Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E1F724D25672BFA30941906405DCC099740BF6B5.cer
File:                     E1F724D25672BFA30941906405DCC099740BF6B5.cer (raw, json)
Hash identifier:          rbtoA2uINAPsv96XSaZrvVpVF+/7TYRtcMsmyMfpscQ=
Subject key identifier:   E1:F7:24:D2:56:72:BF:A3:09:41:90:64:05:DC:C0:99:74:0B:F6:B5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       61CBDD962CDCA5B3743B820EF894AB5C0DDF6C9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CyxYUxCGZZTusZXig6xReewDRdipn3LEECEFaYg5Zhsv/0/E1F724D25672BFA30941906405DCC099740BF6B5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CyxYUxCGZZTusZXig6xReewDRdipn3LEECEFaYg5Zhsv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 30 Jan 2025 16:17:17 +0000
Certificate not after:    Thu 29 Jan 2026 16:22:17 +0000
Subordinate resources:    AS: 268617
                          IP: 45.164.132.0/22
                          IP: 2804:53f0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 16:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:cb:dd:96:2c:dc:a5:b3:74:3b:82:0e:f8:94:ab:5c:0d:df:6c:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 30 16:17:17 2025 GMT
            Not After : Jan 29 16:22:17 2026 GMT
        Subject: CN=E1F724D25672BFA30941906405DCC099740BF6B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3b:1e:55:ec:73:e2:a4:8a:84:20:38:e5:07:
                    a9:7e:7d:88:b6:d4:5e:af:13:6a:e6:0e:af:44:86:
                    95:bf:8b:b9:55:2b:c8:28:de:35:a1:94:07:df:d9:
                    75:46:bf:ca:76:24:02:96:ab:0a:65:3a:2f:fc:34:
                    dd:3e:22:d8:01:f2:ca:4b:86:82:ca:59:0a:43:5f:
                    7b:42:06:4b:eb:7e:d5:65:c7:f1:4f:e7:ed:14:43:
                    2f:74:4c:3b:ad:24:3d:2f:bf:3f:b9:65:b6:b8:56:
                    ec:dd:11:df:2f:6d:38:83:a8:34:6e:32:7a:14:e9:
                    d8:2d:5a:5c:16:23:f4:e2:d5:16:d5:3e:0d:b3:af:
                    44:eb:39:28:0d:5b:93:16:63:f6:83:35:9a:1b:17:
                    63:dd:8e:69:a9:6e:73:f2:aa:44:28:38:2e:10:19:
                    14:30:68:ea:d1:17:b6:e3:01:8e:0c:c3:05:87:30:
                    cc:c4:02:a1:eb:44:23:08:b7:67:48:6f:a1:9f:fb:
                    a2:22:0d:92:63:0f:59:da:71:bd:d4:73:c6:a7:33:
                    b3:83:e9:21:06:61:53:ea:de:8c:03:01:c2:9c:ff:
                    b1:d6:25:32:e8:95:dd:19:56:db:80:ab:7e:b0:6d:
                    3f:6f:85:a7:9b:85:f3:9c:1b:47:de:0d:f2:62:f0:
                    15:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E1:F7:24:D2:56:72:BF:A3:09:41:90:64:05:DC:C0:99:74:0B:F6:B5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CyxYUxCGZZTusZXig6xReewDRdipn3LEECEFaYg5Zhsv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CyxYUxCGZZTusZXig6xReewDRdipn3LEECEFaYg5Zhsv/0/E1F724D25672BFA30941906405DCC099740BF6B5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.132.0/22
