Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer
File:                     11E1019D6E7D72E9421F53039B1444A69155D242.cer (raw, json)
Hash identifier:          RAMi0L7IYrj0bak5h8i9NCadGFiLUVzcpMFma+mRHhE=
Subject key identifier:   11:E1:01:9D:6E:7D:72:E9:42:1F:53:03:9B:14:44:A6:91:55:D2:42
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6B2DF88982C48D7FF9BA82DD2C992E088FB199A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.mft
caRepository:             rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 16 Jun 2025 19:53:33 +0000
Certificate not after:    Mon 15 Jun 2026 19:58:33 +0000
Subordinate resources:    AS: 263292
                          IP: 45.166.84.0/22
                          IP: 170.78.20.0/22
                          IP: 170.150.80.0/22
                          IP: 177.71.92.0/22
                          IP: 177.85.44.0/22
                          IP: 189.126.40.0/21
                          IP: 2804:1690::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 20:08:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:2d:f8:89:82:c4:8d:7f:f9:ba:82:dd:2c:99:2e:08:8f:b1:99:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 16 19:53:33 2025 GMT
            Not After : Jun 15 19:58:33 2026 GMT
        Subject: CN=11E1019D6E7D72E9421F53039B1444A69155D242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9f:c7:8e:f3:c4:ff:01:b0:cf:da:4d:a8:5b:
                    67:63:7e:74:b0:67:5e:8d:53:c0:49:49:16:25:0b:
                    8f:cc:94:60:c6:ba:bb:de:e0:fc:b4:25:03:4b:27:
                    9d:71:45:1f:25:ed:74:ad:cc:3a:fb:ff:38:85:d8:
                    b0:85:c5:d9:6b:d1:57:96:e7:b0:bb:10:3f:4f:ec:
                    2c:f0:f5:f6:55:e2:91:6f:05:41:af:52:94:12:e8:
                    cd:20:98:db:f0:58:65:e9:69:a9:a9:99:e2:c7:ec:
                    31:f0:04:2a:51:a2:e4:a8:23:9f:33:db:b3:f9:93:
                    36:7d:90:c7:50:6d:19:24:96:21:fb:32:81:48:34:
                    7a:e5:97:dc:e6:7d:2f:f5:d2:60:d9:89:97:d2:de:
                    ef:85:3e:65:c1:21:d2:0c:3d:6e:a9:23:f6:56:b2:
                    fa:f5:a8:69:8a:c6:6a:53:80:1a:55:62:cb:0e:e3:
                    e2:af:a1:16:2a:92:15:ff:0b:e9:51:7d:b7:3f:19:
                    a1:ee:6f:6d:d0:8d:71:c3:da:bd:22:b8:ad:88:42:
                    d9:3b:66:e6:33:26:58:5b:8f:1a:b8:1e:31:07:4b:
                    ef:78:98:e3:3e:9f:28:2c:b2:db:bb:9d:f3:34:e2:
                    23:1e:10:7b:77:1d:3a:54:dd:98:b0:cb:f8:ce:3f:
                    fd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                11:E1:01:9D:6E:7D:72:E9:42:1F:53:03:9B:14:44:A6:91:55:D2:42
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.84.0/22
                  170.78.20.0/22
                  170.150.80.0/22
                  177.71.92.0/22
                  177.85.44.0/22
                  189.126.40.0/21
