Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5BE031F9039E5869F085380D95A8CA8E48367CB5.cer
File:                     5BE031F9039E5869F085380D95A8CA8E48367CB5.cer (raw, json)
Hash identifier:          Ftngby+F+QxlTmNe/LaLiegk4lKRyzFfwWqqLZ1VQYk=
Subject key identifier:   5B:E0:31:F9:03:9E:58:69:F0:85:38:0D:95:A8:CA:8E:48:36:7C:B5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       103D4D40FC71C3504D33CA2E09DF35D4D0B4F7D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/0/5BE031F9039E5869F085380D95A8CA8E48367CB5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 27 Jun 2025 19:12:40 +0000
Certificate not after:    Fri 26 Jun 2026 19:17:40 +0000
Subordinate resources:    AS: 271011
                          IP: 190.8.172.0/22
                          IP: 2804:74e8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Jun 2025 20:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:3d:4d:40:fc:71:c3:50:4d:33:ca:2e:09:df:35:d4:d0:b4:f7:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 27 19:12:40 2025 GMT
            Not After : Jun 26 19:17:40 2026 GMT
        Subject: CN=5BE031F9039E5869F085380D95A8CA8E48367CB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:29:98:c6:93:d6:86:d1:33:84:bf:04:de:ad:
                    78:60:66:45:54:62:c8:ea:91:c5:e2:cb:27:41:9e:
                    71:37:0c:42:01:8b:f5:24:7f:dd:70:a8:0c:a5:b0:
                    7f:de:c8:80:3d:f0:4a:4c:4f:31:d9:54:eb:ab:f5:
                    05:85:eb:ca:45:a7:d9:4d:61:0b:51:0c:bc:96:ea:
                    26:15:cc:dc:6a:26:8e:e7:1c:e0:e4:8e:ce:3e:9e:
                    a5:a1:db:8a:b1:24:0d:68:91:74:81:ce:16:1a:45:
                    56:27:b7:09:67:15:2d:d8:85:e6:4d:1a:ef:61:28:
                    1d:89:c8:19:97:a6:64:38:cf:6a:84:7e:74:ed:17:
                    ef:76:5c:48:31:52:a1:99:93:7f:eb:a7:70:d7:49:
                    de:f6:0c:c4:a4:a1:7d:74:bf:88:83:94:35:f7:3e:
                    da:16:8c:82:50:f9:7d:d3:f8:4e:b9:3f:1a:3b:a6:
                    5a:73:3c:2f:8f:93:8e:c1:fc:3d:86:ad:53:5f:f9:
                    5e:41:df:27:85:83:bf:6f:38:84:78:f6:f4:4c:30:
                    ab:b7:7a:90:02:c8:d2:e2:79:e4:b8:23:ca:3f:3f:
                    e6:2c:39:5c:db:99:12:fc:5f:26:d5:1d:b9:9d:a1:
                    06:47:d5:8e:a0:11:14:6d:31:37:e4:3c:19:05:f4:
                    29:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5B:E0:31:F9:03:9E:58:69:F0:85:38:0D:95:A8:CA:8E:48:36:7C:B5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/0/5BE031F9039E5869F085380D95A8CA8E48367CB5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.172.0/22
                IPv6:
                  2804:74e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271011

    Signature Algorithm: sha256WithRSAEncryption
         ba:ce:8c:d0:e7:60:01:95:7a:47:ea:ea:fd:4f:f2:e2:24:c7:
         97:c9:da:74:d6:c1:fd:b3:c2:fd:71:19:7e:90:a4:65:e9:e1:
         e2:52:cb:bd:27:03:e0:19:cd:22:91:47:1b:3f:e7:cb:7d:17:
         23:c0:30:79:8d:17:68:c3:a7:e0:be:0c:4a:27:e5:a2:df:c8:
         38:7c:05:11:92:e5:31:05:6f:b9:06:79:50:74:39:22:aa:56:
         92:60:f2:93:c6:c2:df:1c:db:13:db:21:3d:4e:78:79:db:56:
         a0:53:19:de:f1:dd:88:e5:6c:20:e2:da:66:b3:b7:cd:e1:95:
         9f:a3:6d:a7:eb:37:0c:5a:72:77:ca:08:35:f6:73:bc:29:ad:
         34:44:59:f1:62:65:6c:87:9e:a5:69:c0:05:06:9e:f8:cc:24:
         a7:16:10:2b:fb:67:9f:49:80:99:1e:6f:84:72:af:b4:a7:35:
         91:82:1c:ae:82:06:45:03:e8:34:aa:6d:d2:79:09:15:b9:8e:
         5e:fa:ff:6d:7a:76:12:3a:d6:fd:ab:ba:b3:e4:fe:4c:41:17:
         b3:0c:b9:d7:66:17:74:33:1b:e8:b5:73:96:8a:26:9d:27:cf:
         1a:e7:84:92:08:ad:e3:53:17:00:f9:e3:0e:6e:92:43:8f:01:
         03:fe:25:7d
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUED1NQPxxw1BNM8ouCd811NC099MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA2MjcxOTEyNDBaFw0yNjA2MjYxOTE3NDBaMDMxMTAvBgNV
BAMTKDVCRTAzMUY5MDM5RTU4NjlGMDg1MzgwRDk1QThDQThFNDgzNjdDQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqKZjGk9aG0TOEvwTerXhgZkVU
YsjqkcXiyydBnnE3DEIBi/Ukf91wqAylsH/eyIA98EpMTzHZVOur9QWF68pFp9lN
YQtRDLyW6iYVzNxqJo7nHODkjs4+nqWh24qxJA1okXSBzhYaRVYntwlnFS3YheZN
Gu9hKB2JyBmXpmQ4z2qEfnTtF+92XEgxUqGZk3/rp3DXSd72DMSkoX10v4iDlDX3
PtoWjIJQ+X3T+E65Pxo7plpzPC+Pk47B/D2GrVNf+V5B3yeFg79vOIR49vRMMKu3
epACyNLieeS4I8o/P+YsOVzbmRL8XybVHbmdoQZH1Y6gERRtMTfkPBkF9Cm5AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRb4DH5A55YafCF
OA2VqMqOSDZ8tTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOXZV
SGNEN0doeEdrcmNKODVYNlVpeDNQaG9QZ1FacHBnWkwyVFZZbVpya0EvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzl2
VUhjRDdHaHhHa3JjSjg1WDZVaXgzUGhvUGdRWnBwZ1pMMlRWWW1acmtBLzAvNUJF
MDMxRjkwMzlFNTg2OUYwODUzODBEOTVBOENBOEU0ODM2N0NCNS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCvgisMA0EAgACMAcDBQAoBHToMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQiozANBgkqhkiG9w0BAQsFAAOCAQEAus6M0OdgAZV6R+rq
/U/y4iTHl8nadNbB/bPC/XEZfpCkZenh4lLLvScD4BnNIpFHGz/ny30XI8AweY0X
aMOn4L4MSiflot/IOHwFEZLlMQVvuQZ5UHQ5IqpWkmDyk8bC3xzbE9shPU54edtW
oFMZ3vHdiOVsIOLaZrO3zeGVn6Ntp+s3DFpyd8oINfZzvCmtNERZ8WJlbIeepWnA
BQae+MwkpxYQK/tnn0mAmR5vhHKvtKc1kYIcroIGRQPoNKpt0nkJFbmOXvr/bXp2
EjrW/au6s+T+TEEXswy512YXdDMb6LVzloomnSfPGueEkgit41MXAPnjDm6SQ48B
A/4lfQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 22:11:37 2025 by rpki-client