Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/02A899EEC29A12C918BDAFB4FE9EA4EE7604F57B.cer
File:                     02A899EEC29A12C918BDAFB4FE9EA4EE7604F57B.cer (raw, json)
Hash identifier:          aFouRNzJbm3TiN0jj73AvGM7EcKencZWup3CckLLnwI=
Subject key identifier:   02:A8:99:EE:C2:9A:12:C9:18:BD:AF:B4:FE:9E:A4:EE:76:04:F5:7B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       14AB8FBA46B1235EDBA8B655448A4159EB386DB3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/1/02A899EEC29A12C918BDAFB4FE9EA4EE7604F57B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 12:06:19 +0000
Certificate not after:    Thu 03 Apr 2025 12:11:19 +0000
Subordinate resources:    AS: 28592
                          IP: 177.128.228.0/22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 20:55:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ab:8f:ba:46:b1:23:5e:db:a8:b6:55:44:8a:41:59:eb:38:6d:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 12:06:19 2024 GMT
            Not After : Apr  3 12:11:19 2025 GMT
        Subject: CN=02A899EEC29A12C918BDAFB4FE9EA4EE7604F57B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ce:3d:a8:0f:87:7b:13:90:51:c6:f7:00:ff:
                    60:33:c2:1f:bc:9d:09:06:bf:6e:43:87:5d:9c:68:
                    6e:6f:4a:7a:4f:d6:41:92:bc:45:7d:05:df:54:73:
                    ef:4f:3b:6e:43:6e:70:d4:21:96:a4:27:78:86:a2:
                    97:e9:f9:e6:28:79:1d:92:2e:a4:46:e7:0e:0a:d3:
                    b0:21:b6:ed:88:95:e9:54:36:c9:a7:1b:89:50:99:
                    fb:40:f0:1a:51:c4:6a:46:bb:ed:3b:69:fa:79:00:
                    3a:1f:a0:16:38:0f:a3:8e:98:09:ec:79:82:bc:dc:
                    f3:ca:15:cf:0a:a1:99:a6:91:8e:07:22:2c:13:6e:
                    d6:8c:95:f5:67:2c:97:04:dc:70:57:4e:35:0d:5e:
                    e8:71:88:a0:74:6a:9b:9c:fe:90:a5:99:fd:7f:bc:
                    d5:03:06:43:37:99:a3:52:57:a9:b7:67:a5:b9:00:
                    e4:ae:c0:a3:ea:ee:63:ba:6a:ca:a7:12:cd:ae:9c:
                    2b:b9:60:5a:3e:66:cd:47:19:26:59:90:13:b3:f0:
                    36:04:8f:92:3f:00:30:1b:7c:19:d4:25:84:76:b0:
                    89:6b:cf:d5:c8:b5:9b:7d:a3:9d:27:82:b5:dc:f2:
                    28:2e:f4:e6:5f:8e:f1:4a:c8:94:0f:da:06:b0:99:
                    11:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                02:A8:99:EE:C2:9A:12:C9:18:BD:AF:B4:FE:9E:A4:EE:76:04:F5:7B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/1/02A899EEC29A12C918BDAFB4FE9EA4EE7604F57B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.228.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28592

