Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/806FF8A43E84224DBCF7D799710E5EBBCAA7BF2C.cer
File:                     806FF8A43E84224DBCF7D799710E5EBBCAA7BF2C.cer (raw, json)
Hash identifier:          51hDqZjsqlM+YyfpTWqOOWsmnuna5Vnzs37BOfKx3g8=
Subject key identifier:   80:6F:F8:A4:3E:84:22:4D:BC:F7:D7:99:71:0E:5E:BB:CA:A7:BF:2C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7F6CCDB7FB6C35ED702C638279E3CFB0B6023A9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8Vo9qfJQbnU4kkQQTQiGtrESgfjpd2H1qdzR9GCyMjWb/0/806FF8A43E84224DBCF7D799710E5EBBCAA7BF2C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8Vo9qfJQbnU4kkQQTQiGtrESgfjpd2H1qdzR9GCyMjWb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 15 Apr 2025 19:11:41 +0000
Certificate not after:    Tue 14 Apr 2026 19:16:41 +0000
Subordinate resources:    AS: 267635
                          IP: 45.70.96.0/22
                          IP: 2804:447c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 22:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:6c:cd:b7:fb:6c:35:ed:70:2c:63:82:79:e3:cf:b0:b6:02:3a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 15 19:11:41 2025 GMT
            Not After : Apr 14 19:16:41 2026 GMT
        Subject: CN=806FF8A43E84224DBCF7D799710E5EBBCAA7BF2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:19:ee:40:50:93:17:c4:04:89:48:74:3f:1c:
                    88:43:23:23:2c:6e:73:b8:79:77:22:c1:d0:50:31:
                    58:36:0f:ed:3c:38:22:57:8f:ac:ae:62:65:4c:f3:
                    b1:ec:5a:f1:51:dc:29:65:60:27:4f:d4:62:9b:59:
                    8b:b1:90:cf:fa:b5:b5:7c:5e:f9:5f:74:53:70:5c:
                    e3:c8:db:ac:3b:ac:14:3c:66:9b:17:d3:06:e6:b5:
                    67:9e:3f:86:e8:9d:34:64:e8:9e:c9:43:56:56:84:
                    7a:d4:57:dd:25:3c:ec:f4:86:dc:62:fd:a7:63:47:
                    ae:05:7c:55:91:da:e3:ef:08:c0:63:d0:14:33:0c:
                    b2:e7:e2:55:da:c7:0c:91:97:5e:03:8b:99:43:9d:
                    da:dc:ef:16:43:37:00:70:48:a0:46:fb:1e:bd:5b:
                    8d:2e:18:8f:f5:54:a2:f2:d9:b9:bb:ad:c6:fc:35:
                    61:1d:9b:02:e6:fd:ec:0f:0e:36:88:64:f8:9e:41:
                    35:ac:aa:e7:9c:09:0a:84:7e:5c:31:4a:46:7a:ef:
                    55:6b:4f:82:3a:96:13:ec:68:ea:0b:88:44:c2:29:
                    79:7e:05:55:db:d4:38:16:3b:f0:5a:dd:b2:d5:19:
                    e0:ba:87:94:90:ca:c7:c7:f7:76:a1:75:b8:9a:d5:
                    0c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                80:6F:F8:A4:3E:84:22:4D:BC:F7:D7:99:71:0E:5E:BB:CA:A7:BF:2C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Vo9qfJQbnU4kkQQTQiGtrESgfjpd2H1qdzR9GCyMjWb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Vo9qfJQbnU4kkQQTQiGtrESgfjpd2H1qdzR9GCyMjWb/0/806FF8A43E84224DBCF7D799710E5EBBCAA7BF2C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.96.0/22
