Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7D33CD8DF615911266433E77A191AE3004E30BD3.cer
File:                     7D33CD8DF615911266433E77A191AE3004E30BD3.cer (raw, json)
Hash identifier:          8uOcMRE3CDyHmKm7rLeDEuQyMmr1H++NhUBDwuYgU68=
Subject key identifier:   7D:33:CD:8D:F6:15:91:12:66:43:3E:77:A1:91:AE:30:04:E3:0B:D3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       749CD23033D33E849371D66397A99355DD668F95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/7D33CD8DF615911266433E77A191AE3004E30BD3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 30 Apr 2025 18:54:55 +0000
Certificate not after:    Wed 29 Apr 2026 18:59:55 +0000
Subordinate resources:    AS: 271624
                          IP: 177.73.128.0/22
                          IP: 2804:7e70::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 13:43:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:9c:d2:30:33:d3:3e:84:93:71:d6:63:97:a9:93:55:dd:66:8f:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 30 18:54:55 2025 GMT
            Not After : Apr 29 18:59:55 2026 GMT
        Subject: CN=7D33CD8DF615911266433E77A191AE3004E30BD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3a:14:7d:92:b6:85:18:5b:ab:98:b7:d9:11:
                    73:f7:57:f0:67:cc:aa:5e:70:7a:bf:04:07:55:ca:
                    43:2a:41:3e:55:d5:b3:23:95:6f:ff:ba:69:fe:71:
                    89:cf:e4:62:5d:10:55:8f:bb:9e:3f:99:13:23:75:
                    07:d2:65:3e:5b:e2:44:db:b6:7e:97:f1:57:5f:93:
                    7d:7b:e5:58:b7:ea:19:35:58:b0:e8:60:c6:46:96:
                    f5:51:cb:b6:0d:6a:9b:67:98:c2:35:f4:32:50:f4:
                    2d:05:16:9e:c3:c7:99:74:27:da:81:d6:22:57:e9:
                    2f:8e:5c:ff:9a:1e:d4:d0:c7:f8:ed:ba:7e:7e:64:
                    b7:9c:2b:db:6f:44:af:4e:7d:6e:d3:64:6b:dd:d4:
                    96:ea:96:da:2e:34:fd:cd:09:58:f2:17:8a:5f:47:
                    04:0f:d9:97:90:50:21:e1:01:c9:f5:23:10:20:6a:
                    0f:32:51:e0:9c:b9:00:e3:ce:ff:4a:ea:aa:bd:3d:
                    52:2f:c6:f7:e7:b0:cd:d5:91:0b:0f:94:5a:b4:e1:
                    09:50:d5:02:df:97:96:4d:e6:f7:54:f5:dc:73:10:
                    07:fa:e6:03:96:d9:44:6a:1c:06:f9:0d:1c:d4:a8:
                    49:a5:6c:f6:cf:4c:02:99:18:c4:18:09:b1:3e:34:
                    4a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7D:33:CD:8D:F6:15:91:12:66:43:3E:77:A1:91:AE:30:04:E3:0B:D3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/7D33CD8DF615911266433E77A191AE3004E30BD3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.128.0/22
                IPv6:
                  2804:7e70::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271624

    Signature Algorithm: sha256WithRSAEncryption
         cf:bc:01:5c:ae:6a:7a:d6:f8:01:55:c9:86:89:4d:14:13:bc:
         36:46:c3:03:f4:23:23:a1:e9:9f:97:dc:8b:31:98:57:7f:9a:
         94:98:f6:48:61:6d:20:94:f2:c3:68:5d:05:9c:92:ba:36:58:
         bb:36:ef:0d:ca:af:a3:9f:ea:31:3f:d0:9b:7a:64:6a:09:78:
         d6:b8:c1:09:73:56:79:9a:47:2a:f3:3a:c1:78:17:b9:3f:87:
         51:c9:a9:e3:db:f3:98:12:33:9b:3a:ca:29:45:0f:cd:fe:9b:
         e1:06:d9:90:72:b1:95:8f:6b:27:63:19:c2:55:52:5a:07:bb:
         ef:55:02:56:d1:9a:ef:3f:7f:91:1f:8c:c4:21:34:2b:44:ab:
         14:cf:ac:c7:0e:09:cc:4b:ca:84:4b:8a:70:02:e4:d5:ab:62:
         6a:c2:18:df:77:25:23:ff:46:10:bb:dc:73:2e:8f:a3:3b:78:
         bc:0b:ae:2c:c4:19:1e:8b:98:d0:76:52:e3:dd:8a:b5:d0:e0:
         02:2f:47:d5:e5:63:03:ad:16:0f:9d:06:69:df:2d:01:0e:f7:
         10:47:5b:46:b7:0c:06:e7:8b:d9:01:21:91:5d:99:ef:fa:09:
         e6:8f:71:da:1f:f9:80:03:0c:5e:ea:55:5e:b2:12:39:7d:ab:
         e0:89:9a:13
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUdJzSMDPTPoSTcdZjl6mTVd1mj5UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA0MzAxODU0NTVaFw0yNjA0MjkxODU5NTVaMDMxMTAvBgNV
BAMTKDdEMzNDRDhERjYxNTkxMTI2NjQzM0U3N0ExOTFBRTMwMDRFMzBCRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPOhR9kraFGFurmLfZEXP3V/Bn
zKpecHq/BAdVykMqQT5V1bMjlW//umn+cYnP5GJdEFWPu54/mRMjdQfSZT5b4kTb
tn6X8Vdfk3175Vi36hk1WLDoYMZGlvVRy7YNaptnmMI19DJQ9C0FFp7Dx5l0J9qB
1iJX6S+OXP+aHtTQx/jtun5+ZLecK9tvRK9OfW7TZGvd1JbqltouNP3NCVjyF4pf
RwQP2ZeQUCHhAcn1IxAgag8yUeCcuQDjzv9K6qq9PVIvxvfnsM3VkQsPlFq04QlQ
1QLfl5ZN5vdU9dxzEAf65gOW2URqHAb5DRzUqEmlbPbPTAKZGMQYCbE+NEqxAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR9M82N9hWREmZD
Pnehka4wBOML0zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXJu
SlJXZ2MyY3E1QTdxcndMTFBXSlVxSlBmVTI5bUJKektqMjVxWHJpN3IvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vy
bkpSV2djMmNxNUE3cXJ3TExQV0pVcUpQZlUyOW1CSnpLajI1cVhyaTdyLzAvN0Qz
M0NEOERGNjE1OTExMjY2NDMzRTc3QTE5MUFFMzAwNEUzMEJEMy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCsUmAMA0EAgACMAcDBQAoBH5wMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQlCDANBgkqhkiG9w0BAQsFAAOCAQEAz7wBXK5qetb4AVXJ
holNFBO8NkbDA/QjI6Hpn5fcizGYV3+alJj2SGFtIJTyw2hdBZySujZYuzbvDcqv
o5/qMT/Qm3pkagl41rjBCXNWeZpHKvM6wXgXuT+HUcmp49vzmBIzmzrKKUUPzf6b
4QbZkHKxlY9rJ2MZwlVSWge771UCVtGa7z9/kR+MxCE0K0SrFM+sxw4JzEvKhEuK
cALk1atiasIY33clI/9GELvccy6Pozt4vAuuLMQZHouY0HZS492KtdDgAi9H1eVj
A60WD50Gad8tAQ73EEdbRrcMBueL2QEhkV2Z7/oJ5o9x2h/5gAMMXupVXrISOX2r
4ImaEw==
-----END CERTIFICATE-----
Generated at Fri May 2 15:02:34 2025 by rpki-client