Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.cer
File:                     D79E6FA1BCB46B68863FF39B03FDADF551198EEC.cer (raw, json)
Hash identifier:          ZqVRzGxLxKZiWRWC5ASwut6x125rbMF0rYGZFNcUBOI=
Subject key identifier:   D7:9E:6F:A1:BC:B4:6B:68:86:3F:F3:9B:03:FD:AD:F5:51:19:8E:EC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       63524A549A9BB2679AAB5AA2E50C61B2D4FF4F33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 14 Dec 2024 14:33:07 +0000
Certificate not after:    Sat 13 Dec 2025 14:38:07 +0000
Subordinate resources:    AS: 271072
                          IP: 179.48.100.0/22
                          IP: 2804:75d4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 02:36:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:52:4a:54:9a:9b:b2:67:9a:ab:5a:a2:e5:0c:61:b2:d4:ff:4f:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 14 14:33:07 2024 GMT
            Not After : Dec 13 14:38:07 2025 GMT
        Subject: CN=D79E6FA1BCB46B68863FF39B03FDADF551198EEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8f:06:b7:85:4a:34:19:2e:8e:f2:50:3c:44:
                    c9:0f:95:5a:b8:46:79:48:02:c2:a7:b6:4f:10:b2:
                    4b:25:c5:99:1c:89:69:cf:1e:37:38:f4:66:a4:6a:
                    55:d8:08:e0:32:08:09:02:56:e8:fe:b3:ad:3b:64:
                    9d:30:f0:05:8b:13:67:ea:37:3c:29:12:1f:97:40:
                    cb:4e:fd:25:ec:e6:67:d4:fb:0f:6a:13:e5:14:42:
                    a2:ea:5f:d8:dc:af:a9:a3:f1:77:23:5f:7e:8d:b7:
                    99:f1:cf:12:56:a8:1c:fc:f1:ed:0a:6e:3b:57:bb:
                    9d:0d:28:aa:ae:8a:bb:df:9c:59:e2:58:e7:33:2c:
                    0d:f6:03:b3:ac:0c:a3:9e:3f:75:58:8c:82:aa:b8:
                    e8:3e:87:8d:d7:59:77:8e:55:a8:d9:78:4e:f0:9c:
                    da:c2:e7:0b:c9:54:6a:94:73:d4:b6:58:e6:26:23:
                    cf:83:7a:fb:06:9b:49:32:7d:15:2a:b7:ff:25:ca:
                    e9:2f:ef:3c:47:c3:d5:27:20:e2:cb:ba:b4:8a:4b:
                    cf:13:8b:8e:26:00:25:91:97:0d:6b:79:b9:19:87:
                    d4:f1:c8:48:d7:fa:87:71:b3:4b:b8:90:6e:27:a6:
                    65:bd:a5:22:5a:76:55:e9:d3:c3:c4:73:44:20:3b:
                    78:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D7:9E:6F:A1:BC:B4:6B:68:86:3F:F3:9B:03:FD:AD:F5:51:19:8E:EC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.100.0/22
                IPv6:
                  2804:75d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271072

    Signature Algorithm: sha256WithRSAEncryption
         b1:1f:b4:11:0f:0a:e0:b9:0b:e7:19:de:40:85:09:81:c0:e3:
         d5:1f:c8:0d:b6:5f:44:50:bc:75:79:5d:1f:7f:5b:c3:e8:0e:
         ab:3d:ba:ff:08:7d:e4:56:dc:2f:78:38:cc:19:82:73:e7:12:
         4c:19:db:4f:a8:2e:25:18:23:db:d6:12:ed:36:f7:58:80:1c:
         d8:41:fb:7d:84:4d:71:39:64:3c:f0:7c:29:54:96:2f:b4:fa:
         0e:2f:bc:e9:04:31:0c:b0:36:11:6b:54:c4:8a:7f:86:9a:f1:
         cd:77:09:90:83:8c:53:0c:72:e5:df:4e:78:85:c4:0d:1f:69:
         82:7f:8b:42:3a:3f:46:ef:90:b5:81:a7:68:16:91:a9:40:98:
         6f:74:cf:b8:49:62:ac:74:38:7c:52:5d:67:a5:2d:7c:6f:09:
         35:27:72:a8:71:69:65:0a:2b:6f:20:c7:2f:76:29:77:40:1e:
         5b:b7:22:53:8c:21:53:1f:4d:e8:57:04:2a:8b:2c:f8:2c:2e:
         fd:7e:73:3f:9b:e7:c9:da:7f:a6:91:d9:c2:13:38:04:7a:39:
         ac:30:2e:2c:5a:ed:c7:6c:60:5b:fc:25:b0:a7:f8:e9:95:c5:
         24:05:a0:44:21:07:7c:ce:fd:f8:31:4a:94:63:ed:74:4a:04:
         ff:0d:26:f4
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUY1JKVJqbsmeaq1qi5QxhstT/TzMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDEyMTQxNDMzMDdaFw0yNTEyMTMxNDM4MDdaMDMxMTAvBgNV
BAMTKEQ3OUU2RkExQkNCNDZCNjg4NjNGRjM5QjAzRkRBREY1NTExOThFRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFjwa3hUo0GS6O8lA8RMkPlVq4
RnlIAsKntk8QskslxZkciWnPHjc49GakalXYCOAyCAkCVuj+s607ZJ0w8AWLE2fq
NzwpEh+XQMtO/SXs5mfU+w9qE+UUQqLqX9jcr6mj8XcjX36Nt5nxzxJWqBz88e0K
bjtXu50NKKquirvfnFniWOczLA32A7OsDKOeP3VYjIKquOg+h43XWXeOVajZeE7w
nNrC5wvJVGqUc9S2WOYmI8+DevsGm0kyfRUqt/8lyukv7zxHw9UnIOLLurSKS88T
i44mACWRlw1rebkZh9TxyEjX+odxs0u4kG4npmW9pSJadlXp08PEc0QgO3ilAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTXnm+hvLRraIY/
85sD/a31URmO7DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMmZE
RlFZUVRUekt0aGlqNjZ5V3FIM0tydnBQWWJ6ZXhUMWl4dGN4eDNKTHIvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJm
REZRWVFUVHpLdGhpajY2eVdxSDNLcnZwUFliemV4VDFpeHRjeHgzSkxyLzAvRDc5
RTZGQTFCQ0I0NkI2ODg2M0ZGMzlCMDNGREFERjU1MTE5OEVFQy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCszBkMA0EAgACMAcDBQAoBHXUMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQi4DANBgkqhkiG9w0BAQsFAAOCAQEAsR+0EQ8K4LkL5xne
QIUJgcDj1R/IDbZfRFC8dXldH39bw+gOqz26/wh95FbcL3g4zBmCc+cSTBnbT6gu
JRgj29YS7Tb3WIAc2EH7fYRNcTlkPPB8KVSWL7T6Di+86QQxDLA2EWtUxIp/hprx
zXcJkIOMUwxy5d9OeIXEDR9pgn+LQjo/Ru+QtYGnaBaRqUCYb3TPuElirHQ4fFJd
Z6UtfG8JNSdyqHFpZQorbyDHL3Ypd0AeW7ciU4whUx9N6FcEKoss+Cwu/X5zP5vn
ydp/ppHZwhM4BHo5rDAuLFrtx2xgW/wlsKf46ZXFJAWgRCEHfM79+DFKlGPtdEoE
/w0m9A==
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:38:57 2025 by rpki-client