Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4BC414301D15F47EFA6717BCA32DE9066FCF3E0B.cer
File:                     4BC414301D15F47EFA6717BCA32DE9066FCF3E0B.cer (raw, json)
Hash identifier:          6//znybJeoSQbQtN/s0kgjGWlAdL2+Ofis0wxOY8/w4=
Subject key identifier:   4B:C4:14:30:1D:15:F4:7E:FA:67:17:BC:A3:2D:E9:06:6F:CF:3E:0B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6EB3F21CBCDE80DC58E22135CA1D84F378B42A2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/4BC414301D15F47EFA6717BCA32DE9066FCF3E0B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 24 Jun 2025 14:09:46 +0000
Certificate not after:    Tue 23 Jun 2026 14:14:46 +0000
Subordinate resources:    AS: 265139
                          IP: 143.255.52.0/22
                          IP: 2804:2b2c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 17:04:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b3:f2:1c:bc:de:80:dc:58:e2:21:35:ca:1d:84:f3:78:b4:2a:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 24 14:09:46 2025 GMT
            Not After : Jun 23 14:14:46 2026 GMT
        Subject: CN=4BC414301D15F47EFA6717BCA32DE9066FCF3E0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9d:be:5c:49:4a:9b:cf:49:55:be:01:1f:c0:
                    a6:43:b1:44:0e:c7:c1:06:9c:34:cd:15:e7:63:01:
                    7e:e0:4c:16:a5:96:66:b8:57:4c:93:0c:b6:43:84:
                    3d:7e:41:c0:dc:76:e0:18:1d:b3:af:13:3b:00:80:
                    cd:2c:36:4e:a8:a6:b0:76:b5:19:68:8b:f3:0b:c3:
                    fa:3a:49:2b:9b:29:ee:64:e5:9a:a7:55:9b:dd:57:
                    24:c8:1b:4d:6a:70:68:f7:9f:15:75:a4:d6:f7:27:
                    a9:d9:af:aa:70:57:45:fd:5e:c9:2e:67:50:3c:9a:
                    94:7f:13:4d:f9:87:88:1a:d8:0a:c3:1e:6c:a8:5e:
                    59:b4:eb:5d:5b:bb:b0:1a:0c:c8:d6:28:3a:9b:fe:
                    26:29:38:1d:5e:5b:9d:d8:8b:f4:06:6f:0d:ec:67:
                    43:d0:23:4c:7b:81:91:f9:9f:91:79:14:a5:0e:12:
                    75:a0:39:3d:40:56:aa:32:8b:d2:e2:ee:84:67:14:
                    32:e0:d6:9a:c0:7d:7b:e8:37:e5:38:f0:74:5a:2c:
                    93:a0:f3:62:be:32:eb:06:e9:27:eb:5a:87:97:25:
                    ca:66:64:7f:3b:0c:c1:69:f0:84:cf:9c:59:21:20:
                    49:a1:1d:52:5a:37:d6:22:15:79:20:3c:e3:35:27:
                    bf:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4B:C4:14:30:1D:15:F4:7E:FA:67:17:BC:A3:2D:E9:06:6F:CF:3E:0B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/4BC414301D15F47EFA6717BCA32DE9066FCF3E0B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.52.0/22
                IPv6:
