Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E658FE87DF0EC05FB5A0C9011B6372F3B3FBFA26.cer
File:                     E658FE87DF0EC05FB5A0C9011B6372F3B3FBFA26.cer (raw, json)
Hash identifier:          SGd5prtJD0VzQa+VgOZOS6MAswKifVBLfLWBGPCUEm8=
Subject key identifier:   E6:58:FE:87:DF:0E:C0:5F:B5:A0:C9:01:1B:63:72:F3:B3:FB:FA:26
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3DF492ED5AAC63D210771879606C096D5BBE5381
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/E658FE87DF0EC05FB5A0C9011B6372F3B3FBFA26.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 28 Jan 2025 13:42:35 +0000
Certificate not after:    Tue 27 Jan 2026 13:47:35 +0000
Subordinate resources:    AS: 264241
                          IP: 138.118.4.0/22
                          IP: 168.196.8.0/22
                          IP: 2804:24c4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:f4:92:ed:5a:ac:63:d2:10:77:18:79:60:6c:09:6d:5b:be:53:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 28 13:42:35 2025 GMT
            Not After : Jan 27 13:47:35 2026 GMT
        Subject: CN=E658FE87DF0EC05FB5A0C9011B6372F3B3FBFA26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:34:b6:12:85:9e:20:ea:07:fe:d5:b5:23:49:
                    fd:95:12:c2:e8:08:7b:35:64:9e:ea:ff:75:2b:34:
                    66:11:e6:56:8c:0c:be:a4:3a:2b:34:1b:00:72:7c:
                    b1:08:ac:86:11:71:5c:bf:1e:ea:48:72:e2:61:64:
                    2d:3d:7a:f3:dc:7f:1e:77:eb:1e:67:4b:27:03:2e:
                    b8:62:17:35:f8:0e:fd:eb:83:0b:f0:7e:fa:97:f3:
                    71:e0:33:4e:15:50:4a:01:06:00:52:2a:2b:83:08:
                    e3:04:9a:94:92:c2:64:10:51:f7:a4:25:77:79:51:
                    3a:f2:a4:c8:66:87:4a:cb:41:38:98:46:1b:3a:92:
                    40:07:de:5a:bc:c2:3a:8c:be:54:af:40:b6:3c:af:
                    1c:bc:e5:ab:8a:91:70:65:ae:d5:9c:d8:b5:50:c5:
                    fc:3b:b5:b0:0c:9c:74:8a:4f:a6:65:a0:33:4c:e1:
                    49:59:5d:06:f9:cd:54:12:59:ba:8a:b4:93:cd:3e:
                    d9:e9:dd:c9:f6:54:73:37:f1:cc:7f:45:8c:22:ef:
                    a4:1b:60:ad:af:eb:21:99:3c:97:13:8d:86:53:5e:
                    cf:5f:25:49:b2:24:10:7d:74:d1:12:d9:4b:ed:a8:
                    12:80:9e:25:1b:3a:11:92:f2:79:8b:91:40:a1:92:
                    65:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E6:58:FE:87:DF:0E:C0:5F:B5:A0:C9:01:1B:63:72:F3:B3:FB:FA:26
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/E658FE87DF0EC05FB5A0C9011B6372F3B3FBFA26.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.4.0/22
                  168.196.8.0/22
                IPv6:
                  2804:24c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264241

    Signature Algorithm: sha256WithRSAEncryption
         1e:f3:88:85:99:d6:e3:91:7d:0b:9c:97:02:cf:c8:c6:35:c3:
         44:0d:d0:30:f2:df:39:04:c4:81:84:df:69:7c:18:9a:e5:76:
         dd:f4:0f:c8:22:68:73:f6:b6:35:c0:0a:27:23:dc:9e:c0:5c:
         03:24:78:e1:b4:dc:8f:5d:c7:bf:5a:17:20:2b:a6:74:78:08:
         f0:cd:35:9b:f6:db:59:f2:88:9c:fd:b8:9d:5e:eb:37:79:e6:
         ef:4c:d8:a3:ac:ae:9b:6a:69:47:77:03:df:f8:a6:0f:76:e1:
         84:0a:ae:ef:2d:7e:f3:57:72:df:14:ca:04:4f:43:dd:fb:7f:
         6b:2d:f5:d0:a4:a1:95:eb:0d:b2:99:b6:4a:df:f7:6a:cb:34:
         04:32:cd:bb:73:41:a4:ff:4c:6f:1a:e3:32:8b:2e:dc:58:8a:
         6c:6e:f9:70:d2:8c:0f:e9:cd:d7:5a:a2:c9:97:81:ac:4b:5a:
         a6:6a:4b:67:4a:e8:90:4a:e1:77:d9:0a:97:fd:92:69:e6:6e:
         18:23:ea:aa:44:9c:10:18:9d:6d:3a:94:5a:1a:29:ac:5e:34:
         ca:66:c7:fe:f6:a3:f3:00:fb:50:c9:a3:19:20:5f:ea:90:d7:
         f9:82:dc:de:2f:c0:63:c2:07:c2:d9:75:f4:cd:32:94:38:3e:
         ff:ee:fa:02
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUPfSS7VqsY9IQdxh5YGwJbVu+U4EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAxMjgxMzQyMzVaFw0yNjAxMjcxMzQ3MzVaMDMxMTAvBgNV
BAMTKEU2NThGRTg3REYwRUMwNUZCNUEwQzkwMTFCNjM3MkYzQjNGQkZBMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUNLYShZ4g6gf+1bUjSf2VEsLo
CHs1ZJ7q/3UrNGYR5laMDL6kOis0GwByfLEIrIYRcVy/HupIcuJhZC09evPcfx53
6x5nSycDLrhiFzX4Dv3rgwvwfvqX83HgM04VUEoBBgBSKiuDCOMEmpSSwmQQUfek
JXd5UTrypMhmh0rLQTiYRhs6kkAH3lq8wjqMvlSvQLY8rxy85auKkXBlrtWc2LVQ
xfw7tbAMnHSKT6ZloDNM4UlZXQb5zVQSWbqKtJPNPtnp3cn2VHM38cx/RYwi76Qb
YK2v6yGZPJcTjYZTXs9fJUmyJBB9dNES2UvtqBKAniUbOhGS8nmLkUChkmVJAgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTmWP6H3w7AX7Wg
yQEbY3Lzs/v6JjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN0E0
UDYzYjkyUkJHVmNrRXQ5eE16UmVZWEdtSlN1V0NSSnVGck5uSHdvMzcvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdB
NFA2M2I5MlJCR1Zja0V0OXhNelJlWVhHbUpTdVdDUkp1RnJObkh3bzM3LzAvRTY1
OEZFODdERjBFQzA1RkI1QTBDOTAxMUI2MzcyRjNCM0ZCRkEyNi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQCinYEAwQCqMQIMA0EAgACMAcDBQAoBCTEMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwQIMTANBgkqhkiG9w0BAQsFAAOCAQEAHvOIhZnW
45F9C5yXAs/IxjXDRA3QMPLfOQTEgYTfaXwYmuV23fQPyCJoc/a2NcAKJyPcnsBc
AyR44bTcj13Hv1oXICumdHgI8M01m/bbWfKInP24nV7rN3nm70zYo6yum2ppR3cD
3/imD3bhhAqu7y1+81dy3xTKBE9D3ft/ay310KShlesNspm2St/3ass0BDLNu3NB
pP9MbxrjMosu3FiKbG75cNKMD+nN11qiyZeBrEtapmpLZ0rokErhd9kKl/2SaeZu
GCPqqkScEBidbTqUWhoprF40ymbH/vaj8wD7UMmjGSBf6pDX+YLc3i/AY8IHwtl1
9M0ylDg+/+76Ag==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:59:24 2025 by rpki-client