Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/57A246AC90452D1E317085F8AF6EEF8E11AC4553.cer
File:                     57A246AC90452D1E317085F8AF6EEF8E11AC4553.cer (raw, json)
Hash identifier:          Q9XY3tHoKAjXVRDjFosoKxh5xrWXeCldnuv47PwVexQ=
Subject key identifier:   57:A2:46:AC:90:45:2D:1E:31:70:85:F8:AF:6E:EF:8E:11:AC:45:53
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5204E84B221DEB5970395D5B19CE36CB0C8DB4FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/1/57A246AC90452D1E317085F8AF6EEF8E11AC4553.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 06:51:57 +0000
Certificate not after:    Thu 05 Mar 2026 06:56:57 +0000
Subordinate resources:    AS: 266605
                          IP: 45.7.144.0/22
                          IP: 2804:3e8c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Apr 2025 14:59:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:04:e8:4b:22:1d:eb:59:70:39:5d:5b:19:ce:36:cb:0c:8d:b4:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 06:51:57 2025 GMT
            Not After : Mar  5 06:56:57 2026 GMT
        Subject: CN=57A246AC90452D1E317085F8AF6EEF8E11AC4553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:31:63:64:db:f7:e7:d9:06:24:48:f5:89:7a:
                    8e:dd:68:7e:c4:47:28:c4:2e:f0:65:86:02:ab:f5:
                    e1:2c:70:be:58:fb:a3:9b:7a:ec:8a:c0:d2:a1:79:
                    ca:3a:02:e8:47:bc:d0:fc:7c:33:e2:2a:9d:aa:72:
                    06:6e:f2:d4:d0:4f:fb:2e:43:84:cb:40:97:38:88:
                    63:aa:c7:2c:2d:35:bd:20:81:9b:d6:ae:bb:6a:b4:
                    46:ff:48:b4:2b:1d:4d:d3:25:47:43:ac:f3:6f:42:
                    a7:25:e2:3b:5e:73:70:19:8c:79:c2:2c:61:3b:02:
                    b4:65:1d:59:8e:f2:60:3d:2d:68:33:98:d9:e7:aa:
                    bf:e1:5e:62:4d:f2:f4:de:ff:0c:92:9a:c5:5c:8b:
                    db:51:aa:51:8a:bb:e3:ef:7e:8e:c9:12:c9:39:6b:
                    91:bf:49:07:0a:aa:7a:39:0b:58:ab:9c:db:43:2e:
                    a8:23:0b:43:11:b1:c9:ee:7d:1f:07:d6:ca:7d:7a:
                    7d:8a:13:4f:42:0b:b8:0d:e7:5e:0a:98:ef:e2:f8:
                    6c:02:84:3d:20:68:07:f8:9f:f0:d6:ba:d5:b1:e4:
                    98:36:4b:29:91:03:b6:ad:42:52:c8:27:e9:fe:30:
                    a5:ae:8a:c5:b2:ab:88:fa:2e:61:33:83:50:16:fd:
                    19:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                57:A2:46:AC:90:45:2D:1E:31:70:85:F8:AF:6E:EF:8E:11:AC:45:53
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/1/57A246AC90452D1E317085F8AF6EEF8E11AC4553.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.144.0/22
                IPv6:
                  2804:3e8c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266605

    Signature Algorithm: sha256WithRSAEncryption
         42:a5:be:ad:30:e2:6c:e1:9f:58:c9:86:db:e6:4f:b4:d6:6a:
         0e:c6:b0:9f:39:7f:28:2d:0e:b3:9e:9c:a0:f6:05:91:bc:59:
         68:a5:45:70:22:12:33:7c:22:b4:4f:eb:ad:84:5a:70:06:30:
         2c:a5:42:c5:52:cb:6b:29:b3:d3:9b:0f:dc:ad:80:d3:fe:04:
         3e:12:06:b3:45:f3:01:3a:53:4c:98:e3:3a:0c:d6:0d:49:47:
         4a:83:e5:3b:9e:b4:28:83:dc:1c:6d:9a:ce:b9:d6:3d:2a:66:
         24:1e:cc:94:26:2d:54:96:a0:4d:14:d5:50:89:c5:da:14:d9:
         a8:b9:2d:44:3a:16:55:ab:78:4c:f4:21:63:cd:12:62:c4:2d:
         e6:fb:cf:e9:9c:bb:58:37:56:d7:c1:54:53:70:2d:a5:bf:9d:
         05:42:d3:9e:2d:fc:76:d1:78:ba:f0:49:8f:6a:9f:31:c7:4f:
         6c:20:0c:98:1e:16:7f:9f:a7:a3:f5:7c:a6:ca:78:97:2f:54:
         81:04:53:1d:f7:6e:03:db:df:37:78:93:13:e3:c2:55:97:9f:
         02:59:76:1a:30:21:17:15:35:ff:f0:26:70:44:5e:8c:79:31:
         99:5f:e9:63:8f:42:66:46:07:bb:ba:00:84:51:de:d3:ea:5b:
         d3:7e:bb:83
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUUgToSyId61lwOV1bGc42ywyNtP8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDYwNjUxNTdaFw0yNjAzMDUwNjU2NTdaMDMxMTAvBgNV
BAMTKDU3QTI0NkFDOTA0NTJEMUUzMTcwODVGOEFGNkVFRjhFMTFBQzQ1NTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzMWNk2/fn2QYkSPWJeo7daH7E
RyjELvBlhgKr9eEscL5Y+6ObeuyKwNKheco6AuhHvND8fDPiKp2qcgZu8tTQT/su
Q4TLQJc4iGOqxywtNb0ggZvWrrtqtEb/SLQrHU3TJUdDrPNvQqcl4jtec3AZjHnC
LGE7ArRlHVmO8mA9LWgzmNnnqr/hXmJN8vTe/wySmsVci9tRqlGKu+Pvfo7JEsk5
a5G/SQcKqno5C1irnNtDLqgjC0MRscnufR8H1sp9en2KE09CC7gN514KmO/i+GwC
hD0gaAf4n/DWutWx5Jg2SymRA7atQlLIJ+n+MKWuisWyq4j6LmEzg1AW/RkPAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRXokaskEUtHjFw
hfivbu+OEaxFUzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN2JH
SHZGVWdxS0sxZTVtcXRaSmVKOTJuV2h0b21XTG5OenhiV2VhUHFKYnkvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdi
R0h2RlVncUtLMWU1bXF0WkplSjkybldodG9tV0xuTnp4YldlYVBxSmJ5LzEvNTdB
MjQ2QUM5MDQ1MkQxRTMxNzA4NUY4QUY2RUVGOEUxMUFDNDU1My5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLQeQMA0EAgACMAcDBQAoBD6MMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQRbTANBgkqhkiG9w0BAQsFAAOCAQEAQqW+rTDibOGfWMmG
2+ZPtNZqDsawnzl/KC0Os56coPYFkbxZaKVFcCISM3witE/rrYRacAYwLKVCxVLL
aymz05sP3K2A0/4EPhIGs0XzATpTTJjjOgzWDUlHSoPlO560KIPcHG2azrnWPSpm
JB7MlCYtVJagTRTVUInF2hTZqLktRDoWVat4TPQhY80SYsQt5vvP6Zy7WDdW18FU
U3Atpb+dBULTni38dtF4uvBJj2qfMcdPbCAMmB4Wf5+no/V8psp4ly9UgQRTHfdu
A9vfN3iTE+PCVZefAll2GjAhFxU1//AmcERejHkxmV/pY49CZkYHu7oAhFHe0+pb
0367gw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:39:01 2025 by rpki-client