Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.cer
File:                     CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.cer (raw, json)
Hash identifier:          aai87di7vhu5MoaOdlxr3/mtmrJz9v6dRhSL4QPn8eM=
Subject key identifier:   CB:CD:6C:54:C2:AC:7A:F2:B0:CE:1B:67:2F:5C:D2:74:C0:17:95:1D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       593B4C3CA2E905E050EFE0F543576C7C1F9EF328
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 May 2025 13:03:36 +0000
Certificate not after:    Thu 14 May 2026 13:08:36 +0000
Subordinate resources:    AS: 271253
                          IP: 45.172.96.0/22
                          IP: 45.180.16.0/22
                          IP: 131.255.56.0/22
                          IP: 164.163.192.0/22
                          IP: 2804:7898::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 16 Jun 2025 05:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:3b:4c:3c:a2:e9:05:e0:50:ef:e0:f5:43:57:6c:7c:1f:9e:f3:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 15 13:03:36 2025 GMT
            Not After : May 14 13:08:36 2026 GMT
        Subject: CN=CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c3:35:14:26:22:22:6e:a6:46:e4:7f:eb:74:
                    1a:15:2a:f9:b2:16:a9:d3:5e:a2:5b:bf:39:54:ce:
                    54:1c:62:1f:1f:96:e8:62:32:b9:49:d3:1b:de:29:
                    ef:9f:6c:99:5e:0a:bd:94:e1:23:df:52:d9:b8:38:
                    c3:a4:f7:d5:74:a2:85:f1:ae:d1:9f:37:67:b9:e4:
                    66:cf:f3:7f:84:9a:d0:20:a7:bc:43:1a:c0:f8:43:
                    10:56:b6:d4:3c:06:2b:05:8a:42:5a:19:0e:ad:77:
                    14:f1:91:75:e2:2e:5b:70:6c:ad:ab:c4:1d:28:7e:
                    b9:0d:78:8a:a0:98:1d:ec:04:12:79:b2:83:3e:8d:
                    e9:b3:1b:e0:6a:e1:34:88:76:e8:1c:04:a5:27:14:
                    23:0f:e0:7f:48:ca:ad:bf:e4:d6:03:fe:b0:eb:6d:
                    69:54:93:f2:27:ef:b4:ea:56:24:24:c8:4b:bd:a3:
                    6f:0f:ed:5f:27:7a:32:4e:0d:2c:ba:da:88:2b:29:
                    0c:4b:b2:3c:aa:ee:e9:b6:11:88:a2:98:b9:96:fc:
                    6d:69:91:da:99:68:12:f9:dc:40:15:e8:92:98:a0:
                    ad:81:fb:62:27:a8:b6:28:83:f8:b1:49:0c:d2:e2:
                    64:21:00:99:5d:6b:43:82:ed:51:50:5e:4e:b1:e6:
                    90:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CB:CD:6C:54:C2:AC:7A:F2:B0:CE:1B:67:2F:5C:D2:74:C0:17:95:1D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.96.0/22
                  45.180.16.0/22
                  131.255.56.0/22
                  164.163.192.0/22
                IPv6:
                  2804:7898::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271253

