Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.cer
File:                     D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.cer (raw, json)
Hash identifier:          cyilC/OsGXN4M1GhOAQ7JU1rjW79akCRVm9BcyLzkLs=
Subject key identifier:   D0:7D:3E:AC:7D:60:CA:B7:BE:84:1A:F5:2F:E5:BD:3B:E7:8D:B2:11
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7627DCF9AE482C79D760CA0BCD74A4EE6A8F99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft
caRepository:             rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 02 Jun 2025 15:45:27 +0000
Certificate not after:    Mon 01 Jun 2026 15:50:27 +0000
Subordinate resources:    AS: 273755
                          IP: 2804:8bbc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 02:38:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:27:dc:f9:ae:48:2c:79:d7:60:ca:0b:cd:74:a4:ee:6a:8f:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  2 15:45:27 2025 GMT
            Not After : Jun  1 15:50:27 2026 GMT
        Subject: CN=D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e7:fc:f8:58:7c:dc:a9:83:02:e0:7a:7f:a9:
                    6a:e1:78:cf:3e:61:9e:b6:c8:b9:29:b0:03:cb:a6:
                    d3:2e:1a:c5:e8:4a:e0:66:5a:68:c3:4a:c3:e2:ca:
                    93:76:87:65:4f:39:bf:8d:1b:d5:04:36:9a:65:59:
                    2f:00:22:32:1d:bd:72:2f:8e:fa:85:c7:a1:1c:0d:
                    4a:6b:88:84:83:a1:e6:d8:48:b8:1b:e6:d9:68:c0:
                    a7:23:78:01:1d:a6:2d:7a:f2:c6:af:72:b4:8e:f6:
                    45:d0:ca:2a:1a:71:46:d3:d5:f7:0c:a3:21:e1:85:
                    5e:24:c0:2a:db:ba:5d:2b:66:42:b3:5a:51:e3:57:
                    dd:f2:9a:0c:3b:cc:bb:d2:3a:f5:34:2a:ce:51:71:
                    c8:56:d2:3a:1e:6a:70:12:a4:c6:bc:f3:21:9b:4c:
                    3a:e4:60:c5:c7:52:da:2e:a0:0a:36:eb:d5:ce:81:
                    4c:06:eb:15:d7:d6:3e:a3:96:24:06:6e:22:4e:74:
                    e2:51:17:85:3e:84:07:08:83:80:e0:0d:bb:cd:09:
                    15:dd:51:62:f5:dc:4c:39:58:97:d2:3f:4b:25:bf:
                    19:19:60:27:62:98:20:2c:54:75:f1:29:ff:ca:71:
                    39:87:f1:8a:d1:f7:a1:b4:14:c1:0d:0c:88:5b:2c:
                    28:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D0:7D:3E:AC:7D:60:CA:B7:BE:84:1A:F5:2F:E5:BD:3B:E7:8D:B2:11
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8bbc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273755

    Signature Algorithm: sha256WithRSAEncryption
         7d:45:cf:53:21:a1:46:a6:37:9e:3c:5b:a8:64:91:22:91:38:
         4d:a1:e1:c4:9b:bd:30:63:09:98:3c:85:25:5d:e6:84:96:87:
         cc:6c:8f:36:ab:ae:af:06:34:68:b6:a9:2f:34:a8:ca:ba:7b:
         90:28:6f:29:07:56:b3:b9:80:ce:73:4f:f0:99:40:c5:72:44:
         99:52:33:d7:10:d9:f0:3a:90:b1:d3:ae:1a:d3:f1:70:b6:e5:
