Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.cer
File:                     7E09C85B0E5ACF758DAA966E4C1E2328D0322164.cer (raw, json)
Hash identifier:          Enn8o2zY3bZAPXlOjlYk2HMCoE+NrNJIfD+ZKMYh+Q8=
Subject key identifier:   7E:09:C8:5B:0E:5A:CF:75:8D:AA:96:6E:4C:1E:23:28:D0:32:21:64
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       05990C4C7CEF08EBC20A76CE1B6569E9FF27BBE1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 02 May 2025 14:33:07 +0000
Certificate not after:    Fri 01 May 2026 14:38:07 +0000
Subordinate resources:    AS: 268303
                          IP: 45.237.212.0/22
                          IP: 2804:4f18::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 05:09:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:99:0c:4c:7c:ef:08:eb:c2:0a:76:ce:1b:65:69:e9:ff:27:bb:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  2 14:33:07 2025 GMT
            Not After : May  1 14:38:07 2026 GMT
        Subject: CN=7E09C85B0E5ACF758DAA966E4C1E2328D0322164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e7:82:2d:4a:e1:33:35:ae:19:03:09:a6:e1:
                    f9:a0:b9:10:5d:49:1b:e7:3b:96:c9:92:7f:15:c1:
                    02:b4:02:c5:30:78:23:df:d3:2e:10:a1:24:a2:87:
                    ac:8e:08:1b:34:2e:c4:51:e0:55:8e:c0:b1:8a:b5:
                    9e:74:32:a2:d8:3f:83:70:84:dd:07:99:ae:ff:e5:
                    7f:aa:02:7e:f4:cf:c8:c1:35:c0:17:9a:da:56:62:
                    ff:28:61:d9:c2:d2:a5:24:b6:dc:44:3b:79:b0:66:
                    da:22:8c:47:7a:9e:44:71:c3:37:6c:dd:f2:dd:80:
                    d1:9f:15:db:4a:c9:04:25:93:bb:b5:c1:98:d5:1f:
                    98:de:a4:1b:53:c4:d4:47:b6:a6:94:90:2c:e6:6b:
                    b3:fa:0c:d4:7a:d9:fa:51:71:ec:41:53:43:32:0f:
                    33:f5:5c:4d:d5:f2:1d:4a:4b:17:bb:b7:17:c3:e0:
                    91:d7:14:ac:ce:dc:49:43:eb:b3:09:f7:d2:b5:7a:
                    e5:54:ed:0c:4b:0e:a7:fd:bd:0f:79:2e:48:96:6e:
                    59:f4:94:43:a6:16:d0:54:32:15:85:af:1e:72:c4:
                    5d:d7:b8:c1:b5:ae:cb:83:30:9d:8f:b9:54:1f:3a:
                    d5:51:f0:aa:8b:9a:61:8d:00:fc:10:c8:fc:ad:ac:
                    3b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7E:09:C8:5B:0E:5A:CF:75:8D:AA:96:6E:4C:1E:23:28:D0:32:21:64
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.212.0/22
                IPv6:
                  2804:4f18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268303

    Signature Algorithm: sha256WithRSAEncryption
         b8:a2:f6:b1:18:fe:33:6c:64:52:df:fb:ab:2f:15:3e:0c:bf:
         50:29:51:cd:90:90:63:2c:d3:8d:0b:1d:68:05:1b:b5:08:f7:
         7d:70:b8:4f:10:12:9c:1b:56:b4:6f:bf:61:6e:42:57:a7:dd:
         29:72:dc:75:4c:b3:4c:3f:97:e7:40:c8:fc:23:c8:66:2a:6f:
         cd:0e:18:46:ec:ea:71:2a:d2:c1:80:d1:15:7c:6c:16:15:ce:
         6f:50:19:4d:11:3b:f5:9f:23:47:63:bf:a7:49:93:e2:83:9b:
         38:21:46:f7:6b:0d:f5:92:2d:ba:88:23:6c:d5:4a:f9:de:a7:
         9e:04:ec:47:11:26:2a:1f:34:09:ec:68:59:e8:2c:45:ea:3e:
         04:e5:a8:66:70:e3:84:8c:de:28:b2:a7:4e:24:a9:d1:dc:1f:
         da:55:9a:6b:6e:c4:d3:48:b0:fc:a6:6b:ec:54:c1:16:31:c5:
         09:8a:0f:af:16:4c:6d:1a:af:66:ff:d9:dc:53:7e:28:b0:42:
         19:39:e8:06:94:aa:74:bf:3d:4f:0a:14:d5:5f:4a:ca:f5:cf:
         34:7b:1a:33:20:14:91:cc:d6:82:7c:4a:bb:91:3b:57:33:24:
         83:a1:03:19:32:a5:1d:c2:fc:94:8c:13:34:03:33:fe:fe:47:
         fe:a4:7e:d1
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUBZkMTHzvCOvCCnbOG2Vp6f8nu+EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA1MDIxNDMzMDdaFw0yNjA1MDExNDM4MDdaMDMxMTAvBgNV
BAMTKDdFMDlDODVCMEU1QUNGNzU4REFBOTY2RTRDMUUyMzI4RDAzMjIxNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO54ItSuEzNa4ZAwmm4fmguRBd
SRvnO5bJkn8VwQK0AsUweCPf0y4QoSSih6yOCBs0LsRR4FWOwLGKtZ50MqLYP4Nw
hN0Hma7/5X+qAn70z8jBNcAXmtpWYv8oYdnC0qUkttxEO3mwZtoijEd6nkRxwzds
3fLdgNGfFdtKyQQlk7u1wZjVH5jepBtTxNRHtqaUkCzma7P6DNR62fpRcexBU0My
DzP1XE3V8h1KSxe7txfD4JHXFKzO3ElD67MJ99K1euVU7QxLDqf9vQ95LkiWbln0
lEOmFtBUMhWFrx5yxF3XuMG1rsuDMJ2PuVQfOtVR8KqLmmGNAPwQyPytrDsbAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR+CchbDlrPdY2q
lm5MHiMo0DIhZDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOUhH
NU5laFNBV1F5a1NDc2Z0THpqaEdlY24xbXdrMUJqa3VFSnJqWmdQa2IvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlI
RzVOZWhTQVdReWtTQ3NmdEx6amhHZWNuMW13azFCamt1RUpyalpnUGtiLzAvN0Uw
OUM4NUIwRTVBQ0Y3NThEQUE5NjZFNEMxRTIzMjhEMDMyMjE2NC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLe3UMA0EAgACMAcDBQAoBE8YMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQYDzANBgkqhkiG9w0BAQsFAAOCAQEAuKL2sRj+M2xkUt/7
qy8VPgy/UClRzZCQYyzTjQsdaAUbtQj3fXC4TxASnBtWtG+/YW5CV6fdKXLcdUyz
TD+X50DI/CPIZipvzQ4YRuzqcSrSwYDRFXxsFhXOb1AZTRE79Z8jR2O/p0mT4oOb
OCFG92sN9ZItuogjbNVK+d6nngTsRxEmKh80CexoWegsReo+BOWoZnDjhIzeKLKn
TiSp0dwf2lWaa27E00iw/KZr7FTBFjHFCYoPrxZMbRqvZv/Z3FN+KLBCGTnoBpSq
dL89TwoU1V9KyvXPNHsaMyAUkczWgnxKu5E7VzMkg6EDGTKlHcL8lIwTNAMz/v5H
/qR+0Q==
-----END CERTIFICATE-----
Generated at Fri Jun 6 04:03:50 2025 by rpki-client