Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E906FF2463EE18FDEA69EA21CEDCEDC3894DC1AA.cer
File:                     E906FF2463EE18FDEA69EA21CEDCEDC3894DC1AA.cer (raw, json)
Hash identifier:          n1PmEyahibz4TuNHAhrvQ4KuFND1IEKDPU+H4TNCnBw=
Subject key identifier:   E9:06:FF:24:63:EE:18:FD:EA:69:EA:21:CE:DC:ED:C3:89:4D:C1:AA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       60B5FF0200BC746E0898C26E258742DF12F2EE6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/E906FF2463EE18FDEA69EA21CEDCEDC3894DC1AA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 30 Apr 2025 21:24:13 +0000
Certificate not after:    Wed 29 Apr 2026 21:29:13 +0000
Subordinate resources:    AS: 267500
                          IP: 201.182.60.0/22
                          IP: 2804:4270::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 07 May 2025 15:30:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b5:ff:02:00:bc:74:6e:08:98:c2:6e:25:87:42:df:12:f2:ee:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 30 21:24:13 2025 GMT
            Not After : Apr 29 21:29:13 2026 GMT
        Subject: CN=E906FF2463EE18FDEA69EA21CEDCEDC3894DC1AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:62:eb:83:02:63:d7:6d:28:74:80:04:4e:e7:
                    f8:c7:d7:ea:0c:66:14:05:3f:9e:c9:40:48:75:7a:
                    29:a6:82:8c:3b:63:74:7f:75:0e:ca:c5:c4:65:97:
                    69:c3:f3:42:1a:81:0f:58:e8:36:76:1c:38:b8:74:
                    e0:a9:cb:39:65:5e:29:4e:04:71:8f:35:d7:f3:14:
                    cd:5e:fd:de:04:12:2b:8b:1b:6a:d7:93:2f:99:b1:
                    95:f5:be:1e:cf:df:7c:93:ee:0c:a2:06:b3:3d:fc:
                    5b:a5:e7:4f:f5:82:d7:8e:a0:aa:ee:dc:77:91:71:
                    8f:ac:d5:9a:69:5c:d5:91:39:c0:41:32:32:f8:44:
                    59:aa:64:6b:ac:e9:8f:c5:93:5d:7c:ae:11:07:f0:
                    cf:58:69:a4:f3:d0:5e:13:8e:a0:74:6d:63:6c:c2:
                    ae:a8:a0:ad:1f:25:e4:09:d5:23:35:a3:66:47:5d:
                    d7:e5:30:6e:25:a3:ef:1f:b5:d3:8a:e9:3e:96:d5:
                    b9:1e:57:8c:58:97:1a:73:05:2b:ed:71:20:fa:29:
                    fb:af:9f:2b:a2:ed:2b:bd:72:dd:4f:fe:90:31:b3:
                    8e:1d:1e:ae:93:7a:35:94:be:03:6e:ef:5d:41:8a:
                    29:6b:26:1d:06:ac:cd:05:eb:22:ce:09:9f:03:3e:
                    01:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E9:06:FF:24:63:EE:18:FD:EA:69:EA:21:CE:DC:ED:C3:89:4D:C1:AA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/E906FF2463EE18FDEA69EA21CEDCEDC3894DC1AA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.60.0/22
                IPv6:
