Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/718FD7745122924B2C0447ECC4439A2FA495E189.cer
File:                     718FD7745122924B2C0447ECC4439A2FA495E189.cer (raw, json)
Hash identifier:          Rcy5qhSU38xy6mPi3dN91nUBUT3KIdehAqrd1OVwQI0=
Subject key identifier:   71:8F:D7:74:51:22:92:4B:2C:04:47:EC:C4:43:9A:2F:A4:95:E1:89
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0C870B647F394BB43017A2252FCA1B8EA05E3FAC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F9cTRCzPZicfnZtWKAmRceaFEX2XZTbSDjuJEARW53mc/0/718FD7745122924B2C0447ECC4439A2FA495E189.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F9cTRCzPZicfnZtWKAmRceaFEX2XZTbSDjuJEARW53mc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 27 Nov 2024 13:01:17 +0000
Certificate not after:    Wed 26 Nov 2025 13:06:17 +0000
Subordinate resources:    AS: 263467
                          IP: 177.221.240.0/20
                          IP: 2804:1248::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 20:36:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:87:0b:64:7f:39:4b:b4:30:17:a2:25:2f:ca:1b:8e:a0:5e:3f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 27 13:01:17 2024 GMT
            Not After : Nov 26 13:06:17 2025 GMT
        Subject: CN=718FD7745122924B2C0447ECC4439A2FA495E189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:21:9c:74:58:6f:e9:02:a3:77:7c:bc:3a:1c:
                    91:cc:57:b4:ba:79:26:7d:19:cc:18:c5:81:c7:85:
                    d2:09:39:dd:da:20:99:bd:4d:da:51:b9:96:9c:5f:
                    0c:48:84:c5:9b:03:a2:d0:83:5f:de:d9:38:fe:a8:
                    90:dc:69:e8:7a:0b:11:20:09:94:0a:0e:c4:06:0b:
                    85:b1:b3:0e:3c:b6:e7:da:96:86:0f:09:68:91:46:
                    a9:f4:af:65:e8:1f:86:3a:8e:9e:53:d3:c7:3c:0a:
                    98:9f:25:cc:8d:bf:8a:64:9e:b1:07:1f:87:20:ec:
                    2f:37:f8:fc:34:18:42:5a:11:7e:4b:10:b0:38:ec:
                    57:b9:bd:d3:42:27:4b:6b:ae:77:9e:05:e9:0a:65:
                    8e:f4:f8:dc:f3:69:8d:c7:8c:8a:77:21:3f:c3:6a:
                    17:e1:a0:26:2e:c6:af:32:d4:32:33:a1:d6:ab:92:
                    fa:dd:ff:40:52:5b:f1:2d:e6:b2:04:84:bc:10:72:
                    fd:ee:65:aa:64:76:70:a4:d6:56:20:19:ef:32:c1:
                    67:2b:93:3b:e1:40:25:70:62:2d:b1:4d:fa:61:db:
                    16:4f:59:fc:a9:d3:e8:6c:6e:f9:1a:23:6c:9b:d3:
                    a8:8b:2a:a4:fe:ec:1a:58:04:37:45:f3:4a:cc:f4:
                    37:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                71:8F:D7:74:51:22:92:4B:2C:04:47:EC:C4:43:9A:2F:A4:95:E1:89
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F9cTRCzPZicfnZtWKAmRceaFEX2XZTbSDjuJEARW53mc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F9cTRCzPZicfnZtWKAmRceaFEX2XZTbSDjuJEARW53mc/0/718FD7745122924B2C0447ECC4439A2FA495E189.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.240.0/20
