Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
File:                     1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer (raw, json)
Hash identifier:          9NYvn/n9m7MXU0dsUXUh9THZF/7rBNw1g5XmZmtPI2E=
Subject key identifier:   1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       08391AEF532941547ED84E45432F769FCF1C487A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:26:05 +0000
Certificate not after:    Wed 02 Apr 2025 18:31:05 +0000
Subordinate resources:    AS: 266320
                          IP: 170.238.136.0/22
                          IP: 2804:3600::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 06:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:39:1a:ef:53:29:41:54:7e:d8:4e:45:43:2f:76:9f:cf:1c:48:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:26:05 2024 GMT
            Not After : Apr  2 18:31:05 2025 GMT
        Subject: CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f3:82:92:51:5c:96:36:0a:9b:0e:0c:4e:e9:
                    d9:99:fe:ed:5e:4b:d3:25:2b:95:47:21:45:3f:26:
                    ff:91:10:2b:23:5f:cb:e8:1b:1c:82:f1:57:7b:02:
                    c2:dc:3b:f6:fe:94:af:16:a8:09:c2:c9:f6:a9:84:
                    30:21:db:93:8c:f9:99:90:87:5a:72:b2:cc:74:45:
                    59:e2:4d:3a:9e:8a:ac:6d:fb:29:a3:8c:ca:88:fc:
                    1a:65:91:9f:07:8f:cf:24:8c:34:a4:c2:ae:96:df:
                    50:64:6e:ce:5c:37:d5:a6:47:68:16:b2:5c:08:dd:
                    80:85:47:1c:fd:d3:be:c4:7f:3e:50:1b:cb:ce:c4:
                    1c:bb:9c:d1:75:33:0a:50:bf:21:a2:0c:f2:0f:1c:
                    b9:03:e7:01:e7:00:6d:97:f4:a2:95:04:e8:b2:54:
                    e9:75:69:76:21:b4:18:0a:71:0c:26:7a:75:1b:f3:
                    7e:ec:5a:69:9b:24:c0:fc:b6:ba:36:06:5d:10:7a:
                    e6:41:9d:54:bb:9c:b0:71:08:e7:c1:e8:93:cf:89:
                    42:49:df:47:a4:65:31:4d:6e:71:d8:16:da:00:14:
                    ef:58:95:39:bd:86:2b:4e:70:ee:f7:f2:9f:53:d1:
                    5d:ee:24:c8:40:2e:de:9d:bf:1e:a1:05:a1:97:ca:
                    b0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.136.0/22
                IPv6:
                  2804:3600::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266320

    Signature Algorithm: sha256WithRSAEncryption
         d0:fa:f7:24:d9:fd:fb:f6:87:f4:d2:15:dd:fb:64:ad:6e:97:
         32:71:0a:77:22:c9:82:44:b3:4a:0f:60:f6:81:3a:cd:ca:0c:
         27:02:7f:59:79:75:45:ca:76:3f:3c:db:c2:34:c1:8f:6d:38:
         f3:4a:d0:dc:a5:31:f1:a3:3a:ee:f7:51:0b:cd:85:9d:4e:09:
         8d:f2:f2:59:19:26:4b:f2:b4:56:a3:67:22:dd:88:a6:c3:27:
         c2:5c:e5:a8:3d:58:f4:1b:52:9f:e8:26:d5:ff:bf:3f:45:af:
         66:78:4e:ab:cc:0c:12:9b:03:94:0d:78:a7:35:e4:62:37:01:
         ad:99:46:1c:62:a9:70:95:1d:56:15:b9:49:01:38:59:8b:c3:
         04:d6:30:63:3d:a5:2f:8e:21:4a:60:24:4f:d8:04:8e:18:e5:
         7d:32:15:71:33:d1:e5:7c:ff:85:e1:ba:a4:73:84:82:37:a2:
         6e:ab:f4:23:54:13:8a:92:cf:64:d4:f2:b6:6a:cc:7d:53:83:
         49:83:db:79:b7:84:0f:d2:46:f2:7e:b6:55:54:5c:7d:2c:ab:
         f2:4a:a7:b0:52:59:bc:2e:1e:e2:9b:d4:de:b7:71:61:ad:8d:
         fb:fd:fd:fc:fe:ed:c0:50:f9:5e:15:dd:35:29:d5:eb:c9:df:
         7c:36:5a:39
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUCDka71MpQVR+2E5FQy92n88cSHowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMxODI2MDVaFw0yNTA0MDIxODMxMDVaMDMxMTAvBgNV
BAMTKDFDN0Q4MzhGMUI1OTg5OUQ0NEI0RkM0MDBGQkMxRERBM0MwQjNEMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN84KSUVyWNgqbDgxO6dmZ/u1e
S9MlK5VHIUU/Jv+RECsjX8voGxyC8Vd7AsLcO/b+lK8WqAnCyfaphDAh25OM+ZmQ
h1pyssx0RVniTTqeiqxt+ymjjMqI/BplkZ8Hj88kjDSkwq6W31Bkbs5cN9WmR2gW
slwI3YCFRxz9077Efz5QG8vOxBy7nNF1MwpQvyGiDPIPHLkD5wHnAG2X9KKVBOiy
VOl1aXYhtBgKcQwmenUb837sWmmbJMD8tro2Bl0QeuZBnVS7nLBxCOfB6JPPiUJJ
30ekZTFNbnHYFtoAFO9YlTm9hitOcO738p9T0V3uJMhALt6dvx6hBaGXyrD9AgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQcfYOPG1mJnUS0
/EAPvB3aPAs9MDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRzZS
TnlWamlxWkhRSnM0eGU5OVBuaTU1WndjMzZhcldhdHpEVFIzM0I1OFcvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRzZS
TnlWamlxWkhRSnM0eGU5OVBuaTU1WndjMzZhcldhdHpEVFIzM0I1OFcvMS8xQzdE
ODM4RjFCNTk4OTlENDRCNEZDNDAwRkJDMUREQTNDMEIzRDMwLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAKq7ogwDQQCAAIwBwMFACgENgAwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBBBQMA0GCSqGSIb3DQEBCwUAA4IBAQDQ+vck2f379of00hXd
+2StbpcycQp3IsmCRLNKD2D2gTrNygwnAn9ZeXVFynY/PNvCNMGPbTjzStDcpTHx
ozru91ELzYWdTgmN8vJZGSZL8rRWo2ci3YimwyfCXOWoPVj0G1Kf6CbV/78/Ra9m
eE6rzAwSmwOUDXinNeRiNwGtmUYcYqlwlR1WFblJAThZi8ME1jBjPaUvjiFKYCRP
2ASOGOV9MhVxM9HlfP+F4bqkc4SCN6Juq/QjVBOKks9k1PK2asx9U4NJg9t5t4QP
0kbyfrZVVFx9LKvySqewUlm8Lh7im9Tet3FhrY37/f38/u3AUPleFd01KdXryd98
Nlo5
-----END CERTIFICATE-----
Generated at Mon Jun 3 04:17:59 2024 by rpki-client on console-fra.rpki-client.org