                IPv6:
                  2804:447c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267635

    Signature Algorithm: sha256WithRSAEncryption
         ce:be:f8:d3:fb:b0:d9:27:c8:68:ac:95:dd:fb:f3:bc:00:6a:
         d5:70:ac:0e:42:a2:d3:e2:de:b6:2e:a5:51:57:ed:fb:3d:6f:
         d0:f5:ab:85:0e:7e:25:83:c8:87:85:cc:6e:9e:4a:68:30:10:
         fb:a3:81:fc:b1:29:7c:6e:59:78:17:4d:e1:15:fa:8a:ed:88:
         ac:f6:d2:bf:b1:21:c0:bc:74:61:42:19:b7:c9:72:6d:dd:3e:
         d7:1d:ff:06:c6:d1:e5:6e:51:f8:32:f1:1a:80:c8:a8:de:e7:
         63:61:96:8c:59:c9:7a:43:d6:c6:86:14:59:f9:86:75:81:28:
         fd:39:f1:11:1a:e6:a9:12:ba:09:dc:02:d4:db:b3:9c:d5:7f:
         33:d6:4c:e9:4f:d2:c3:16:0f:c3:8c:1b:c9:33:d8:c6:09:76:
         4e:8e:97:3a:f0:9b:7c:6e:c1:db:03:3b:6c:16:b0:db:85:fd:
         da:d4:c3:dc:aa:46:d3:f8:f8:35:3b:f0:6c:a2:e9:19:37:11:
         00:d3:1b:a0:cf:1c:78:c5:8e:41:21:5b:cf:73:04:d7:44:1d:
         e4:66:8e:9c:e2:51:72:07:64:ff:25:b3:e7:12:6f:d1:be:dc:
         ad:c4:5f:af:d2:d1:7b:46:df:bf:53:8e:79:96:20:17:70:3c:
         e6:c0:05:fa
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUf2zNt/tsNe1wLGOCeePPsLYCOpswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA0MTUxOTExNDFaFw0yNjA0MTQxOTE2NDFaMDMxMTAvBgNV
BAMTKDgwNkZGOEE0M0U4NDIyNERCQ0Y3RDc5OTcxMEU1RUJCQ0FBN0JGMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzGe5AUJMXxASJSHQ/HIhDIyMs
bnO4eXciwdBQMVg2D+08OCJXj6yuYmVM87HsWvFR3CllYCdP1GKbWYuxkM/6tbV8
XvlfdFNwXOPI26w7rBQ8ZpsX0wbmtWeeP4bonTRk6J7JQ1ZWhHrUV90lPOz0htxi
/adjR64FfFWR2uPvCMBj0BQzDLLn4lXaxwyRl14Di5lDndrc7xZDNwBwSKBG+x69
W40uGI/1VKLy2bm7rcb8NWEdmwLm/ewPDjaIZPieQTWsquecCQqEflwxSkZ671Vr
T4I6lhPsaOoLiETCKXl+BVXb1DgWO/Ba3bLVGeC6h5SQysfH93ahdbia1QyrAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSAb/ikPoQiTbz3
15lxDl67yqe/LDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOFZv
OXFmSlFiblU0a2tRUVRRaUd0ckVTZ2ZqcGQySDFxZHpSOUdDeU1qV2IvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhW
bzlxZkpRYm5VNGtrUVFUUWlHdHJFU2dmanBkMkgxcWR6UjlHQ3lNaldiLzAvODA2
RkY4QTQzRTg0MjI0REJDRjdENzk5NzEwRTVFQkJDQUE3QkYyQy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLUZgMA0EAgACMAcDBQAoBER8MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQVczANBgkqhkiG9w0BAQsFAAOCAQEAzr740/uw2SfIaKyV
3fvzvABq1XCsDkKi0+Leti6lUVft+z1v0PWrhQ5+JYPIh4XMbp5KaDAQ+6OB/LEp
fG5ZeBdN4RX6iu2IrPbSv7EhwLx0YUIZt8lybd0+1x3/BsbR5W5R+DLxGoDIqN7n
Y2GWjFnJekPWxoYUWfmGdYEo/TnxERrmqRK6CdwC1NuznNV/M9ZM6U/SwxYPw4wb
yTPYxgl2To6XOvCbfG7B2wM7bBaw24X92tTD3KpG0/j4NTvwbKLpGTcRANMboM8c
eMWOQSFbz3ME10Qd5GaOnOJRcgdk/yWz5xJv0b7crcRfr9LRe0bfv1OOeZYgF3A8
5sAF+g==
-----END CERTIFICATE-----
Generated at Sat Apr 26 22:58:32 2025 by rpki-client