                  2804:2b2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265139

    Signature Algorithm: sha256WithRSAEncryption
         8c:33:3e:dd:e7:0f:06:6a:58:b3:02:7b:96:0d:0e:2a:12:38:
         49:f0:3a:a2:ad:36:18:5a:35:01:90:61:64:0c:d5:e2:94:7b:
         5b:d0:3b:dd:29:70:15:3a:5a:b1:b5:79:dc:d6:b2:cb:be:26:
         12:31:1b:09:e9:d4:b4:5a:0f:a6:41:ec:59:f3:e0:71:ef:30:
         2f:03:3c:f0:3c:a2:77:fe:85:e0:bc:76:3d:17:b2:8f:4e:bb:
         ea:6d:ed:dd:b6:c0:a2:bc:cf:8c:71:3d:2c:7e:9d:e5:62:43:
         1d:9c:8b:c7:37:36:c8:fb:eb:2b:a4:04:d0:b8:f5:fd:a6:3b:
         6e:41:8b:10:ff:f9:7e:f8:15:6c:71:bc:d3:b5:1c:13:7d:dc:
         d7:13:09:41:60:2b:d5:d5:72:32:e1:bb:2d:a7:f3:2c:63:23:
         7a:34:3e:6c:93:ec:d7:5b:ec:f3:f2:b5:c1:4d:20:5a:53:06:
         ad:1f:f3:d8:15:f8:8c:27:19:99:d0:0b:4b:c3:ba:ab:2c:1f:
         bd:db:32:75:58:2c:5f:d4:fa:0e:d2:61:b4:8f:77:23:d8:a1:
         69:c1:dc:70:88:d7:7b:cd:f1:e3:86:11:a5:ab:f6:6f:f3:1f:
         39:40:1c:d9:a6:5f:78:22:72:0d:a9:f1:16:b5:94:91:c4:41:
         ba:65:88:b0
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUbrPyHLzegNxY4iE1yh2E83i0KiowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA2MjQxNDA5NDZaFw0yNjA2MjMxNDE0NDZaMDMxMTAvBgNV
BAMTKDRCQzQxNDMwMUQxNUY0N0VGQTY3MTdCQ0EzMkRFOTA2NkZDRjNFMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbnb5cSUqbz0lVvgEfwKZDsUQO
x8EGnDTNFedjAX7gTBallma4V0yTDLZDhD1+QcDcduAYHbOvEzsAgM0sNk6oprB2
tRloi/MLw/o6SSubKe5k5ZqnVZvdVyTIG01qcGj3nxV1pNb3J6nZr6pwV0X9Xsku
Z1A8mpR/E035h4ga2ArDHmyoXlm0611bu7AaDMjWKDqb/iYpOB1eW53Yi/QGbw3s
Z0PQI0x7gZH5n5F5FKUOEnWgOT1AVqoyi9Li7oRnFDLg1prAfXvoN+U48HRaLJOg
82K+MusG6SfrWoeXJcpmZH87DMFp8ITPnFkhIEmhHVJaN9YiFXkgPOM1J79RAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRLxBQwHRX0fvpn
F7yjLekGb88+CzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQVlD
Q292QU0zaU1WWlRDN2ExWlhIakVnTUVha25KZlE4Z29QMVZUb2pYb3ovMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FZ
Q0NvdkFNM2lNVlpUQzdhMVpYSGpFZ01FYWtuSmZROGdvUDFWVG9qWG96LzAvNEJD
NDE0MzAxRDE1RjQ3RUZBNjcxN0JDQTMyREU5MDY2RkNGM0UwQi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCj/80MA0EAgACMAcDBQAoBCssMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQLszANBgkqhkiG9w0BAQsFAAOCAQEAjDM+3ecPBmpYswJ7
lg0OKhI4SfA6oq02GFo1AZBhZAzV4pR7W9A73SlwFTpasbV53Nayy74mEjEbCenU
tFoPpkHsWfPgce8wLwM88Dyid/6F4Lx2PReyj0676m3t3bbAorzPjHE9LH6d5WJD
HZyLxzc2yPvrK6QE0Lj1/aY7bkGLEP/5fvgVbHG807UcE33c1xMJQWAr1dVyMuG7
LafzLGMjejQ+bJPs11vs8/K1wU0gWlMGrR/z2BX4jCcZmdALS8O6qywfvdsydVgs
X9T6DtJhtI93I9ihacHccIjXe83x44YRpav2b/MfOUAc2aZfeCJyDanxFrWUkcRB
umWIsA==
-----END CERTIFICATE-----
Generated at Mon Jun 30 18:18:27 2025 by rpki-client