    Signature Algorithm: sha256WithRSAEncryption
         a3:e5:20:f2:64:9e:b5:09:84:f4:aa:2d:b4:22:8b:1b:ae:6e:
         f6:df:c2:81:ee:36:c5:33:4d:ab:a9:cd:25:fe:1b:ee:c5:a9:
         b0:99:29:f6:e0:55:9f:da:4c:27:83:02:26:28:a8:ed:64:40:
         ba:d2:73:eb:00:ea:d0:6d:e0:3e:6f:3d:b1:6d:8e:34:01:3d:
         0d:93:68:5a:bd:3d:d4:7c:0c:10:28:52:42:5d:a7:ec:d6:6f:
         cc:1f:e5:7b:6d:36:f6:01:2b:04:9a:34:a2:8b:d2:dc:99:80:
         59:e7:9f:fe:95:c5:3c:c1:89:03:e8:2c:ee:c4:16:3f:6a:4c:
         22:2d:e0:80:c5:86:40:13:e0:fc:0e:e6:bc:8d:26:d5:fc:ac:
         6a:8e:af:4d:10:1a:d4:68:69:73:65:01:43:1e:37:06:99:73:
         2f:82:54:b1:a1:c6:34:a8:44:ba:96:f3:76:a7:51:5f:75:b8:
         8d:ca:88:fc:15:2e:b5:a4:a2:97:45:c6:87:1c:66:af:64:f4:
         80:db:1c:04:39:d8:71:7c:88:3e:e4:ce:11:53:71:26:e1:f0:
         5e:36:d9:9d:a4:26:92:e1:d4:1f:61:b0:62:72:fb:50:7a:55:
         15:57:4b:18:8b:3d:87:a3:7e:59:63:ec:f1:8c:16:1c:76:48:
         66:ff:8a:d9
-----BEGIN CERTIFICATE-----
MIIGIDCCBQigAwIBAgIUFKuPukaxI17bqLZVRIpBWes4bbMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQxMjA2MTlaFw0yNTA0MDMxMjExMTlaMDMxMTAvBgNV
BAMTKDAyQTg5OUVFQzI5QTEyQzkxOEJEQUZCNEZFOUVBNEVFNzYwNEY1N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCzj2oD4d7E5BRxvcA/2Azwh+8
nQkGv25Dh12caG5vSnpP1kGSvEV9Bd9Uc+9PO25DbnDUIZakJ3iGopfp+eYoeR2S
LqRG5w4K07Ahtu2IlelUNsmnG4lQmftA8BpRxGpGu+07afp5ADofoBY4D6OOmAns
eYK83PPKFc8KoZmmkY4HIiwTbtaMlfVnLJcE3HBXTjUNXuhxiKB0apuc/pClmf1/
vNUDBkM3maNSV6m3Z6W5AOSuwKPq7mO6asqnEs2unCu5YFo+Zs1HGSZZkBOz8DYE
j5I/ADAbfBnUJYR2sIlrz9XItZt9o50ngrXc8igu9OZfjvFKyJQP2gawmRHVAgMB
AAGjggMqMIIDJjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQCqJnuwpoSyRi9
r7T+nqTudgT1ezAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNEtX
dVh4SkhNVGJ4VlJvaGRYaThoYjlNOUhNUWt5cUVqSGhTVnNuTG5EMzMvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRL
V3VYeEpITVRieFZSb2hkWGk4aGI5TTlITVFreXFFakhoU1ZzbkxuRDMzLzEvMDJB
ODk5RUVDMjlBMTJDOTE4QkRBRkI0RkU5RUE0RUU3NjA0RjU3Qi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsYDkMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAm+w
MA0GCSqGSIb3DQEBCwUAA4IBAQCj5SDyZJ61CYT0qi20Iosbrm7238KB7jbFM02r
qc0l/hvuxamwmSn24FWf2kwngwImKKjtZEC60nPrAOrQbeA+bz2xbY40AT0Nk2ha
vT3UfAwQKFJCXafs1m/MH+V7bTb2ASsEmjSii9LcmYBZ55/+lcU8wYkD6CzuxBY/
akwiLeCAxYZAE+D8Dua8jSbV/Kxqjq9NEBrUaGlzZQFDHjcGmXMvglSxocY0qES6
lvN2p1FfdbiNyoj8FS61pKKXRcaHHGavZPSA2xwEOdhxfIg+5M4RU3Em4fBeNtmd
pCaS4dQfYbBicvtQelUVV0sYiz2Ho35ZY+zxjBYcdkhm/4rZ
-----END CERTIFICATE-----
Generated at Tue Jun 18 20:44:12 2024 by rpki-client on console-fra.rpki-client.org