Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D6592886C2264A6296BF445F0FA4EF8CF71BB049.cer
File:                     D6592886C2264A6296BF445F0FA4EF8CF71BB049.cer (raw, json)
Hash identifier:          mtH+mg2rN6Y/0Jf42T3WVWkHv+Xt8P3NOuDzfROuaR8=
Subject key identifier:   D6:59:28:86:C2:26:4A:62:96:BF:44:5F:0F:A4:EF:8C:F7:1B:B0:49
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5F5E8E4B2DE52B3D8892F87D35F03C4226A1A31F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5tMbZuqVvLqzsUbt5hpkTU7R7s2j79XtEcGouBeLMGv3/1/D6592886C2264A6296BF445F0FA4EF8CF71BB049.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5tMbZuqVvLqzsUbt5hpkTU7R7s2j79XtEcGouBeLMGv3/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 16:46:53 +0000
Certificate not after:    Fri 06 Mar 2026 16:51:53 +0000
Subordinate resources:    AS: 271272
                          IP: 190.113.240.0/22
                          IP: 2804:78e4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:5e:8e:4b:2d:e5:2b:3d:88:92:f8:7d:35:f0:3c:42:26:a1:a3:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 16:46:53 2025 GMT
            Not After : Mar  6 16:51:53 2026 GMT
        Subject: CN=D6592886C2264A6296BF445F0FA4EF8CF71BB049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:dc:b9:27:fa:ea:22:70:f3:63:58:12:e0:c0:
                    76:fc:e0:47:0a:85:a0:80:ab:0d:81:da:dc:8f:1d:
                    a7:2b:e1:6c:50:97:35:59:69:b7:ed:06:d9:15:0a:
                    4f:db:4e:d2:a2:f6:02:26:b1:bc:8e:11:55:8b:46:
                    af:6b:2d:0c:e9:43:f8:24:81:cb:56:d3:e2:ff:d0:
                    0a:91:b8:02:86:c9:2e:76:8a:76:65:5d:4c:dc:9f:
                    94:71:98:23:6c:cd:56:49:b9:e9:a6:b3:aa:5e:ec:
                    6b:b3:e5:3c:87:e4:bd:0a:b7:e1:6a:cb:9c:6c:10:
                    69:4f:f2:6c:ef:8b:0c:ce:65:bc:69:66:64:bd:05:
                    7e:63:08:81:c4:08:33:45:03:6a:9d:f0:07:9d:94:
                    2e:d3:f2:af:b4:f2:36:37:f7:01:c2:2f:f3:04:17:
                    29:92:9a:fd:39:df:28:7a:76:cf:f5:85:b5:4f:04:
                    61:eb:0e:7c:58:f5:1d:8d:a9:21:ca:34:9f:bd:6e:
                    a3:0d:b2:30:af:02:d6:dc:09:00:cc:ac:60:1e:d0:
                    45:32:5d:f0:1d:67:bb:7c:d4:51:09:89:96:26:ca:
                    70:22:be:d1:c7:f2:ca:19:78:35:9a:ae:c9:ec:74:
                    d4:03:88:6e:77:fd:73:2e:b6:59:23:4a:f2:d3:5c:
                    b0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D6:59:28:86:C2:26:4A:62:96:BF:44:5F:0F:A4:EF:8C:F7:1B:B0:49
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5tMbZuqVvLqzsUbt5hpkTU7R7s2j79XtEcGouBeLMGv3/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5tMbZuqVvLqzsUbt5hpkTU7R7s2j79XtEcGouBeLMGv3/1/D6592886C2264A6296BF445F0FA4EF8CF71BB049.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.240.0/22
