Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032.cer
File:                     0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032.cer (raw, json)
Hash identifier:          zs3BJg3PzcdGmbip8+2k5b4zI8Yqq0mPC0huls/0VIo=
Subject key identifier:   0D:6B:BD:FF:03:C5:B7:F2:CF:FA:AA:56:24:D6:A8:B3:A6:5F:30:32
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5FBE6EB1BA0DACDA3B3094D82FBA17E3D3171253
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 30 Apr 2025 18:14:13 +0000
Certificate not after:    Wed 29 Apr 2026 18:19:13 +0000
Subordinate resources:    AS: 269024
                          IP: 45.178.100.0/22
                          IP: 2804:5e4c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 17:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:be:6e:b1:ba:0d:ac:da:3b:30:94:d8:2f:ba:17:e3:d3:17:12:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 30 18:14:13 2025 GMT
            Not After : Apr 29 18:19:13 2026 GMT
        Subject: CN=0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e2:c2:83:18:57:b5:41:e0:13:c7:d4:c7:4b:
                    90:00:a2:b3:a4:e8:71:51:cf:61:40:d7:a8:59:6a:
                    a1:b7:9f:ef:e2:cf:4e:d8:f7:db:48:27:12:27:f1:
                    eb:a8:61:07:de:85:29:19:9c:88:5b:79:dc:69:75:
                    d5:8f:6e:be:21:d2:2f:0f:9a:89:81:a7:23:a9:0e:
                    05:f6:77:44:46:c5:cc:83:92:83:c5:68:b9:7c:29:
                    4f:1f:42:59:e1:a3:e5:5a:4d:ab:26:c4:b8:64:f7:
                    7a:b7:1e:a4:95:43:a6:ef:85:da:d2:62:fc:c6:d5:
                    2b:ec:d5:d6:f3:48:a5:5a:b6:b4:64:24:15:fa:9b:
                    10:ce:7b:e8:ad:e7:b6:43:32:10:cc:d0:12:b7:c8:
                    62:f3:de:54:62:d9:9a:bf:91:e2:f3:77:7d:b8:39:
                    de:a5:d2:ec:68:fe:a3:55:96:38:e6:3e:ed:6e:7f:
                    48:97:a4:b6:f3:74:f0:47:28:62:a2:da:09:69:3c:
                    38:cd:01:14:06:6a:f3:8c:5c:57:42:91:be:6c:0f:
                    d9:49:e5:cc:b1:a6:a6:9a:80:8c:26:28:16:f0:74:
                    ec:bd:1f:4d:64:0e:ce:4b:4a:31:47:aa:5e:4d:bf:
                    c5:da:5c:67:10:fa:3a:fb:2d:b4:b2:17:02:7c:22:
                    10:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0D:6B:BD:FF:03:C5:B7:F2:CF:FA:AA:56:24:D6:A8:B3:A6:5F:30:32
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.100.0/22
                IPv6:
                  2804:5e4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269024

    Signature Algorithm: sha256WithRSAEncryption
         42:df:59:db:15:59:c8:79:84:05:3c:ef:29:e6:98:bb:06:97:
         e7:48:e3:ca:9c:f5:47:0f:1d:67:ee:32:9d:70:cc:ce:4a:f7:
         b9:44:47:c1:4f:55:bd:cd:4d:ba:87:82:e1:06:4e:18:11:a7:
         8c:36:9a:c1:67:08:1e:89:cf:17:33:d9:82:cb:c5:1b:be:a3:
         f7:bc:1e:c2:dd:32:34:2f:95:cc:a4:23:46:02:6f:71:31:ce:
         7e:0b:ee:d7:87:28:40:3f:29:4b:34:28:65:cf:92:28:31:3f:
         09:cc:0f:dc:35:99:03:58:08:41:fd:d4:c7:ac:95:4f:62:b7:
         e8:9d:6f:48:3f:ab:5b:b7:9b:6a:a5:24:a4:df:d9:57:82:0a:
         bd:db:ee:43:9a:5c:cb:4d:a5:31:ff:3a:03:50:dc:35:8d:de:
         52:58:54:dd:c0:85:7a:67:e0:b1:90:e0:c0:3f:78:ce:61:e9:
         fd:a8:5c:fb:74:dd:63:8c:a4:71:59:80:b3:30:82:26:30:83:
         30:13:06:7f:40:2f:be:7b:69:75:26:09:a8:81:38:e0:0d:a8:
         7f:8f:a0:95:60:32:63:2e:51:48:ec:4b:21:ba:eb:33:8e:2a:
         78:e9:26:43:48:58:58:8d:67:26:90:81:28:fb:d9:2e:0e:d4:
         24:d3:f3:ed
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUX75usboNrNo7MJTYL7oX49MXElMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA0MzAxODE0MTNaFw0yNjA0MjkxODE5MTNaMDMxMTAvBgNV
BAMTKDBENkJCREZGMDNDNUI3RjJDRkZBQUE1NjI0RDZBOEIzQTY1RjMwMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd4sKDGFe1QeATx9THS5AAorOk
6HFRz2FA16hZaqG3n+/iz07Y99tIJxIn8euoYQfehSkZnIhbedxpddWPbr4h0i8P
momBpyOpDgX2d0RGxcyDkoPFaLl8KU8fQlnho+VaTasmxLhk93q3HqSVQ6bvhdrS
YvzG1Svs1dbzSKVatrRkJBX6mxDOe+it57ZDMhDM0BK3yGLz3lRi2Zq/keLzd324
Od6l0uxo/qNVljjmPu1uf0iXpLbzdPBHKGKi2glpPDjNARQGavOMXFdCkb5sD9lJ
5cyxpqaagIwmKBbwdOy9H01kDs5LSjFHql5Nv8XaXGcQ+jr7LbSyFwJ8IhBtAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQNa73/A8W38s/6
qlYk1qizpl8wMjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOENj
SHNIUlZ3M241MWJIZ051M1lxYzdQNFdGTFM4bVk1NExYYVV2a1lEZFovMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhD
Y0hzSFJWdzNuNTFiSGdOdTNZcWM3UDRXRkxTOG1ZNTRMWGFVdmtZRGRaLzAvMEQ2
QkJERkYwM0M1QjdGMkNGRkFBQTU2MjRENkE4QjNBNjVGMzAzMi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLbJkMA0EAgACMAcDBQAoBF5MMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQa4DANBgkqhkiG9w0BAQsFAAOCAQEAQt9Z2xVZyHmEBTzv
KeaYuwaX50jjypz1Rw8dZ+4ynXDMzkr3uURHwU9Vvc1NuoeC4QZOGBGnjDaawWcI
HonPFzPZgsvFG76j97wewt0yNC+VzKQjRgJvcTHOfgvu14coQD8pSzQoZc+SKDE/
CcwP3DWZA1gIQf3Ux6yVT2K36J1vSD+rW7ebaqUkpN/ZV4IKvdvuQ5pcy02lMf86
A1DcNY3eUlhU3cCFemfgsZDgwD94zmHp/ahc+3TdY4ykcVmAszCCJjCDMBMGf0Av
vntpdSYJqIE44A2of4+glWAyYy5RSOxLIbrrM44qeOkmQ0hYWI1nJpCBKPvZLg7U
JNPz7Q==
-----END CERTIFICATE-----
Generated at Fri May 2 17:44:28 2025 by rpki-client