Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6E2F9A8829C8EAED369CA936BE10A036D3ECEFBD.cer
File:                     6E2F9A8829C8EAED369CA936BE10A036D3ECEFBD.cer (raw, json)
Hash identifier:          9Lcd9BGb3dmqGYhvV++eNlBnz6sLW0HPyNK/AYkEMQk=
Subject key identifier:   6E:2F:9A:88:29:C8:EA:ED:36:9C:A9:36:BE:10:A0:36:D3:EC:EF:BD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4D75BC21AD948E4E7DBBDAA922A94592ADAC0C3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/1/6E2F9A8829C8EAED369CA936BE10A036D3ECEFBD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 08 Jul 2025 13:09:30 +0000
Certificate not after:    Tue 07 Jul 2026 13:14:30 +0000
Subordinate resources:    AS: 268623
                          IP: 45.164.120.0/22
                          IP: 2804:5404::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Jul 2025 04:07:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:75:bc:21:ad:94:8e:4e:7d:bb:da:a9:22:a9:45:92:ad:ac:0c:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  8 13:09:30 2025 GMT
            Not After : Jul  7 13:14:30 2026 GMT
        Subject: CN=6E2F9A8829C8EAED369CA936BE10A036D3ECEFBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:76:d0:82:6f:3e:cc:c5:1a:76:33:4b:3d:9c:
                    39:0a:86:51:c0:5f:2d:bf:cc:b0:7a:8b:b8:6b:a8:
                    ff:46:66:69:06:74:1b:8f:17:d3:7b:d8:2c:6c:ff:
                    9c:63:5e:75:e7:2b:f1:78:31:21:f8:3f:09:49:e4:
                    dc:45:8d:43:58:6e:14:7c:7f:df:c3:4e:ed:0d:21:
                    d9:d6:33:6b:9d:06:d4:b9:97:64:88:a5:51:3a:2e:
                    6d:c8:c4:76:46:49:65:e0:1a:99:9b:4b:4e:36:7b:
                    d5:27:dd:08:68:30:8e:54:7f:8d:5f:06:3b:f3:b8:
                    04:7f:78:ad:db:0d:ac:78:7a:3e:80:82:fb:b3:0b:
                    47:53:12:8d:48:37:08:ac:45:ee:13:d1:71:8e:4b:
                    1b:34:80:7f:c4:82:0b:cc:5d:2c:a0:ba:38:61:78:
                    35:a9:76:82:c1:1b:44:df:8c:87:49:7a:aa:2b:58:
                    64:2b:ba:b1:37:87:05:3e:4b:db:db:ab:7f:8f:81:
                    11:74:d8:c2:f3:e2:c8:23:46:2b:fc:52:b6:4d:47:
                    23:f1:3c:12:c7:c5:84:d2:af:d1:71:3d:89:29:fa:
                    22:1e:9f:84:11:d8:02:51:20:8f:c8:88:bc:dc:c3:
                    23:e9:71:aa:6e:47:cf:45:a9:d0:17:85:0e:c3:76:
                    00:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6E:2F:9A:88:29:C8:EA:ED:36:9C:A9:36:BE:10:A0:36:D3:EC:EF:BD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/1/6E2F9A8829C8EAED369CA936BE10A036D3ECEFBD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.120.0/22
                IPv6:
