Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.cer
File:                     A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.cer (raw, json)
Hash identifier:          +MbPAcElrZxsbK60m+juEACEGWDvoren5pxBon5X0oE=
Subject key identifier:   A1:CC:88:C7:FD:49:EE:B4:16:9B:CC:7F:C3:66:DD:AD:75:0C:14:78
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5F13CC3B275C767722B3B5CFDC179C46FE9EB1FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 Jan 2025 12:27:34 +0000
Certificate not after:    Thu 08 Jan 2026 12:32:34 +0000
Subordinate resources:    AS: 271274
                          IP: 190.12.136.0/22
                          IP: 2804:78ec::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 15:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:13:cc:3b:27:5c:76:77:22:b3:b5:cf:dc:17:9c:46:fe:9e:b1:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  9 12:27:34 2025 GMT
            Not After : Jan  8 12:32:34 2026 GMT
        Subject: CN=A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:5b:7c:39:c1:e0:61:8b:e7:c5:63:48:ca:f4:
                    56:ed:31:65:7b:2d:b2:23:bc:9f:b9:10:57:b8:57:
                    ca:14:0b:3d:08:94:fb:42:dd:e4:15:60:fc:d9:d7:
                    b0:24:b4:6b:bc:25:a5:8a:eb:4c:5b:31:9d:0e:b9:
                    d9:7a:f8:ba:5c:87:01:ac:54:83:a6:28:30:fb:9c:
                    0f:2c:d7:77:d9:13:14:0a:d6:1a:99:d6:f3:7c:1d:
                    fb:e2:24:e7:5c:92:03:93:9e:d4:cd:af:5e:a5:27:
                    0e:6d:23:5a:40:1b:5b:cb:95:73:09:53:b5:03:29:
                    7e:d4:99:8f:0b:d9:c0:c8:89:a4:ed:ba:4b:c2:8d:
                    a5:b7:2c:73:00:03:a3:59:48:94:ff:16:8a:cf:d4:
                    fa:dc:36:c9:e9:92:63:89:b0:a3:0a:90:e1:29:d4:
                    90:ae:52:04:0e:84:5e:a0:7e:98:f1:c3:ea:b3:67:
                    2e:6f:59:86:05:c9:29:16:22:de:3b:fd:c4:06:42:
                    d0:36:7c:16:94:df:6c:23:fd:71:a6:c3:0b:4c:87:
                    cd:73:00:06:f9:63:53:a8:11:ca:5c:5d:c6:71:ac:
                    18:7c:de:7e:84:b1:c7:c6:b2:e1:87:09:77:32:92:
                    9c:5f:e5:97:8b:4a:30:6e:2a:fc:de:1e:18:91:60:
                    a9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A1:CC:88:C7:FD:49:EE:B4:16:9B:CC:7F:C3:66:DD:AD:75:0C:14:78
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.12.136.0/22
                IPv6:
                  2804:78ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271274

    Signature Algorithm: sha256WithRSAEncryption
         40:32:cf:d3:de:33:aa:e3:c5:79:8e:30:bb:26:06:d7:55:bf:
         17:11:a2:34:b7:c4:43:26:04:8a:c9:db:1f:ed:84:6d:f0:3f:
         29:6d:b6:2b:08:29:ba:fa:d9:92:eb:5b:e4:e6:89:26:bb:65:
         17:87:5a:23:66:45:23:99:19:7b:8b:21:f7:b1:cc:ff:f2:b9:
         1d:31:a2:5b:db:e7:94:d8:f6:fe:47:62:4b:66:09:ea:86:e0:
         41:23:e9:3f:b8:72:68:88:9f:0a:47:2f:ea:e0:3b:5f:fd:21:
         75:03:3b:e3:4b:5f:fb:fd:99:6d:b1:d0:1f:7f:18:56:e0:22:
         ce:51:74:a0:84:b5:14:51:20:b0:1f:03:9a:ac:21:bd:d2:58:
         21:72:c6:93:b9:9a:06:c6:7b:03:64:a0:ce:fa:f9:69:f9:39:
         f1:66:0a:d5:9b:9c:00:d2:41:8d:85:fc:b2:e6:a0:bd:5f:27:
         88:5c:fe:70:f3:5c:7a:7a:1d:60:b5:f0:ff:e8:e5:d9:58:03:
         01:ce:4a:19:c1:3d:6d:b3:1e:c0:80:1e:37:a6:69:c8:95:cf:
         a5:71:e9:91:56:5e:6a:0b:42:de:02:10:63:27:00:4a:e0:98:
         89:19:c5:0f:55:8e:b8:43:1a:c2:ac:6f:b4:dc:71:e2:15:ff:
         e0:49:fa:13
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUXxPMOydcdncis7XP3BecRv6esf4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAxMDkxMjI3MzRaFw0yNjAxMDgxMjMyMzRaMDMxMTAvBgNV
BAMTKEExQ0M4OEM3RkQ0OUVFQjQxNjlCQ0M3RkMzNjZEREFENzUwQzE0NzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqW3w5weBhi+fFY0jK9FbtMWV7
LbIjvJ+5EFe4V8oUCz0IlPtC3eQVYPzZ17AktGu8JaWK60xbMZ0Oudl6+LpchwGs
VIOmKDD7nA8s13fZExQK1hqZ1vN8HfviJOdckgOTntTNr16lJw5tI1pAG1vLlXMJ
U7UDKX7UmY8L2cDIiaTtukvCjaW3LHMAA6NZSJT/ForP1PrcNsnpkmOJsKMKkOEp
1JCuUgQOhF6gfpjxw+qzZy5vWYYFySkWIt47/cQGQtA2fBaU32wj/XGmwwtMh81z
AAb5Y1OoEcpcXcZxrBh83n6EscfGsuGHCXcykpxf5ZeLSjBuKvzeHhiRYKktAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBShzIjH/UnutBab
zH/DZt2tdQwUeDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRGZo
VDdqSjJDbVk5NEdFVkt4OGd5bVNDUDg0SGRQazhUa0VTRXNaWlFhN3UvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Rm
aFQ3akoyQ21ZOTRHRVZLeDhneW1TQ1A4NEhkUGs4VGtFU0VzWlpRYTd1LzAvQTFD
Qzg4QzdGRDQ5RUVCNDE2OUJDQzdGQzM2NkREQUQ3NTBDMTQ3OC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCvgyIMA0EAgACMAcDBQAoBHjsMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQjqjANBgkqhkiG9w0BAQsFAAOCAQEAQDLP094zquPFeY4w
uyYG11W/FxGiNLfEQyYEisnbH+2EbfA/KW22KwgpuvrZkutb5OaJJrtlF4daI2ZF
I5kZe4sh97HM//K5HTGiW9vnlNj2/kdiS2YJ6obgQSPpP7hyaIifCkcv6uA7X/0h
dQM740tf+/2ZbbHQH38YVuAizlF0oIS1FFEgsB8DmqwhvdJYIXLGk7maBsZ7A2Sg
zvr5afk58WYK1ZucANJBjYX8suagvV8niFz+cPNcenodYLXw/+jl2VgDAc5KGcE9
bbMewIAeN6ZpyJXPpXHpkVZeagtC3gIQYycASuCYiRnFD1WOuEMawqxvtNxx4hX/
4En6Ew==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:05 2025 by rpki-client