                  2804:4270::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267500

    Signature Algorithm: sha256WithRSAEncryption
         69:19:e4:a5:d0:c5:29:34:a3:c6:b7:30:89:eb:f5:b5:f3:0a:
         90:f3:d0:ca:92:64:d7:64:96:ca:e8:b2:db:cf:3a:0d:ab:3a:
         12:e8:63:8e:d9:80:0a:ac:49:da:02:81:10:72:e1:2f:fd:fe:
         bd:e4:e9:40:52:24:cf:ba:61:8d:94:f5:78:9b:a7:e7:f7:22:
         39:73:45:fc:ef:cc:8e:ba:58:cf:99:9d:1d:56:69:8e:65:14:
         d2:27:1d:7f:92:66:61:9d:68:df:7c:b5:78:0e:a2:19:82:08:
         13:66:3c:13:b5:52:89:cf:2b:1e:d1:23:8f:40:2c:66:b5:36:
         5c:09:a9:00:35:62:84:f0:3c:a5:4a:4c:b5:24:6a:d5:3b:ea:
         c3:96:ba:ce:e2:03:a9:47:0f:37:17:8b:32:5b:b4:27:18:06:
         a8:89:e8:24:f2:f5:22:0a:2a:1e:6a:c2:ca:a6:bd:5c:92:45:
         82:2e:88:1a:f3:d4:6d:e3:50:52:9e:e3:cf:38:89:4e:04:4d:
         ec:be:89:75:1e:51:ba:06:7d:b5:77:0f:2e:9d:ef:9a:55:9f:
         82:1f:26:be:9a:29:37:2e:d5:a7:fb:1f:51:cb:84:e3:80:2b:
         f0:fb:f4:72:f9:96:3c:22:49:b4:f1:21:29:01:dd:05:a0:b1:
         69:96:04:70
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUYLX/AgC8dG4ImMJuJYdC3xLy7mwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA0MzAyMTI0MTNaFw0yNjA0MjkyMTI5MTNaMDMxMTAvBgNV
BAMTKEU5MDZGRjI0NjNFRTE4RkRFQTY5RUEyMUNFRENFREMzODk0REMxQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmYuuDAmPXbSh0gARO5/jH1+oM
ZhQFP57JQEh1eimmgow7Y3R/dQ7KxcRll2nD80IagQ9Y6DZ2HDi4dOCpyzllXilO
BHGPNdfzFM1e/d4EEiuLG2rXky+ZsZX1vh7P33yT7gyiBrM9/Ful50/1gteOoKru
3HeRcY+s1ZppXNWROcBBMjL4RFmqZGus6Y/Fk118rhEH8M9YaaTz0F4TjqB0bWNs
wq6ooK0fJeQJ1SM1o2ZHXdflMG4lo+8ftdOK6T6W1bkeV4xYlxpzBSvtcSD6Kfuv
nyui7Su9ct1P/pAxs44dHq6TejWUvgNu711BiilrJh0GrM0F6yLOCZ8DPgHRAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTpBv8kY+4Y/epp
6iHO3O3DiU3BqjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOUZk
V3doVTVrTnBrMjZyOUdZZkRqVnNwZkdHWmphSzZmVUx0VFpNUXBCN0IvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlG
ZFd3aFU1a05wazI2cjlHWWZEalZzcGZHR1pqYUs2ZlVMdFRaTVFwQjdCLzAvRTkw
NkZGMjQ2M0VFMThGREVBNjlFQTIxQ0VEQ0VEQzM4OTREQzFBQS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCybY8MA0EAgACMAcDBQAoBEJwMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQU7DANBgkqhkiG9w0BAQsFAAOCAQEAaRnkpdDFKTSjxrcw
iev1tfMKkPPQypJk12SWyuiy2886Das6EuhjjtmACqxJ2gKBEHLhL/3+veTpQFIk
z7phjZT1eJun5/ciOXNF/O/MjrpYz5mdHVZpjmUU0icdf5JmYZ1o33y1eA6iGYII
E2Y8E7VSic8rHtEjj0AsZrU2XAmpADVihPA8pUpMtSRq1Tvqw5a6zuIDqUcPNxeL
Mlu0JxgGqInoJPL1IgoqHmrCyqa9XJJFgi6IGvPUbeNQUp7jzziJTgRN7L6JdR5R
ugZ9tXcPLp3vmlWfgh8mvpopNy7Vp/sfUcuE44Ar8Pv0cvmWPCJJtPEhKQHdBaCx
aZYEcA==
-----END CERTIFICATE-----
Generated at Tue May 6 15:51:37 2025 by rpki-client