Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/ECC3A2FA75716FA5208D65EF79B557641DFD7D18.cer
File:                     ECC3A2FA75716FA5208D65EF79B557641DFD7D18.cer (raw, json)
Hash identifier:          dNdiqOit6ctmtqYiuzhqZvbyWJhWDCkdtaotemwucQc=
Subject key identifier:   EC:C3:A2:FA:75:71:6F:A5:20:8D:65:EF:79:B5:57:64:1D:FD:7D:18
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       469041393E966F392932D2DE902487BFA2F2759F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CmnCbp8v7iDMurgVtADrM17wgTJuFiozSkksoxv54AjP/0/ECC3A2FA75716FA5208D65EF79B557641DFD7D18.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CmnCbp8v7iDMurgVtADrM17wgTJuFiozSkksoxv54AjP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 23 Feb 2025 04:24:21 +0000
Certificate not after:    Sun 22 Feb 2026 04:29:21 +0000
Subordinate resources:    AS: 28653
                          IP: 201.76.208.0/20
                          IP: 2804:790::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 04:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:90:41:39:3e:96:6f:39:29:32:d2:de:90:24:87:bf:a2:f2:75:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 23 04:24:21 2025 GMT
            Not After : Feb 22 04:29:21 2026 GMT
        Subject: CN=ECC3A2FA75716FA5208D65EF79B557641DFD7D18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f9:11:c6:01:9e:73:2f:a4:99:96:50:33:d0:
                    24:43:18:1d:37:35:a4:97:31:99:ea:f0:f9:96:57:
                    89:c7:de:7f:57:98:54:34:78:f1:9f:66:6d:1e:6a:
                    81:b4:6a:3f:d4:70:89:2b:e1:48:0b:d3:c0:f0:af:
                    51:0e:be:85:00:6f:fe:94:b6:86:06:6c:4c:6b:19:
                    60:b7:7b:38:12:38:3d:1a:e1:ec:44:30:86:89:5f:
                    88:30:14:bc:f4:b9:34:ca:fa:72:57:cb:81:c4:c5:
                    5f:24:9e:26:c1:79:87:ef:d0:d9:26:d8:c0:50:65:
                    6a:a2:42:b2:b6:57:36:e9:39:9b:ec:07:97:12:1d:
                    87:e8:b4:3e:86:14:2a:a4:b0:73:64:13:d0:a9:13:
                    f1:ce:80:49:49:cb:d2:45:d4:a5:9f:6b:b1:f6:bf:
                    91:c3:c8:9d:c0:f3:45:03:66:0c:4d:89:5b:22:5a:
                    a3:f4:16:89:6d:95:04:70:72:bb:69:73:4e:42:c9:
                    74:5a:a3:34:94:64:b4:50:7c:47:65:07:7c:72:ae:
                    71:e8:e4:7b:be:8d:ef:8b:84:8e:88:23:de:c3:56:
                    42:13:a1:40:bb:69:94:90:fa:e8:3d:2d:ed:a5:aa:
                    11:89:44:bb:a1:b4:ae:39:06:d5:67:f6:bf:cb:9d:
                    4d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EC:C3:A2:FA:75:71:6F:A5:20:8D:65:EF:79:B5:57:64:1D:FD:7D:18
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CmnCbp8v7iDMurgVtADrM17wgTJuFiozSkksoxv54AjP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CmnCbp8v7iDMurgVtADrM17wgTJuFiozSkksoxv54AjP/0/ECC3A2FA75716FA5208D65EF79B557641DFD7D18.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.76.208.0/20
