Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BE89F6747B326E779CB3E94906319A8C0A0C1C81.cer
File:                     BE89F6747B326E779CB3E94906319A8C0A0C1C81.cer (raw, json)
Hash identifier:          2d9jNhcfuWvD3AJgmjw+nR0Xc9fUCpXI4cN6DWOD5Ts=
Subject key identifier:   BE:89:F6:74:7B:32:6E:77:9C:B3:E9:49:06:31:9A:8C:0A:0C:1C:81
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       23482F442FDDD5CCEAF2AB7690E7D61C5518EB60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/BE89F6747B326E779CB3E94906319A8C0A0C1C81.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 03 Apr 2025 17:39:58 +0000
Certificate not after:    Thu 02 Apr 2026 17:44:58 +0000
Subordinate resources:    AS: 262742
                          IP: 177.104.32.0/19
                          IP: 2801:a4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 17:24:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:48:2f:44:2f:dd:d5:cc:ea:f2:ab:76:90:e7:d6:1c:55:18:eb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 17:39:58 2025 GMT
            Not After : Apr  2 17:44:58 2026 GMT
        Subject: CN=BE89F6747B326E779CB3E94906319A8C0A0C1C81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:78:ce:e9:e8:fc:d5:e9:6d:02:70:86:1b:24:
                    ce:e1:6b:ab:e5:4b:56:f7:8c:75:24:18:d8:1e:1a:
                    9b:da:65:02:7d:d1:a6:e8:e3:28:ff:36:56:18:d7:
                    1f:a9:71:39:2d:77:24:39:a6:1e:f0:d4:9d:59:b5:
                    52:94:68:45:97:e8:a4:49:96:9e:91:23:49:75:82:
                    6e:18:78:17:63:24:5b:66:82:00:b4:e2:24:fa:5d:
                    b2:06:41:67:3c:2b:f3:8c:2d:fc:1a:55:bf:e4:ee:
                    1c:99:61:4f:98:ae:c7:c7:b1:1d:47:2a:a4:4f:90:
                    47:c8:70:9b:d5:02:7a:b6:34:cb:dd:a9:08:18:1c:
                    42:c8:f6:0c:3c:65:49:f0:d6:27:67:3e:67:0a:cd:
                    16:27:7c:e2:d1:58:53:3f:73:11:c4:c1:06:d8:a1:
                    c6:a7:3a:ac:27:df:aa:82:4f:d8:ee:4d:e7:05:dc:
                    2a:fc:07:1d:c8:72:19:31:02:4b:45:b4:dc:6e:61:
                    3b:8f:31:78:00:9a:f3:c5:44:83:50:a2:fe:b3:29:
                    d9:d9:67:22:83:12:6e:28:98:ea:e6:ea:53:6f:1d:
                    19:a7:94:0e:b4:6d:28:1b:02:67:7f:ec:4e:b9:80:
                    f6:19:eb:2c:cf:33:bf:f6:50:1f:0c:71:aa:52:fe:
                    20:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BE:89:F6:74:7B:32:6E:77:9C:B3:E9:49:06:31:9A:8C:0A:0C:1C:81
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/BE89F6747B326E779CB3E94906319A8C0A0C1C81.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.32.0/19
                IPv6:
                  2801:a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262742

    Signature Algorithm: sha256WithRSAEncryption
         2e:47:cf:46:91:88:25:01:c8:34:29:2b:3d:cf:b8:50:48:2e:
         9f:fd:73:76:9b:d2:78:a7:ef:8d:46:3f:8b:cd:34:a1:94:88:
         d3:07:23:57:b9:c5:72:cc:d0:4e:50:06:c5:89:04:81:fb:e3:
         02:ac:af:ff:2b:3e:2c:c3:5e:dc:f3:11:d0:45:7c:89:5e:75:
         2d:ba:7c:bd:f1:60:be:a9:64:bf:62:5b:c1:35:24:e7:62:c2:
         a7:15:a8:14:4a:23:4a:90:fd:cf:43:8d:96:9d:3a:c2:1e:77:
         2a:20:bc:11:a9:fe:35:3a:41:00:88:43:bc:f8:db:33:70:38:
         d2:8b:7f:20:e1:4f:50:de:e8:dc:95:ae:75:75:06:d2:eb:19:
         75:86:37:76:dc:62:d3:e8:33:4b:8e:f1:39:99:a5:13:d7:93:
         41:db:e7:d3:98:1c:be:cd:b3:f1:2e:77:9b:bb:dc:2f:6c:47:
         47:d4:6d:8d:28:78:7a:a4:86:7e:96:36:e3:65:76:64:f9:32:
         8a:7f:fe:b5:76:95:b1:15:4e:cf:7d:fe:82:33:7d:b3:45:aa:
         cd:9b:f0:a4:af:a9:c9:a4:44:5b:0b:d9:f0:cb:fd:14:b4:ca:
         ea:13:dc:b6:a7:d3:b6:5b:62:63:dd:e9:9b:d6:22:22:81:75:
         5f:e3:c7:a4
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUI0gvRC/d1czq8qt2kOfWHFUY62AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA0MDMxNzM5NThaFw0yNjA0MDIxNzQ0NThaMDMxMTAvBgNV
BAMTKEJFODlGNjc0N0IzMjZFNzc5Q0IzRTk0OTA2MzE5QThDMEEwQzFDODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBeM7p6PzV6W0CcIYbJM7ha6vl
S1b3jHUkGNgeGpvaZQJ90abo4yj/NlYY1x+pcTktdyQ5ph7w1J1ZtVKUaEWX6KRJ
lp6RI0l1gm4YeBdjJFtmggC04iT6XbIGQWc8K/OMLfwaVb/k7hyZYU+YrsfHsR1H
KqRPkEfIcJvVAnq2NMvdqQgYHELI9gw8ZUnw1idnPmcKzRYnfOLRWFM/cxHEwQbY
ocanOqwn36qCT9juTecF3Cr8Bx3IchkxAktFtNxuYTuPMXgAmvPFRINQov6zKdnZ
ZyKDEm4omOrm6lNvHRmnlA60bSgbAmd/7E65gPYZ6yzPM7/2UB8McapS/iDdAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS+ifZ0ezJud5yz
6UkGMZqMCgwcgTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMkdV
SGRLYnpHVnM2Zm5Fcm5UMzVSOTcyWHRDNjNiaVhNSlEycmg2cUI5RGgvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJH
VUhkS2J6R1ZzNmZuRXJuVDM1Ujk3Mlh0QzYzYmlYTUpRMnJoNnFCOURoLzAvQkU4
OUY2NzQ3QjMyNkU3NzlDQjNFOTQ5MDYzMTlBOEMwQTBDMUM4MS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQFsWggMA0EAgACMAcDBQAoAQCkMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQCVjANBgkqhkiG9w0BAQsFAAOCAQEALkfPRpGIJQHINCkr
Pc+4UEgun/1zdpvSeKfvjUY/i800oZSI0wcjV7nFcszQTlAGxYkEgfvjAqyv/ys+
LMNe3PMR0EV8iV51Lbp8vfFgvqlkv2JbwTUk52LCpxWoFEojSpD9z0ONlp06wh53
KiC8Ean+NTpBAIhDvPjbM3A40ot/IOFPUN7o3JWudXUG0usZdYY3dtxi0+gzS47x
OZmlE9eTQdvn05gcvs2z8S53m7vcL2xHR9RtjSh4eqSGfpY242V2ZPkyin/+tXaV
sRVOz33+gjN9s0WqzZvwpK+pyaREWwvZ8Mv9FLTK6hPctqfTtltiY93pm9YiIoF1
X+PHpA==
-----END CERTIFICATE-----
Generated at Wed Apr 16 18:20:36 2025 by rpki-client