         56:c0:39:d2:af:d4:e6:2e:41:76:98:80:34:1f:45:f1:9a:87:
         75:74:db:b7:d5:bd:6e:a5:90:b7:cc:13:02:4c:57:00:ba:41:
         fd:6e:c1:8a:30:35:d3:4b:07:d1:2b:3a:70:78:d8:0d:f5:30:
         13:6b:f4:a3:cb:51:ff:1a:8a:91:f4:2f:3f:bc:4f:bf:4f:94:
         13:84:f0:02:e7:0e:76:09:4f:16:14:1d:cf:a4:d1:cc:bc:37:
         61:87:d5:54:99:b0:bb:94:c3:87:e8:91:27:10:a8:ce:ee:c1:
         f4:0b:ec:0e:06:a3:5f:22:ac:4d:10:02:b3:62:08:4b:96:59:
         ce:54:44:02:9d:f0:89:52:80:a0:53:c0:7e:88:90:a6:55:c2:
         8b:d0:cb:1e:1e:65:66:21:1a:7f:a1:21:24:cd:c5:90:c0:3b:
         7e:67:8d:bf
-----BEGIN CERTIFICATE-----
MIIGITCCBQmgAwIBAgITdifc+a5ILHnXYMoLzXSk7mqPmTANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg2MDU0MzJFOUUxQjA1QTdFNkMyMDhCMjk0NkZEQzlDOTY3
Q0E4QTRCMB4XDTI1MDYwMjE1NDUyN1oXDTI2MDYwMTE1NTAyN1owMzExMC8GA1UE
AxMoRDA3RDNFQUM3RDYwQ0FCN0JFODQxQUY1MkZFNUJEM0JFNzhEQjIxMTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKbn/PhYfNypgwLgen+pauF4zz5h
nrbIuSmwA8um0y4axehK4GZaaMNKw+LKk3aHZU85v40b1QQ2mmVZLwAiMh29ci+O
+oXHoRwNSmuIhIOh5thIuBvm2WjApyN4AR2mLXryxq9ytI72RdDKKhpxRtPV9wyj
IeGFXiTAKtu6XStmQrNaUeNX3fKaDDvMu9I69TQqzlFxyFbSOh5qcBKkxrzzIZtM
OuRgxcdS2i6gCjbr1c6BTAbrFdfWPqOWJAZuIk504lEXhT6EBwiDgOANu80JFd1R
YvXcTDlYl9I/SyW/GRlgJ2KYICxUdfEp/8pxOYfxitH3obQUwQ0MiFssKEsCAwEA
AaOCAywwggMoMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFNB9Pqx9YMq3voQa
9S/lvTvnjbIRMB8GA1UdIwQYMBaAFGBUMunhsFp+bCCLKUb9yclnyopLMA4GA1Ud
DwEB/wQEAwIBBjBtBgNVHR8EZjBkMGKgYKBehlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS82MDU0MzJFOUUxQjA1QTdFNkMy
MDhCMjk0NkZEQzlDOTY3Q0E4QTRCLmNybDCBuQYIKwYBBQUHAQEEgawwgakwgaYG
CCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTE1MzFCMjRCRjUwQzQ2MUM3RjU3NENENjUyNjdBOEIwREMzMjVEQUFB
MTAwNzVGNjcxNjVCOThDNEY0RUZDMy8wLzYwNTQzMkU5RTFCMDVBN0U2QzIwOEIy
OTQ2RkRDOUM5NjdDQThBNEIuY2VyMIIBQAYIKwYBBQUHAQsEggEyMIIBLjBeBggr
BgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84Nmhr
aWVtaER3ZVAxTDFwa1A3OEx1QjJVVFRZZkU2cjNFWlBMYnczZlF4My8wLzCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vODZo
a2llbWhEd2VQMUwxcGtQNzhMdUIyVVRUWWZFNnIzRVpQTGJ3M2ZReDMvMC9EMDdE
M0VBQzdENjBDQUI3QkU4NDFBRjUyRkU1QkQzQkU3OERCMjExLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB
Af8EETAPMA0EAgACMAcDBQAoBIu8MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQt
WzANBgkqhkiG9w0BAQsFAAOCAQEAfUXPUyGhRqY3njxbqGSRIpE4TaHhxJu9MGMJ
mDyFJV3mhJaHzGyPNquurwY0aLapLzSoyrp7kChvKQdWs7mAznNP8JlAxXJEmVIz
1xDZ8DqQsdOuGtPxcLblVsA50q/U5i5BdpiANB9F8ZqHdXTbt9W9bqWQt8wTAkxX
ALpB/W7BijA100sH0Ss6cHjYDfUwE2v0o8tR/xqKkfQvP7xPv0+UE4TwAucOdglP
FhQdz6TRzLw3YYfVVJmwu5TDh+iRJxCozu7B9AvsDgajXyKsTRACs2IIS5ZZzlRE
Ap3wiVKAoFPAfoiQplXCi9DLHh5lZiEaf6EhJM3FkMA7fmeNvw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:06:00 2025 by rpki-client