Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AD9F8701AC14D16BF452FF59281EDDC4BD3DE167.cer
File:                     AD9F8701AC14D16BF452FF59281EDDC4BD3DE167.cer (raw, json)
Hash identifier:          ijeE319+HBrdR7WckF1f3Mju679c9oO0C8jkWUfEaZI=
Subject key identifier:   AD:9F:87:01:AC:14:D1:6B:F4:52:FF:59:28:1E:DD:C4:BD:3D:E1:67
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7A1EA1CB2FBD425B7E66E68FF4BE60E3561AE7EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7UQEtnVS9QEZF1X7Hgv4FihvSv3KK25vcban59QXyL7t/0/AD9F8701AC14D16BF452FF59281EDDC4BD3DE167.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7UQEtnVS9QEZF1X7Hgv4FihvSv3KK25vcban59QXyL7t/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 May 2025 22:34:02 +0000
Certificate not after:    Fri 15 May 2026 22:39:02 +0000
Subordinate resources:    AS: 267381
                          IP: 45.235.24.0/22
                          IP: 2804:4ca0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 16 Jun 2025 05:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:1e:a1:cb:2f:bd:42:5b:7e:66:e6:8f:f4:be:60:e3:56:1a:e7:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 16 22:34:02 2025 GMT
            Not After : May 15 22:39:02 2026 GMT
        Subject: CN=AD9F8701AC14D16BF452FF59281EDDC4BD3DE167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2c:94:c5:a0:3f:0a:7f:12:dd:37:c4:01:52:
                    dc:b1:a3:02:b5:ea:42:1f:a2:d6:bd:6e:76:ed:76:
                    94:56:15:d8:3c:e5:a5:2e:00:46:f3:49:04:51:4c:
                    60:54:e8:d0:82:14:6b:84:a2:3e:33:78:65:55:de:
                    50:8f:17:37:7f:52:9d:a9:fe:2f:6f:9c:58:3e:5b:
                    63:93:8c:dc:1e:ad:cd:ec:54:9c:29:fa:af:47:31:
                    c8:33:d7:64:64:f5:ee:8b:51:7c:78:38:b5:9f:c9:
                    3d:91:63:30:3f:2e:08:20:2f:d8:75:a8:10:7e:e0:
                    0e:0e:27:4f:c0:06:f8:3b:3b:47:67:47:40:26:94:
                    94:26:e0:d4:56:97:70:2f:bc:66:47:1e:e9:99:c8:
                    e7:a8:35:52:77:77:33:54:4f:da:38:44:95:13:8d:
                    bb:8e:bc:b4:cc:d4:4c:b5:87:01:40:76:fc:7c:6a:
                    1e:a6:2d:fc:b3:1b:44:38:1b:37:73:a9:58:10:e5:
                    98:71:7e:5e:24:46:c4:07:9d:1c:fe:e7:41:cb:c6:
                    17:13:50:0e:27:66:ce:72:4c:1c:2d:e7:69:5f:91:
                    fe:63:29:52:bd:43:f4:07:7a:d7:8f:51:f5:d5:3e:
                    67:9e:a4:1b:cc:6c:46:b3:b7:4f:d3:77:0c:ba:0d:
                    5a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AD:9F:87:01:AC:14:D1:6B:F4:52:FF:59:28:1E:DD:C4:BD:3D:E1:67
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7UQEtnVS9QEZF1X7Hgv4FihvSv3KK25vcban59QXyL7t/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7UQEtnVS9QEZF1X7Hgv4FihvSv3KK25vcban59QXyL7t/0/AD9F8701AC14D16BF452FF59281EDDC4BD3DE167.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.24.0/22