                IPv6:
                  2804:1248::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263467

    Signature Algorithm: sha256WithRSAEncryption
         4e:e9:44:f0:b3:49:e7:27:57:aa:48:08:a0:76:e5:11:15:a9:
         a1:39:0e:e0:fd:ba:6e:f8:9c:7c:6e:5d:83:99:7f:25:94:02:
         51:88:8a:5c:6c:9d:43:5f:0f:6b:9a:2a:f3:3c:5d:13:b9:5a:
         ad:c0:b8:dc:59:b2:da:d3:19:10:3d:7b:cc:9d:62:64:f6:ed:
         26:0b:19:1e:52:d5:f1:03:67:0f:b2:b9:b2:67:b0:cb:24:fd:
         16:db:98:da:61:4f:a9:44:9b:5a:b3:ed:28:aa:15:7a:6d:19:
         70:54:ca:02:9e:ce:c6:0a:40:4e:fc:ec:f1:b5:05:28:ac:68:
         4f:a7:0d:f5:cb:a1:7c:e1:14:48:6a:f1:92:b3:56:84:8a:04:
         81:c0:47:0e:69:02:cf:75:36:c7:a3:83:83:cf:2f:56:6c:8a:
         d9:b8:cf:b2:e0:39:23:39:59:37:8c:8d:61:0b:8b:5d:d8:20:
         ef:c4:eb:45:ff:5f:47:40:57:3b:3e:fc:5c:2b:b4:af:54:02:
         d5:59:cd:41:94:94:9c:7d:a9:04:90:cd:35:2e:6d:55:39:22:
         2e:78:57:1e:dc:4a:68:dc:b9:00:de:20:7d:fa:04:f1:25:74:
         80:b8:94:7a:62:71:0f:4f:15:8d:e3:99:98:2d:4e:37:71:de:
         7a:8a:e1:58
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUDIcLZH85S7QwF6IlL8objqBeP6wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDExMjcxMzAxMTdaFw0yNTExMjYxMzA2MTdaMDMxMTAvBgNV
BAMTKDcxOEZENzc0NTEyMjkyNEIyQzA0NDdFQ0M0NDM5QTJGQTQ5NUUxODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3IZx0WG/pAqN3fLw6HJHMV7S6
eSZ9GcwYxYHHhdIJOd3aIJm9TdpRuZacXwxIhMWbA6LQg1/e2Tj+qJDcaeh6CxEg
CZQKDsQGC4Wxsw48tufaloYPCWiRRqn0r2XoH4Y6jp5T08c8CpifJcyNv4pknrEH
H4cg7C83+Pw0GEJaEX5LELA47Fe5vdNCJ0trrneeBekKZY70+NzzaY3HjIp3IT/D
ahfhoCYuxq8y1DIzodarkvrd/0BSW/Et5rIEhLwQcv3uZapkdnCk1lYgGe8ywWcr
kzvhQCVwYi2xTfph2xZPWfyp0+hsbvkaI2yb06iLKqT+7BpYBDdF80rM9DfBAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRxj9d0USKSSywE
R+zEQ5ovpJXhiTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRjlj
VFJDelBaaWNmblp0V0tBbVJjZWFGRVgyWFpUYlNEanVKRUFSVzUzbWMvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Y5
Y1RSQ3pQWmljZm5adFdLQW1SY2VhRkVYMlhaVGJTRGp1SkVBUlc1M21jLzAvNzE4
RkQ3NzQ1MTIyOTI0QjJDMDQ0N0VDQzQ0MzlBMkZBNDk1RTE4OS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQEsd3wMA0EAgACMAcDBQAoBBJIMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQFKzANBgkqhkiG9w0BAQsFAAOCAQEATulE8LNJ5ydXqkgI
oHblERWpoTkO4P26bvicfG5dg5l/JZQCUYiKXGydQ18Pa5oq8zxdE7larcC43Fmy
2tMZED17zJ1iZPbtJgsZHlLV8QNnD7K5smewyyT9FtuY2mFPqUSbWrPtKKoVem0Z
cFTKAp7OxgpATvzs8bUFKKxoT6cN9cuhfOEUSGrxkrNWhIoEgcBHDmkCz3U2x6OD
g88vVmyK2bjPsuA5IzlZN4yNYQuLXdgg78TrRf9fR0BXOz78XCu0r1QC1VnNQZSU
nH2pBJDNNS5tVTkiLnhXHtxKaNy5AN4gffoE8SV0gLiUemJxD08VjeOZmC1ON3He
eorhWA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:47:44 2025 by rpki-client