                IPv6:
                  2804:1690::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263292

    Signature Algorithm: sha256WithRSAEncryption
         97:4a:75:77:51:26:7e:9f:eb:21:3b:fd:75:fc:e2:e7:48:ad:
         35:49:37:cb:26:ac:f4:ff:37:5b:cd:6f:1c:95:4b:19:e5:d4:
         4b:7f:74:de:7b:8f:4b:33:e3:ef:b7:35:71:4d:d7:c2:26:4d:
         33:8a:e6:63:bc:c9:4a:f7:5e:46:72:d1:b6:c3:02:cb:b0:70:
         20:e4:aa:61:8b:c6:87:6a:d5:34:76:9c:a8:68:48:1e:fa:32:
         f6:78:56:0c:3f:21:7a:a9:78:f1:e7:1f:98:92:5f:27:e5:5c:
         d4:ac:a7:ab:a2:8a:1f:ce:96:16:72:8c:58:a2:30:cd:16:42:
         94:90:6b:66:52:a3:08:1b:66:84:77:d6:a2:0d:e1:00:12:ac:
         e3:c5:00:d7:ba:8d:96:7d:8c:a7:61:1b:db:bd:4f:7a:34:2f:
         e4:24:fb:3e:17:78:6a:dd:a3:e2:f4:6c:89:4a:f2:4d:d7:a2:
         11:48:e6:1b:5c:20:ca:b6:15:c1:21:e3:ae:98:12:ae:d4:63:
         7d:6f:f4:72:f1:cf:6b:9a:54:00:91:d0:10:19:6f:e6:26:78:
         ee:86:67:07:c6:bc:52:64:95:24:8a:4b:96:3e:57:8c:33:d2:
         83:18:90:f3:35:bd:80:ac:db:85:7b:e7:37:77:45:3f:8c:34:
         ba:d3:ac:d8
-----BEGIN CERTIFICATE-----
MIIGTDCCBTSgAwIBAgIUay34iYLEjX/5uoLdLJkuCI+xmaMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA2MTYxOTUzMzNaFw0yNjA2MTUxOTU4MzNaMDMxMTAvBgNV
BAMTKDExRTEwMTlENkU3RDcyRTk0MjFGNTMwMzlCMTQ0NEE2OTE1NUQyNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpn8eO88T/AbDP2k2oW2djfnSw
Z16NU8BJSRYlC4/MlGDGurve4Py0JQNLJ51xRR8l7XStzDr7/ziF2LCFxdlr0VeW
57C7ED9P7Czw9fZV4pFvBUGvUpQS6M0gmNvwWGXpaampmeLH7DHwBCpRouSoI58z
27P5kzZ9kMdQbRkkliH7MoFINHrll9zmfS/10mDZiZfS3u+FPmXBIdIMPW6pI/ZW
svr1qGmKxmpTgBpVYssO4+KvoRYqkhX/C+lRfbc/GaHub23QjXHD2r0iuK2IQtk7
ZuYzJlhbjxq4HjEHS+94mOM+nygsstu7nfM04iMeEHt3HTpU3Ziwy/jOP/1dAgMB
AAGjggNWMIIDUjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQR4QGdbn1y6UIf
UwObFESmkVXSQjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vYnFp
cGZqVEZyVkdQU0d6bTFQcUZzZXRManI2WFhXUEVjVVhrc2JkVnp3Ri8wLzCBiQYI
KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vYnFp
cGZqVEZyVkdQU0d6bTFQcUZzZXRManI2WFhXUEVjVVhrc2JkVnp3Ri8wLzExRTEw
MTlENkU3RDcyRTk0MjFGNTMwMzlCMTQ0NEE2OTE1NUQyNDIubWZ0MD8GCCsGAQUF
BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh
dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBMBggrBgEFBQcBBwEB
/wQ9MDswKgQCAAEwJAMEAi2mVAMEAqpOFAMEAqqWUAMEArFHXAMEArFVLAMEA71+
KDANBAIAAjAHAwUAKAQWkDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEBHwwDQYJ
KoZIhvcNAQELBQADggEBAJdKdXdRJn6f6yE7/XX84udIrTVJN8smrPT/N1vNbxyV
Sxnl1Et/dN57j0sz4++3NXFN18ImTTOK5mO8yUr3XkZy0bbDAsuwcCDkqmGLxodq
1TR2nKhoSB76MvZ4Vgw/IXqpePHnH5iSXyflXNSsp6uiih/OlhZyjFiiMM0WQpSQ
a2ZSowgbZoR31qIN4QASrOPFANe6jZZ9jKdhG9u9T3o0L+Qk+z4XeGrdo+L0bIlK
8k3XohFI5htcIMq2FcEh466YEq7UY31v9HLxz2uaVACR0BAZb+YmeO6GZwfGvFJk
lSSKS5Y+V4wz0oMYkPM1vYCs24V75zd3RT+MNLrTrNg=
-----END CERTIFICATE-----
Generated at Thu Jun 19 20:57:41 2025 by rpki-client