                  2804:5404::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268623

    Signature Algorithm: sha256WithRSAEncryption
         0c:11:79:78:07:76:e8:12:c6:65:3e:b0:a6:ae:1e:e0:14:31:
         98:61:b2:c9:9c:1f:55:bd:02:c1:15:9e:ed:ad:80:be:87:8d:
         a9:c9:d3:a0:a8:dc:8f:7e:5c:77:13:a6:91:03:4a:f6:0a:eb:
         10:c6:a8:a3:4b:17:4c:ec:ba:0d:b1:22:f4:f3:b1:42:ab:0f:
         4f:50:6d:e6:1f:b7:0c:e2:06:a6:24:e4:7c:98:36:80:3e:f3:
         60:35:33:d3:4a:ae:e5:43:f9:23:10:5a:4f:73:27:1b:54:a8:
         8c:e1:2a:5a:71:76:c7:9a:8d:ab:23:4d:99:46:4d:d7:3c:71:
         ff:af:ae:cb:a3:98:6d:45:d4:58:57:ac:ad:60:24:bd:72:c9:
         73:d6:a6:4c:ed:79:29:01:3a:55:a5:54:e7:cf:cf:68:0b:75:
         0b:ab:a5:d6:be:a6:47:fe:88:ce:e2:b9:6c:71:e3:8b:ba:18:
         ea:12:29:78:8e:65:f3:da:7d:23:4c:ad:2e:53:48:03:07:e2:
         38:da:0b:3b:67:ab:2f:7b:20:a4:70:21:ee:2b:28:a0:4b:68:
         51:b4:21:2a:88:37:10:9c:5c:f9:38:09:60:75:bd:4c:33:f8:
         bf:93:0e:64:7a:db:0d:34:e1:77:4b:95:2f:58:a1:58:ee:b8:
         4f:37:f5:14
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUTXW8Ia2Ujk59u9qpIqlFkq2sDDowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA3MDgxMzA5MzBaFw0yNjA3MDcxMzE0MzBaMDMxMTAvBgNV
BAMTKDZFMkY5QTg4MjlDOEVBRUQzNjlDQTkzNkJFMTBBMDM2RDNFQ0VGQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFdtCCbz7MxRp2M0s9nDkKhlHA
Xy2/zLB6i7hrqP9GZmkGdBuPF9N72Cxs/5xjXnXnK/F4MSH4PwlJ5NxFjUNYbhR8
f9/DTu0NIdnWM2udBtS5l2SIpVE6Lm3IxHZGSWXgGpmbS042e9Un3QhoMI5Uf41f
BjvzuAR/eK3bDax4ej6AgvuzC0dTEo1INwisRe4T0XGOSxs0gH/EggvMXSygujhh
eDWpdoLBG0TfjIdJeqorWGQrurE3hwU+S9vbq3+PgRF02MLz4sgjRiv8UrZNRyPx
PBLHxYTSr9FxPYkp+iIen4QR2AJRII/IiLzcwyPpcapuR89FqdAXhQ7DdgDdAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRuL5qIKcjq7Tac
qTa+EKA20+zvvTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOGpQ
NHpLYXdINGdrbW93NDRrdWlvRnBocVZBSjM2MUxRcDZqeXljdkxGY28vMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOGpQ
NHpLYXdINGdrbW93NDRrdWlvRnBocVZBSjM2MUxRcDZqeXljdkxGY28vMS82RTJG
OUE4ODI5QzhFQUVEMzY5Q0E5MzZCRTEwQTAzNkQzRUNFRkJELm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAItpHgwDQQCAAIwBwMFACgEVAQwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBBlPMA0GCSqGSIb3DQEBCwUAA4IBAQAMEXl4B3boEsZlPrCm
rh7gFDGYYbLJnB9VvQLBFZ7trYC+h42pydOgqNyPflx3E6aRA0r2CusQxqijSxdM
7LoNsSL087FCqw9PUG3mH7cM4gamJOR8mDaAPvNgNTPTSq7lQ/kjEFpPcycbVKiM
4SpacXbHmo2rI02ZRk3XPHH/r67Lo5htRdRYV6ytYCS9cslz1qZM7XkpATpVpVTn
z89oC3ULq6XWvqZH/ojO4rlsceOLuhjqEil4jmXz2n0jTK0uU0gDB+I42gs7Z6sv
eyCkcCHuKyigS2hRtCEqiDcQnFz5OAlgdb1MM/i/kw5ketsNNOF3S5UvWKFY7rhP
N/UU
-----END CERTIFICATE-----
Generated at Sun Jul 13 05:36:46 2025 by rpki-client