    Signature Algorithm: sha256WithRSAEncryption
         73:38:6b:90:1f:9a:ef:36:1b:7a:c7:37:ae:ca:1e:38:72:00:
         c7:8c:f8:47:f1:63:63:8d:2c:49:db:81:f9:a4:fb:c4:4e:83:
         92:75:f1:f3:9b:16:40:ff:0e:03:70:af:7d:28:45:e6:c7:d6:
         83:f8:b7:8c:20:0f:8f:dd:01:29:68:eb:e7:48:f1:1e:f7:bf:
         26:d0:57:c6:65:d6:73:52:e2:a7:28:d1:3c:09:9c:b6:3b:49:
         66:e2:61:e5:10:3c:b4:74:02:12:b1:9e:29:fd:d4:55:f9:26:
         82:2e:36:fa:df:bc:90:35:9e:bd:6d:fd:df:72:ae:cc:5a:f3:
         3c:f5:b8:09:95:27:24:67:80:2c:ae:6c:fc:4b:38:6f:08:21:
         ee:e8:4c:f5:70:8f:b8:59:04:49:4e:3d:67:52:9d:3c:14:72:
         b8:a1:e1:32:d0:a2:e3:d2:49:f2:bd:f7:c7:c7:cc:d3:ae:a6:
         fd:3e:b2:2e:64:2f:d8:7a:f0:63:3f:17:b4:ec:34:31:bd:a8:
         c7:7c:80:71:97:b8:37:8d:f4:a6:35:8e:c6:9e:3d:03:b7:3c:
         d7:5b:0c:00:7b:2c:1e:4b:48:c1:a2:cf:b9:c1:fb:01:af:a8:
         b4:64:ec:de:f9:eb:54:1a:6c:1d:ff:cc:4f:a8:b7:61:1c:86:
         cf:9b:a8:45
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUWTtMPKLpBeBQ7+D1Q1dsfB+e8ygwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA1MTUxMzAzMzZaFw0yNjA1MTQxMzA4MzZaMDMxMTAvBgNV
BAMTKENCQ0Q2QzU0QzJBQzdBRjJCMENFMUI2NzJGNUNEMjc0QzAxNzk1MUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZwzUUJiIibqZG5H/rdBoVKvmy
FqnTXqJbvzlUzlQcYh8fluhiMrlJ0xveKe+fbJleCr2U4SPfUtm4OMOk99V0ooXx
rtGfN2e55GbP83+EmtAgp7xDGsD4QxBWttQ8BisFikJaGQ6tdxTxkXXiLltwbK2r
xB0ofrkNeIqgmB3sBBJ5soM+jemzG+Bq4TSIdugcBKUnFCMP4H9Iyq2/5NYD/rDr
bWlUk/In77TqViQkyEu9o28P7V8nejJODSy62ogrKQxLsjyq7um2EYiimLmW/G1p
kdqZaBL53EAV6JKYoK2B+2InqLYog/ixSQzS4mQhAJlda0OC7VFQXk6x5pCtAgMB
AAGjggNMMIIDSDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTLzWxUwqx68rDO
G2cvXNJ0wBeVHTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRWVo
c0NtQU1EZ3c2MzdLeWZBTGttc1JvZVF4Q1NHVVFCWTQ4aExxRGhoUE0vMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vl
aHNDbUFNRGd3NjM3S3lmQUxrbXNSb2VReENTR1VRQlk0OGhMcURoaFBNLzAvQ0JD
RDZDNTRDMkFDN0FGMkIwQ0UxQjY3MkY1Q0QyNzRDMDE3OTUxRC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEH
AQH/BDEwLzAeBAIAATAYAwQCLaxgAwQCLbQQAwQCg/84AwQCpKPAMA0EAgACMAcD
BQAoBHiYMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQjlTANBgkqhkiG9w0BAQsF
AAOCAQEAczhrkB+a7zYbesc3rsoeOHIAx4z4R/FjY40sSduB+aT7xE6DknXx85sW
QP8OA3CvfShF5sfWg/i3jCAPj90BKWjr50jxHve/JtBXxmXWc1LipyjRPAmctjtJ
ZuJh5RA8tHQCErGeKf3UVfkmgi42+t+8kDWevW3933KuzFrzPPW4CZUnJGeALK5s
/Es4bwgh7uhM9XCPuFkESU49Z1KdPBRyuKHhMtCi49JJ8r33x8fM066m/T6yLmQv
2HrwYz8XtOw0Mb2ox3yAcZe4N430pjWOxp49A7c811sMAHssHktIwaLPucH7Aa+o
tGTs3vnrVBpsHf/MT6i3YRyGz5uoRQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 19:27:06 2025 by rpki-client