                IPv6:
                  2804:4ca0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267381

    Signature Algorithm: sha256WithRSAEncryption
         b5:d8:5c:0d:a9:d3:76:bc:28:cb:f2:8b:bf:80:c5:0a:98:9d:
         4a:c0:1f:dc:85:5b:b6:b2:15:3a:44:fe:bc:bb:d4:41:89:16:
         4b:62:aa:43:1c:07:ba:c0:7b:b5:00:53:a7:fc:fe:8f:04:30:
         e1:34:4b:af:82:06:c4:9f:fd:aa:4e:41:ee:cb:4e:7d:20:92:
         dc:b9:ab:b9:fe:ca:c1:c2:71:7e:8d:0f:5f:29:3e:7a:12:e7:
         da:b7:be:62:8c:03:0e:b6:e5:08:49:b3:c9:a4:96:9b:74:33:
         d2:48:3e:24:1d:80:c3:15:c2:ea:c3:d8:93:22:c7:2c:da:58:
         f0:28:f3:b4:24:78:95:67:b3:68:83:5f:9b:f9:e8:f6:d6:43:
         a5:08:6c:2c:d2:ab:09:68:11:cd:f0:7c:7f:54:13:1c:66:14:
         2a:04:b9:3a:f4:9c:6b:dd:ef:53:aa:eb:5a:33:38:6c:56:d7:
         d4:17:91:6a:41:12:74:d0:e3:3a:3e:88:3b:30:ad:79:96:47:
         6e:31:79:36:c6:a9:82:86:c4:80:2a:9f:72:78:34:1d:30:a4:
         d4:6e:2b:ac:95:b6:fe:6f:33:3b:8b:fe:fe:85:ff:56:b8:8f:
         31:2e:f9:27:28:d1:25:13:45:76:40:a9:cd:13:3c:66:bf:c9:
         d5:7d:08:6a
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUeh6hyy+9Qlt+ZuaP9L5g41Ya5+wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA1MTYyMjM0MDJaFw0yNjA1MTUyMjM5MDJaMDMxMTAvBgNV
BAMTKEFEOUY4NzAxQUMxNEQxNkJGNDUyRkY1OTI4MUVEREM0QkQzREUxNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxLJTFoD8KfxLdN8QBUtyxowK1
6kIfota9bnbtdpRWFdg85aUuAEbzSQRRTGBU6NCCFGuEoj4zeGVV3lCPFzd/Up2p
/i9vnFg+W2OTjNwerc3sVJwp+q9HMcgz12Rk9e6LUXx4OLWfyT2RYzA/LgggL9h1
qBB+4A4OJ0/ABvg7O0dnR0AmlJQm4NRWl3AvvGZHHumZyOeoNVJ3dzNUT9o4RJUT
jbuOvLTM1Ey1hwFAdvx8ah6mLfyzG0Q4GzdzqVgQ5Zhxfl4kRsQHnRz+50HLxhcT
UA4nZs5yTBwt52lfkf5jKVK9Q/QHetePUfXVPmeepBvMbEazt0/Tdwy6DVrXAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBStn4cBrBTRa/RS
/1koHt3EvT3hZzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN1VR
RXRuVlM5UUVaRjFYN0hndjRGaWh2U3YzS0syNXZjYmFuNTlRWHlMN3QvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdV
UUV0blZTOVFFWkYxWDdIZ3Y0RmlodlN2M0tLMjV2Y2JhbjU5UVh5TDd0LzAvQUQ5
Rjg3MDFBQzE0RDE2QkY0NTJGRjU5MjgxRUREQzRCRDNERTE2Ny5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLesYMA0EAgACMAcDBQAoBEygMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQUdTANBgkqhkiG9w0BAQsFAAOCAQEAtdhcDanTdrwoy/KL
v4DFCpidSsAf3IVbtrIVOkT+vLvUQYkWS2KqQxwHusB7tQBTp/z+jwQw4TRLr4IG
xJ/9qk5B7stOfSCS3Lmruf7KwcJxfo0PXyk+ehLn2re+YowDDrblCEmzyaSWm3Qz
0kg+JB2AwxXC6sPYkyLHLNpY8CjztCR4lWezaINfm/no9tZDpQhsLNKrCWgRzfB8
f1QTHGYUKgS5OvSca93vU6rrWjM4bFbX1BeRakESdNDjOj6IOzCteZZHbjF5Nsap
gobEgCqfcng0HTCk1G4rrJW2/m8zO4v+/oX/VriPMS75JyjRJRNFdkCpzRM8Zr/J
1X0Iag==
-----END CERTIFICATE-----
Generated at Sun Jun 15 13:37:32 2025 by rpki-client