                IPv6:
                  2804:78e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271272

    Signature Algorithm: sha256WithRSAEncryption
         32:14:a1:14:99:f7:e9:46:9c:f6:7f:79:cf:6a:24:0e:7c:ae:
         95:8b:15:08:28:8c:99:ed:7b:9e:ff:45:f7:78:91:20:35:1a:
         13:3d:cf:4b:c7:7c:56:2c:3e:3c:86:c4:33:bb:51:44:9d:7d:
         4c:67:ac:e7:44:77:02:e1:15:36:e2:f4:e2:fb:17:e1:68:56:
         ba:00:81:eb:0f:4a:2a:4e:ef:ea:47:52:1f:f1:43:c5:4b:f5:
         32:2b:60:c3:b8:bf:0c:28:07:0c:c9:e5:fd:9b:39:33:2e:66:
         93:d2:d2:12:96:3d:c6:4f:c6:20:4e:6a:18:84:40:ed:b9:e5:
         97:52:69:06:2e:1c:19:83:15:ad:5c:a6:c7:ea:c9:c3:42:64:
         5d:33:9e:95:b4:0f:bc:6d:66:d5:82:b9:e4:8d:57:1d:41:48:
         41:1b:b3:59:c7:7f:dc:d7:b2:28:e1:9d:a4:e9:ce:e6:34:64:
         49:10:76:13:04:b7:a8:a5:f8:59:a7:cb:1a:f0:94:dd:90:e1:
         9a:29:6f:48:df:ad:83:c5:49:02:58:f8:3d:92:2f:60:b2:4e:
         6f:f6:c8:a2:56:15:13:b3:a4:73:b4:33:2d:db:35:73:77:79:
         4b:06:93:e4:22:d0:36:6e:e8:5b:f3:83:14:b8:a1:05:5d:36:
         70:8e:1b:0d
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUX16OSy3lKz2Ikvh9NfA8Qiahox8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDcxNjQ2NTNaFw0yNjAzMDYxNjUxNTNaMDMxMTAvBgNV
BAMTKEQ2NTkyODg2QzIyNjRBNjI5NkJGNDQ1RjBGQTRFRjhDRjcxQkIwNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi3Lkn+uoicPNjWBLgwHb84EcK
haCAqw2B2tyPHacr4WxQlzVZabftBtkVCk/bTtKi9gImsbyOEVWLRq9rLQzpQ/gk
gctW0+L/0AqRuAKGyS52inZlXUzcn5RxmCNszVZJuemms6pe7Guz5TyH5L0Kt+Fq
y5xsEGlP8mzviwzOZbxpZmS9BX5jCIHECDNFA2qd8AedlC7T8q+08jY39wHCL/ME
FymSmv053yh6ds/1hbVPBGHrDnxY9R2NqSHKNJ+9bqMNsjCvAtbcCQDMrGAe0EUy
XfAdZ7t81FEJiZYmynAivtHH8soZeDWarsnsdNQDiG53/XMutlkjSvLTXLARAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTWWSiGwiZKYpa/
RF8PpO+M9xuwSTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNXRN
Ylp1cVZ2THF6c1VidDVocGtUVTdSN3Myajc5WHRFY0dvdUJlTE1HdjMvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzV0
TWJadXFWdkxxenNVYnQ1aHBrVFU3UjdzMmo3OVh0RWNHb3VCZUxNR3YzLzEvRDY1
OTI4ODZDMjI2NEE2Mjk2QkY0NDVGMEZBNEVGOENGNzFCQjA0OS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCvnHwMA0EAgACMAcDBQAoBHjkMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQjqDANBgkqhkiG9w0BAQsFAAOCAQEAMhShFJn36Uac9n95
z2okDnyulYsVCCiMme17nv9F93iRIDUaEz3PS8d8Viw+PIbEM7tRRJ19TGes50R3
AuEVNuL04vsX4WhWugCB6w9KKk7v6kdSH/FDxUv1Mitgw7i/DCgHDMnl/Zs5My5m
k9LSEpY9xk/GIE5qGIRA7bnll1JpBi4cGYMVrVymx+rJw0JkXTOelbQPvG1m1YK5
5I1XHUFIQRuzWcd/3NeyKOGdpOnO5jRkSRB2EwS3qKX4WafLGvCU3ZDhmilvSN+t
g8VJAlj4PZIvYLJOb/bIolYVE7Okc7QzLds1c3d5SwaT5CLQNm7oW/ODFLihBV02
cI4bDQ==
-----END CERTIFICATE-----
Generated at Thu Apr 10 01:27:25 2025 by rpki-client