                IPv6:
                  2804:53f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268617

    Signature Algorithm: sha256WithRSAEncryption
         0f:e9:dc:4e:38:f9:f0:f6:f0:00:5a:06:99:a0:25:a1:fb:3f:
         6c:c3:96:b7:56:b5:70:01:99:b4:00:d3:c4:ec:d4:42:1b:8b:
         6c:f4:74:62:d5:1f:65:6b:55:97:58:cc:42:bb:aa:5f:55:92:
         da:a7:95:59:2e:c3:e0:ed:b8:87:2e:4a:14:3b:4f:9c:93:b0:
         78:14:a8:bd:4b:e3:57:82:ed:61:1a:85:00:be:55:c6:fd:7c:
         54:46:2f:22:9d:b7:30:7f:8b:d9:d0:38:62:c7:63:dd:71:5a:
         9e:b8:78:e3:cd:d1:b0:18:48:6d:5f:29:1e:8f:85:47:fb:36:
         d9:fb:f0:29:cc:94:2a:15:17:a4:86:d6:71:5f:a2:2e:90:11:
         a7:45:6c:61:2f:11:21:78:64:57:d0:ff:ae:6c:d7:bd:70:ac:
         73:16:6d:e6:ab:2d:36:ec:0e:33:a7:86:33:d1:83:70:b4:1f:
         77:27:8c:96:34:b8:ba:61:eb:5b:40:02:4d:ab:89:f6:ca:fa:
         07:a0:86:a7:7d:26:5b:93:14:41:fa:af:65:04:68:b1:49:ef:
         01:53:44:0d:90:cf:9d:4d:c4:bb:c0:a0:56:2c:6f:b7:7c:a2:
         81:3a:29:96:75:84:c5:f6:98:fa:0d:dd:e3:9a:b4:0d:cd:5d:
         af:a3:72:45
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUYcvdlizcpbN0O4IO+JSrXA3fbJswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAxMzAxNjE3MTdaFw0yNjAxMjkxNjIyMTdaMDMxMTAvBgNV
BAMTKEUxRjcyNEQyNTY3MkJGQTMwOTQxOTA2NDA1RENDMDk5NzQwQkY2QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYOx5V7HPipIqEIDjlB6l+fYi2
1F6vE2rmDq9EhpW/i7lVK8go3jWhlAff2XVGv8p2JAKWqwplOi/8NN0+ItgB8spL
hoLKWQpDX3tCBkvrftVlx/FP5+0UQy90TDutJD0vvz+5Zba4VuzdEd8vbTiDqDRu
MnoU6dgtWlwWI/Ti1RbVPg2zr0TrOSgNW5MWY/aDNZobF2PdjmmpbnPyqkQoOC4Q
GRQwaOrRF7bjAY4MwwWHMMzEAqHrRCMIt2dIb6Gf+6IiDZJjD1nacb3Uc8anM7OD
6SEGYVPq3owDAcKc/7HWJTLold0ZVtuAq36wbT9vhaebhfOcG0feDfJi8BWxAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTh9yTSVnK/owlB
kGQF3MCZdAv2tTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ3l4
WVV4Q0daWlR1c1pYaWc2eFJlZXdEUmRpcG4zTEVFQ0VGYVlnNVpoc3YvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0N5
eFlVeENHWlpUdXNaWGlnNnhSZWV3RFJkaXBuM0xFRUNFRmFZZzVaaHN2LzAvRTFG
NzI0RDI1NjcyQkZBMzA5NDE5MDY0MDVEQ0MwOTk3NDBCRjZCNS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLaSEMA0EAgACMAcDBQAoBFPwMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQZSTANBgkqhkiG9w0BAQsFAAOCAQEAD+ncTjj58PbwAFoG
maAlofs/bMOWt1a1cAGZtADTxOzUQhuLbPR0YtUfZWtVl1jMQruqX1WS2qeVWS7D
4O24hy5KFDtPnJOweBSovUvjV4LtYRqFAL5Vxv18VEYvIp23MH+L2dA4Ysdj3XFa
nrh4483RsBhIbV8pHo+FR/s22fvwKcyUKhUXpIbWcV+iLpARp0VsYS8RIXhkV9D/
rmzXvXCscxZt5qstNuwOM6eGM9GDcLQfdyeMljS4umHrW0ACTauJ9sr6B6CGp30m
W5MUQfqvZQRosUnvAVNEDZDPnU3Eu8CgVixvt3yigToplnWExfaY+g3d45q0Dc1d
r6NyRQ==
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:28:11 2025 by rpki-client