                IPv6:
                  2804:790::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28653

    Signature Algorithm: sha256WithRSAEncryption
         2b:3a:9e:ed:dc:44:b1:a0:ff:aa:f7:1c:47:51:4b:37:e3:77:
         e0:69:80:da:ce:af:a4:e1:35:1f:67:b0:c5:e7:63:3e:3e:75:
         4c:d8:e1:fe:e1:60:70:fe:a9:bd:6b:f3:1f:58:92:ab:06:fb:
         48:83:eb:2c:69:24:56:43:05:7d:dd:94:88:36:3a:cc:f3:8a:
         42:b9:9c:4b:b1:b3:ae:ea:eb:cc:a0:28:5a:73:c2:54:82:f0:
         cb:7b:fc:f9:71:07:f1:fe:5d:98:52:07:b2:11:b5:7b:82:17:
         62:dd:d9:61:a1:9b:5b:41:ab:cc:f9:c1:4c:1d:d5:2e:b1:9c:
         19:8b:4e:c8:f1:34:65:2a:72:db:0a:a3:b5:c9:64:46:56:48:
         43:af:7a:49:c9:7d:26:aa:c0:1a:3b:5e:ea:06:61:e5:dd:ed:
         eb:62:6a:0a:44:84:6c:27:ed:c4:23:7e:f0:50:47:70:48:03:
         39:3a:e4:3b:ba:9a:f5:ed:44:f4:44:22:b3:b7:05:a9:4e:85:
         d8:95:a8:77:98:0c:8e:20:0e:dd:c3:ff:69:46:03:c4:a7:73:
         b3:61:05:fd:c8:9b:91:40:ee:d3:cd:38:07:d0:c2:e2:59:d0:
         8f:cc:17:0a:4b:6d:10:25:f2:4f:26:cc:c1:59:fc:fb:55:54:
         15:04:b7:1d
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIURpBBOT6WbzkpMtLekCSHv6LydZ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAyMjMwNDI0MjFaFw0yNjAyMjIwNDI5MjFaMDMxMTAvBgNV
BAMTKEVDQzNBMkZBNzU3MTZGQTUyMDhENjVFRjc5QjU1NzY0MURGRDdEMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW+RHGAZ5zL6SZllAz0CRDGB03
NaSXMZnq8PmWV4nH3n9XmFQ0ePGfZm0eaoG0aj/UcIkr4UgL08Dwr1EOvoUAb/6U
toYGbExrGWC3ezgSOD0a4exEMIaJX4gwFLz0uTTK+nJXy4HExV8knibBeYfv0Nkm
2MBQZWqiQrK2VzbpOZvsB5cSHYfotD6GFCqksHNkE9CpE/HOgElJy9JF1KWfa7H2
v5HDyJ3A80UDZgxNiVsiWqP0FoltlQRwcrtpc05CyXRaozSUZLRQfEdlB3xyrnHo
5Hu+je+LhI6II97DVkIToUC7aZSQ+ug9Le2lqhGJRLuhtK45BtVn9r/LnU2tAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTsw6L6dXFvpSCN
Ze95tVdkHf19GDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ21u
Q2JwOHY3aURNdXJnVnRBRHJNMTd3Z1RKdUZpb3pTa2tzb3h2NTRBalAvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Nt
bkNicDh2N2lETXVyZ1Z0QURyTTE3d2dUSnVGaW96U2trc294djU0QWpQLzAvRUND
M0EyRkE3NTcxNkZBNTIwOEQ2NUVGNzlCNTU3NjQxREZEN0QxOC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQEyUzQMA0EAgACMAcDBQAoBAeQMBkGCCsGAQUFBwEI
AQH/BAowCKAGMAQCAm/tMA0GCSqGSIb3DQEBCwUAA4IBAQArOp7t3ESxoP+q9xxH
UUs343fgaYDazq+k4TUfZ7DF52M+PnVM2OH+4WBw/qm9a/MfWJKrBvtIg+ssaSRW
QwV93ZSINjrM84pCuZxLsbOu6uvMoChac8JUgvDLe/z5cQfx/l2YUgeyEbV7ghdi
3dlhoZtbQavM+cFMHdUusZwZi07I8TRlKnLbCqO1yWRGVkhDr3pJyX0mqsAaO17q
BmHl3e3rYmoKRIRsJ+3EI37wUEdwSAM5OuQ7upr17UT0RCKztwWpToXYlah3mAyO
IA7dw/9pRgPEp3OzYQX9yJuRQO7TzTgH0MLiWdCPzBcKS20QJfJPJszBWfz7VVQV
BLcd
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:31:04 2025 by rpki-client