Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
File:                     6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer (raw, json)
Hash identifier:          vQ31jRgH2fKbK6rJ6yssGAe4squF3Od4Nzb0ZAeOR0E=
Subject key identifier:   6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1AFB5BDBD17B9AF9BDE73F22ACBFB953B2711401
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:36:42 +0000
Certificate not after:    Wed 04 Mar 2026 18:41:42 +0000
Subordinate resources:    AS: 61918
                          IP: 170.150.232.0/22
                          IP: 177.92.164.0/22
                          IP: 2804:1714::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 20:36:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:fb:5b:db:d1:7b:9a:f9:bd:e7:3f:22:ac:bf:b9:53:b2:71:14:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:36:42 2025 GMT
            Not After : Mar  4 18:41:42 2026 GMT
        Subject: CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0b:67:82:c7:36:44:77:d4:a8:2f:04:28:6c:
                    bf:90:a5:24:c4:32:5a:05:6c:12:f2:3f:6e:47:2a:
                    4a:58:e0:5b:6e:fe:12:6f:1b:2e:a9:55:60:df:d0:
                    37:5c:54:f3:35:0f:67:72:0f:dc:7f:1d:b9:f8:78:
                    59:7c:8e:7d:30:b9:dd:70:84:a4:48:6c:0b:08:a8:
                    7f:17:5d:39:04:88:32:ad:19:da:a3:80:dc:ab:02:
                    9b:6d:2d:ff:4d:ae:7f:b2:65:ea:f4:7c:83:01:f6:
                    6c:89:67:db:09:36:ce:6c:d7:d5:ae:d6:90:10:5f:
                    bd:99:56:62:56:d0:6f:42:44:7a:7c:3e:a4:1c:59:
                    87:28:97:cd:37:a4:9f:ac:91:d7:ec:d0:14:3d:62:
                    79:1e:0d:61:5e:a9:f0:f9:9e:29:ac:e9:03:ec:74:
                    8f:fb:f3:39:c9:0d:bf:7e:1c:95:44:c3:b1:45:38:
                    91:4d:19:4e:c7:09:32:13:85:c1:4b:9c:58:bf:98:
                    d2:24:c2:d0:ef:e1:3a:32:d7:0b:6a:f7:8d:1c:0b:
                    11:20:a7:f7:c0:98:f0:98:7f:f7:ea:bd:f0:46:54:
                    bf:c4:f5:34:9b:68:fa:d6:33:ea:0c:0a:f0:0a:ad:
                    52:ed:0e:c0:fc:4d:4b:5e:b9:bb:11:83:47:af:cd:
                    fe:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.232.0/22
                  177.92.164.0/22
                IPv6:
                  2804:1714::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61918

    Signature Algorithm: sha256WithRSAEncryption
         6a:f1:28:59:22:c4:db:e9:7b:d3:9e:64:94:6b:a8:ae:cb:b5:
         a0:88:ed:17:b1:2c:91:bf:79:5e:df:1c:92:c6:14:25:92:6c:
         29:c7:c8:a2:68:cd:83:40:ff:b3:de:fe:39:54:8a:d0:5c:d1:
         a8:65:32:e4:9e:80:a9:cc:57:2b:ed:db:dd:91:c4:2f:22:d5:
         16:3f:ed:51:ff:1c:f3:1e:e9:d1:6a:0d:c3:70:64:89:ad:2f:
         e1:98:97:81:a0:5d:76:1f:86:7e:b0:c2:ad:80:7e:58:b0:8e:
         3f:ee:b6:b6:ba:25:10:bf:0a:6d:72:bb:82:30:03:8d:38:eb:
         5d:c0:f8:71:7f:88:56:9e:19:52:a0:a0:f0:07:43:fe:22:98:
         ee:49:1b:11:0f:99:45:b4:7d:2a:96:60:56:50:37:da:1b:4e:
         85:b7:5a:28:37:6f:c3:a3:b4:b5:96:59:6e:b3:b9:a4:5e:13:
         9d:4a:1c:51:21:69:b0:89:b9:08:8d:21:d4:7c:fc:75:bb:fa:
         f4:3d:68:99:b3:a2:78:b4:11:98:66:2a:7b:3f:c9:f8:67:d1:
         a1:aa:79:7a:a7:66:85:f6:b7:2f:36:02:f5:ce:00:ce:7f:dc:
         d9:06:fc:a6:ce:76:59:77:37:bc:c0:39:50:90:c4:a8:83:2c:
         95:3f:7a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:41:09 2025 by rpki-client