Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.cer
File:                     C336C65AA0BA33C626FAB0B9C26E026EB908454A.cer (raw, json)
Hash identifier:          4sc2j/c4SQhc/32a0m9dW5O7ZxD7bKdoMuMAl56eKl4=
Subject key identifier:   C3:36:C6:5A:A0:BA:33:C6:26:FA:B0:B9:C2:6E:02:6E:B9:08:45:4A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6AE2C3EF9D8AB61340D6107967E170B62DC465FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 22:31:44 +0000
Certificate not after:    Thu 05 Mar 2026 22:36:44 +0000
Subordinate resources:    AS: 61834
                          IP: 143.137.180.0/22
                          IP: 201.150.152.0/22
                          IP: 2804:1a10::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Apr 2025 14:59:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:e2:c3:ef:9d:8a:b6:13:40:d6:10:79:67:e1:70:b6:2d:c4:65:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 22:31:44 2025 GMT
            Not After : Mar  5 22:36:44 2026 GMT
        Subject: CN=C336C65AA0BA33C626FAB0B9C26E026EB908454A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b9:67:16:c0:d3:b9:5a:21:4e:57:85:83:3b:
                    b8:ca:1e:ab:24:d1:d7:02:59:fe:46:bc:99:7a:36:
                    21:a1:13:ee:31:9d:09:85:a6:5f:f9:3e:21:34:72:
                    6b:ce:50:95:f4:ef:46:94:f7:c9:ce:5b:49:47:4d:
                    fa:93:ee:e2:fc:d9:5b:88:33:f3:b2:0d:00:bd:ca:
                    2f:d6:5a:90:d0:fe:05:6c:9e:92:16:f2:80:02:73:
                    b7:f2:3c:5b:5c:5c:5c:b5:17:6c:10:72:88:a8:23:
                    30:6d:17:a8:85:93:56:36:c8:5f:7c:91:1f:25:7b:
                    96:3d:11:8d:0d:57:aa:bf:e7:d6:76:bf:ce:e0:be:
                    99:9c:17:64:96:b3:6c:23:89:a7:80:e4:dd:e8:7d:
                    3b:d8:55:1d:d4:b2:e1:20:85:c7:4e:0c:5f:63:90:
                    e9:71:28:62:43:ee:48:e2:62:39:c8:f3:9c:61:66:
                    1d:8a:62:a6:c7:b4:53:30:24:b4:39:af:ac:f4:57:
                    61:cd:00:f6:5d:c3:6a:1c:51:ce:62:39:74:b1:a6:
                    b9:f5:e6:61:70:91:41:dd:91:04:f4:ef:d0:80:80:
                    73:e6:d2:ff:24:46:17:fe:35:70:d6:92:fd:c6:bb:
                    2f:14:51:15:e7:1c:6d:fd:d0:63:09:81:b5:4f:86:
                    1d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C3:36:C6:5A:A0:BA:33:C6:26:FA:B0:B9:C2:6E:02:6E:B9:08:45:4A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.180.0/22
                  201.150.152.0/22
                IPv6:
                  2804:1a10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61834

    Signature Algorithm: sha256WithRSAEncryption
         59:83:bb:7f:09:e0:93:86:19:b0:18:04:36:c7:6e:03:72:4b:
         0e:d7:73:8d:1f:28:d9:05:d5:3a:c0:34:fb:2f:da:a4:9a:bd:
         07:8b:33:9a:9c:bc:df:90:66:c2:ad:4a:cf:b2:ed:f7:e0:0f:
         86:35:60:e9:85:6d:b2:81:f1:1f:b6:7f:c4:71:35:2d:21:04:
         2c:bb:94:3a:08:2d:e2:af:df:77:a8:d0:64:67:05:df:3c:19:
         77:1a:99:c7:40:3c:e2:00:38:e6:cc:c1:cd:55:2b:93:17:6e:
         7a:f0:1a:c5:03:b6:1a:75:d7:1e:a8:c7:f1:24:53:7c:81:0b:
         23:08:ee:fa:af:5b:35:5b:74:bd:02:ce:0c:0f:17:8b:4a:a5:
         a8:c5:d7:ff:63:db:27:e1:41:22:ee:5a:dc:42:9d:5a:d7:11:
         63:7f:fd:39:77:52:d0:9c:e9:1a:fd:b0:35:13:5d:c5:1d:75:
         c8:f1:71:96:07:79:4e:a3:af:81:0f:d4:27:b8:be:0d:db:e4:
         18:72:15:17:83:65:28:6a:54:a1:1e:c7:4b:98:13:7b:d9:85:
         c8:02:ba:43:02:c9:fb:08:c3:f2:2c:1a:4b:1e:40:36:83:4e:
         a6:2d:59:f5:04:07:63:a9:c5:b3:94:36:8a:ff:a9:3e:46:53:
         1f:53:5c:f9
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUauLD752KthNA1hB5Z+Fwti3EZf8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDYyMjMxNDRaFw0yNjAzMDUyMjM2NDRaMDMxMTAvBgNV
BAMTKEMzMzZDNjVBQTBCQTMzQzYyNkZBQjBCOUMyNkUwMjZFQjkwODQ1NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeuWcWwNO5WiFOV4WDO7jKHqsk
0dcCWf5GvJl6NiGhE+4xnQmFpl/5PiE0cmvOUJX070aU98nOW0lHTfqT7uL82VuI
M/OyDQC9yi/WWpDQ/gVsnpIW8oACc7fyPFtcXFy1F2wQcoioIzBtF6iFk1Y2yF98
kR8le5Y9EY0NV6q/59Z2v87gvpmcF2SWs2wjiaeA5N3ofTvYVR3UsuEghcdODF9j
kOlxKGJD7kjiYjnI85xhZh2KYqbHtFMwJLQ5r6z0V2HNAPZdw2ocUc5iOXSxprn1
5mFwkUHdkQT079CAgHPm0v8kRhf+NXDWkv3Guy8UURXnHG390GMJgbVPhh2vAgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTDNsZaoLozxib6
sLnCbgJuuQhFSjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNHBI
QjFOV25iZVdBaEJLS1VvZFJrcDFVejFacjVQVDJBSlV4a21BMzFqb2svMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRw
SEIxTlduYmVXQWhCS0tVb2RSa3AxVXoxWnI1UFQyQUpVeGttQTMxam9rLzEvQzMz
NkM2NUFBMEJBMzNDNjI2RkFCMEI5QzI2RTAyNkVCOTA4NDU0QS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQCj4m0AwQCyZaYMA0EAgACMAcDBQAoBBoQMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwDxijANBgkqhkiG9w0BAQsFAAOCAQEAWYO7fwng
k4YZsBgENsduA3JLDtdzjR8o2QXVOsA0+y/apJq9B4szmpy835Bmwq1Kz7Lt9+AP
hjVg6YVtsoHxH7Z/xHE1LSEELLuUOggt4q/fd6jQZGcF3zwZdxqZx0A84gA45szB
zVUrkxduevAaxQO2GnXXHqjH8SRTfIELIwju+q9bNVt0vQLODA8Xi0qlqMXX/2Pb
J+FBIu5a3EKdWtcRY3/9OXdS0JzpGv2wNRNdxR11yPFxlgd5TqOvgQ/UJ7i+Ddvk
GHIVF4NlKGpUoR7HS5gTe9mFyAK6QwLJ+wjD8iwaSx5ANoNOpi1Z9QQHY6nFs5Q2
iv+pPkZTH1Nc+Q==
-----END CERTIFICATE-----
Generated at Fri Apr 4 01:35:06 2025 by rpki-client