Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
File:                     6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer (raw, json)
Hash identifier:          kJqmPsHkrraarKy0ga5kPd3Bqu3mhN6KNiG5zTL5aIE=
Subject key identifier:   6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0626FAB450FE02A57CFA5E5C52D291D8FEF3A319
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:35:40 +0000
Certificate not after:    Wed 04 Mar 2026 18:40:40 +0000
Subordinate resources:    AS: 266248
                          IP: 45.6.220.0/22
                          IP: 2804:3d04::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 22:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:26:fa:b4:50:fe:02:a5:7c:fa:5e:5c:52:d2:91:d8:fe:f3:a3:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:35:40 2025 GMT
            Not After : Mar  4 18:40:40 2026 GMT
        Subject: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f9:09:76:fa:e8:53:0f:9f:26:86:99:83:6f:
                    c2:3f:ed:93:54:b4:99:ed:ba:e7:51:a0:f2:70:8d:
                    d9:6c:fb:c3:91:30:da:65:0a:8c:d6:20:71:d7:2f:
                    25:1f:4f:e4:6c:ab:22:c7:36:f2:14:3d:35:18:dc:
                    4c:4f:3c:5d:ab:cb:c4:a9:84:fa:5e:f1:f9:5e:97:
                    ee:43:e3:2a:34:0c:b9:ac:a3:8d:c9:7d:f5:42:9e:
                    aa:75:3c:e1:5e:e1:3d:34:5b:ae:68:b1:b7:f1:de:
                    06:2d:e1:fb:0f:cb:4d:39:90:a1:2f:b8:d3:4b:3c:
                    7a:a5:d9:09:52:99:67:7e:e2:af:60:0a:54:bf:09:
                    86:65:09:a2:93:8a:ae:22:8b:df:27:33:03:78:ab:
                    ff:e9:b1:49:c7:22:ef:52:8e:dd:46:a3:fa:f2:f6:
                    ea:34:82:a0:ec:4b:4f:db:0a:f2:6a:70:d9:07:15:
                    f4:76:20:22:c8:af:eb:a5:67:17:03:8a:67:ed:73:
                    94:2c:79:15:1d:e9:a4:5a:89:0e:52:e2:6f:ec:fc:
                    dc:3f:75:27:b8:2f:c0:e5:13:d9:1d:fb:a3:ae:36:
                    ea:fb:77:5e:ab:83:4d:ef:79:68:44:24:5a:aa:e0:
                    78:d2:f8:57:53:e6:72:27:16:a9:bd:d9:6c:3f:be:
                    77:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.220.0/22
                IPv6:
                  2804:3d04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266248

    Signature Algorithm: sha256WithRSAEncryption
         71:51:bf:12:a9:3e:78:20:29:84:c2:8f:52:95:0c:d7:64:c5:
         29:cd:b0:cf:1b:18:e4:24:60:d1:2c:94:3e:c2:43:19:bc:15:
         fc:cf:96:59:d0:2d:94:f5:ed:38:ef:71:57:4f:25:36:9c:3c:
         5e:3a:7c:57:7c:e6:61:cc:14:fb:1f:a4:6f:37:80:13:8e:1f:
         3d:ad:85:af:a6:cb:1e:b5:f3:ae:61:b0:df:e1:66:83:0f:ec:
         1a:96:f2:bf:7e:9c:7d:23:75:b6:b6:d9:9a:79:2e:fe:b1:70:
         3e:e6:4d:a1:67:eb:56:fc:f9:63:00:f6:7e:3d:8d:5f:e6:84:
         03:9e:1a:0e:34:f8:38:cf:7a:f7:b8:41:b4:4c:bf:4d:0f:42:
         d7:66:71:9b:e0:2e:f0:e4:b7:4a:6f:02:cd:1c:bd:97:fc:65:
         a4:19:91:23:03:c8:17:17:0d:ab:0f:4f:97:0c:17:15:ac:13:
         c9:d8:8a:de:e0:e7:f8:7a:0d:7b:52:58:38:74:18:0c:3a:bc:
         4f:dc:7f:68:3b:ed:68:12:9e:e1:9d:35:3b:29:de:16:55:9f:
         13:70:90:70:a1:3e:5d:fb:91:b1:c8:7b:c9:0f:5a:08:20:57:
         85:f9:6e:93:0f:34:93:55:79:d8:b2:ea:59:84:1c:e6:a9:ad:
         13:31:ac:0e
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUBib6tFD+AqV8+l5cUtKR2P7zoxkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDUxODM1NDBaFw0yNjAzMDQxODQwNDBaMDMxMTAvBgNV
BAMTKDZGN0I3ODBCQUIzQUYzMTlBOEZBMTYzMjJBNTAzNkNCN0YyNzA0NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz+Ql2+uhTD58mhpmDb8I/7ZNU
tJntuudRoPJwjdls+8ORMNplCozWIHHXLyUfT+RsqyLHNvIUPTUY3ExPPF2ry8Sp
hPpe8flel+5D4yo0DLmso43JffVCnqp1POFe4T00W65osbfx3gYt4fsPy005kKEv
uNNLPHql2QlSmWd+4q9gClS/CYZlCaKTiq4ii98nMwN4q//psUnHIu9Sjt1Go/ry
9uo0gqDsS0/bCvJqcNkHFfR2ICLIr+ulZxcDimftc5QseRUd6aRaiQ5S4m/s/Nw/
dSe4L8DlE9kd+6OuNur7d16rg03veWhEJFqq4HjS+FdT5nInFqm92Ww/vnfjAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRve3gLqzrzGaj6
FjIqUDbLfycEWDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMmtw
SnUzSk1BYkcxQjRSbXN2dDJDZ1ZhVzJkUzZFTDlnR3hEMlpld21yNUovMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMmtw
SnUzSk1BYkcxQjRSbXN2dDJDZ1ZhVzJkUzZFTDlnR3hEMlpld21yNUovMS82RjdC
NzgwQkFCM0FGMzE5QThGQTE2MzIyQTUwMzZDQjdGMjcwNDU4Lm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAItBtwwDQQCAAIwBwMFACgEPQQwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBBAIMA0GCSqGSIb3DQEBCwUAA4IBAQBxUb8SqT54ICmEwo9S
lQzXZMUpzbDPGxjkJGDRLJQ+wkMZvBX8z5ZZ0C2U9e0473FXTyU2nDxeOnxXfOZh
zBT7H6RvN4ATjh89rYWvpssetfOuYbDf4WaDD+walvK/fpx9I3W2ttmaeS7+sXA+
5k2hZ+tW/PljAPZ+PY1f5oQDnhoONPg4z3r3uEG0TL9ND0LXZnGb4C7w5LdKbwLN
HL2X/GWkGZEjA8gXFw2rD0+XDBcVrBPJ2Ire4Of4eg17Ulg4dBgMOrxP3H9oO+1o
Ep7hnTU7Kd4WVZ8TcJBwoT5d+5GxyHvJD1oIIFeF+W6TDzSTVXnYsupZhBzmqa0T
MawO
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:03:25 2025 by rpki-client