3:c2:a6:94:7b:9b:1f:8c:fe:f6:48:ba:2e:66:ce:bc:
         ec:8d:eb:c5:8e:02:c1:18:09:98:76:f2:2f:12:7f:d2:d9:bb:
         d5:ad:dc:04:af:44:6b:6e:80:bc:cc:fc:d5:c2:7e:74:80:92:
         63:51:cd:bc:b1:9e:5d:70:5c:1b:09:49:1a:3d:7c:e0:92:ef:
         de:1e:b1:7e
-----BEGIN CERTIFICATE-----
MIIGITCCBQmgAwIBAgIUQzVzVP8GZq1cxTEdBgvYzrn85VUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMjgxMzI1MDRaFw0yNjAzMjcxMzMwMDRaMDMxMTAvBgNV
BAMTKDI1NEM3MjlBNTE1NTI1NkUxQkFGODlFNDhFMDZDNEVCQTk2NzYxRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyYATYiK5diXOUaaFnurl2G3V3
w5XPY/HrLbShxYlJNkXgjQATilcbLzYitP7nf7FnR3MB0wZynTDsMclc3EocvbYx
8UawsBrFhZIOmY2tF6e4HjB0M4wmhwTLDEVt3Gx1+lhEVUNFkukV5oav2VHu4dZb
IA+9kN5W5a/cIRlQ05M2prtbr7H1Kh9DwmHtLyR8wEcGBSxp/097v8N94b7EDwQs
DwHowLUZZWmAJJQadLfbMx6Rvxu+hqilN3THdpwe8nyWW9EcpUUG4BGnK2IoR2R8
Oj3rA+2E+JfEkTKq8RpX1/3LQrWOwgqjijQ5arZ9zFw2OgrTOrPS+9HyVKq/AgMB
AAGjggMrMIIDJzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQlTHKaUVUlbhuv
ieSOBsTrqWdh6jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN2U3
Z0trWDlTNnh5aXgyWXFLclRIM0h4Yjl3M0N5U2FtMWFVQlhVa3VjRUEvMDCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN2U3
Z0trWDlTNnh5aXgyWXFLclRIM0h4Yjl3M0N5U2FtMWFVQlhVa3VjRUEvMC8yNTRD
NzI5QTUxNTUyNTZFMUJBRjg5RTQ4RTA2QzRFQkE5Njc2MUVBLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB
Af8EETAPMA0EAgACMAcDBQAoBIAIMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQl
bTANBgkqhkiG9w0BAQsFAAOCAQEAooOpc/PyDen1NjRU3f6jYYJirMWY6kwMT7y9
6o30g/ezF6UCUxHI/TOm7AX/Knubacn3QokrF57AS75HynpR9Fg12x2Aa4/Wj934
Mly/3zJTIQwT6MS2ekzw6kfXvyRNrqDp7JftpiI2uwkskobMhqJlEGaTBrp1fjyj
f+MytdKoNErKCyxe8ysd4I0P4kSA6ey6E2LqwV/ttWT2fMzzMCxdVTs/Hz5GD8PK
lJf9Ik5YXi+LZ7HTwqaUe5sfjP72SLouZs687I3rxY4CwRgJmHbyLxJ/0tm71a3c
BK9Ea26AvMz81cJ+dICSY1HNvLGeXXBcGwlJGj184JLv3h6xfg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:15:54 2025 by rpki-client