Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.cer
File:                     D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.cer (raw, json)
Hash identifier:          crhL2wBXdR7ZYALzmG95VoXyW6TVWrpR6s8dgoP9hjM=
Subject key identifier:   D9:18:92:54:B7:5B:9D:BB:CA:84:EA:D7:98:65:C5:C5:F7:F1:0E:5D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       66654B0B961D6C01EBD8F32294E0017D1E654D9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9HAvxg28FCKdD96HgYrymasTourCykKuk8ha5zM6Htqs/0/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9HAvxg28FCKdD96HgYrymasTourCykKuk8ha5zM6Htqs/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 20 Jun 2025 20:33:38 +0000
Certificate not after:    Fri 19 Jun 2026 20:38:38 +0000
Subordinate resources:    AS: 267307
                          IP: 45.233.104.0/22
                          IP: 2804:4b74::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Jun 2025 21:21:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:65:4b:0b:96:1d:6c:01:eb:d8:f3:22:94:e0:01:7d:1e:65:4d:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 20 20:33:38 2025 GMT
            Not After : Jun 19 20:38:38 2026 GMT
        Subject: CN=D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:54:5c:ed:0b:39:ec:41:19:a1:d5:a6:26:34:
                    cc:58:06:af:82:67:ea:ad:81:e3:f1:f7:0b:fc:ea:
                    d6:71:32:d7:bf:5d:b1:4e:82:5d:27:32:6f:0f:36:
                    1a:80:e2:a9:73:22:68:2b:d8:69:5c:31:96:ae:6e:
                    98:b1:ba:04:b7:d2:a5:bd:33:d1:24:43:63:39:7f:
                    eb:c5:89:e0:5d:fd:a9:5f:cb:fd:69:68:30:ae:89:
                    7b:1e:6d:9a:c6:3d:75:95:ad:f2:1a:fa:72:14:bf:
                    e1:23:c3:e8:f5:9d:77:dd:bc:92:9b:50:2b:22:69:
                    fa:ae:4e:21:15:79:6e:21:f9:90:f8:81:7a:0d:09:
                    31:e4:5f:9e:28:8a:c4:99:1c:d6:c2:e3:e4:a0:26:
                    5d:f8:9e:cb:23:8f:0e:10:fe:2b:03:17:46:bf:34:
                    f2:60:84:c5:14:9e:7e:51:5c:43:bf:c3:45:48:4a:
                    5c:b0:71:50:99:5f:61:29:4f:50:70:a9:ee:78:dc:
                    22:01:23:2e:3e:92:74:77:8c:43:2c:b4:8e:66:34:
                    12:7e:9e:80:e6:11:59:43:4d:cd:de:e8:d1:10:af:
                    e0:63:bc:f8:a7:a5:a5:d9:02:02:5f:8d:f5:f3:03:
                    6f:a9:76:8c:90:9f:e4:3a:f7:72:a1:22:94:56:ec:
                    81:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D9:18:92:54:B7:5B:9D:BB:CA:84:EA:D7:98:65:C5:C5:F7:F1:0E:5D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9HAvxg28FCKdD96HgYrymasTourCykKuk8ha5zM6Htqs/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9HAvxg28FCKdD96HgYrymasTourCykKuk8ha5zM6Htqs/0/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.104.0/22
                IPv6:
                  2804:4b74::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267307

    Signature Algorithm: sha256WithRSAEncryption
         04:23:00:0e:1d:86:f7:b8:9e:c2:ad:7d:5a:fe:23:bf:6b:94:
         99:95:40:2d:01:e8:d1:90:ec:ae:8f:3a:0a:ad:6a:3d:16:52:
         cc:82:76:5b:4c:3b:43:0a:b3:32:96:30:87:b1:a9:eb:ac:72:
         15:56:7b:12:c0:71:f6:d9:85:b5:75:87:ff:5b:7d:ee:5b:06:
         39:85:2d:8b:b7:c0:e9:8f:48:42:ef:48:ba:47:5b:a8:f7:a2:
         0d:09:ad:2b:9b:36:de:cd:3f:c3:fc:d3:1c:36:3f:56:ab:d7:
         f7:79:10:7b:3a:55:fd:37:53:cd:c4:0f:64:fb:c1:60:6c:a2:
         55:ac:4a:5e:99:fa:44:18:72:e0:34:6e:d5:ea:c1:45:1e:c1:
         b3:fd:b6:33:82:6d:41:98:ce:04:bc:5a:22:29:18:4b:56:31:
         fd:cd:f7:dd:2c:78:d6:ac:a9:e5:c8:a2:81:18:e5:14:41:23:
         88:55:b0:b2:8d:8f:a2:96:ef:0e:2a:53:6d:3b:36:3b:c9:a3:
         45:7f:36:a9:70:28:c6:57:31:0e:36:09:88:fb:67:6c:86:95:
         f2:e4:42:46:fb:0c:23:a9:d0:37:82:01:9f:77:7f:fb:a5:52:
         82:39:3a:c8:f0:43:ce:27:84:9e:20:cd:1d:01:a7:7f:75:1c:
         59:d0:6a:e1
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUZmVLC5YdbAHr2PMilOABfR5lTZ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA2MjAyMDMzMzhaFw0yNjA2MTkyMDM4MzhaMDMxMTAvBgNV
BAMTKEQ5MTg5MjU0Qjc1QjlEQkJDQTg0RUFENzk4NjVDNUM1RjdGMTBFNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFVFztCznsQRmh1aYmNMxYBq+C
Z+qtgePx9wv86tZxMte/XbFOgl0nMm8PNhqA4qlzImgr2GlcMZaubpixugS30qW9
M9EkQ2M5f+vFieBd/alfy/1paDCuiXsebZrGPXWVrfIa+nIUv+Ejw+j1nXfdvJKb
UCsiafquTiEVeW4h+ZD4gXoNCTHkX54oisSZHNbC4+SgJl34nssjjw4Q/isDF0a/
NPJghMUUnn5RXEO/w0VISlywcVCZX2EpT1Bwqe543CIBIy4+knR3jEMstI5mNBJ+
noDmEVlDTc3e6NEQr+BjvPinpaXZAgJfjfXzA2+pdoyQn+Q693KhIpRW7IHnAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTZGJJUt1udu8qE
6teYZcXF9/EOXTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOUhB
dnhnMjhGQ0tkRDk2SGdZcnltYXNUb3VyQ3lrS3VrOGhhNXpNNkh0cXMvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlI
QXZ4ZzI4RkNLZEQ5NkhnWXJ5bWFzVG91ckN5a0t1azhoYTV6TTZIdHFzLzAvRDkx
ODkyNTRCNzVCOURCQkNBODRFQUQ3OTg2NUM1QzVGN0YxMEU1RC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLeloMA0EAgACMAcDBQAoBEt0MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQUKzANBgkqhkiG9w0BAQsFAAOCAQEABCMADh2G97iewq19
Wv4jv2uUmZVALQHo0ZDsro86Cq1qPRZSzIJ2W0w7QwqzMpYwh7Gp66xyFVZ7EsBx
9tmFtXWH/1t97lsGOYUti7fA6Y9IQu9IukdbqPeiDQmtK5s23s0/w/zTHDY/VqvX
93kQezpV/TdTzcQPZPvBYGyiVaxKXpn6RBhy4DRu1erBRR7Bs/22M4JtQZjOBLxa
IikYS1Yx/c333Sx41qyp5ciigRjlFEEjiFWwso2PopbvDipTbTs2O8mjRX82qXAo
xlcxDjYJiPtnbIaV8uRCRvsMI6nQN4IBn3d/+6VSgjk6yPBDzieEniDNHQGnf3Uc
WdBq4Q==
-----END CERTIFICATE-----
Generated at Sun Jun 29 21:28:02 2025 by rpki-client