Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
File:                     030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer (raw, json)
Hash identifier:          s45I6wx2TpoYcQWwWaTYc6UAGemtE+c26xIHjw+Fp1c=
Subject key identifier:   03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       489A38BAE1954E02A53B738553EF40A560408BE9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 17:35:23 +0000
Certificate not after:    Thu 03 Apr 2025 17:40:23 +0000
Subordinate resources:    AS: 263347
                          IP: 45.162.152.0/22
                          IP: 177.23.96.0/21
                          IP: 191.37.32.0/19
                          IP: 2804:14bc::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Jul 2024 20:04:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:9a:38:ba:e1:95:4e:02:a5:3b:73:85:53:ef:40:a5:60:40:8b:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 17:35:23 2024 GMT
            Not After : Apr  3 17:40:23 2025 GMT
        Subject: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fa:f4:f1:76:ac:06:e2:b4:5b:67:33:cc:4b:
                    aa:dd:96:c3:15:05:32:4e:55:39:5a:ac:d2:b0:a2:
                    fc:ac:4d:26:ea:bf:2e:fb:23:ed:0f:e8:72:ad:89:
                    31:a8:e2:2c:47:d3:e2:1a:c6:61:fc:17:bf:a4:93:
                    89:66:7e:af:98:97:be:79:0a:3c:3d:ee:cb:7e:fb:
                    63:b3:23:b0:20:81:7d:ab:13:ca:10:ef:a2:68:f9:
                    52:b7:57:4a:b4:03:a8:ab:52:73:38:f0:69:9b:6d:
                    1e:89:99:84:12:31:e4:68:ab:3f:96:e2:d7:78:f4:
                    b0:d6:4d:a6:b8:94:71:fd:5c:17:48:fd:2c:71:80:
                    0f:43:6d:53:6a:73:ca:ae:f9:02:88:ef:27:4b:1b:
                    60:b5:3a:cc:6d:b2:01:2f:dc:33:84:81:75:7d:0b:
                    40:2e:75:e3:c0:d3:3d:9c:b5:9d:4e:c4:64:ee:ea:
                    c9:a5:6f:db:7f:a0:00:08:f4:a6:5a:19:47:02:0e:
                    dc:64:20:76:a1:8e:83:90:4a:13:29:36:93:6d:f6:
                    06:ca:76:7d:81:8e:f8:e8:47:26:7e:48:80:13:c3:
                    61:1e:2d:8d:f9:35:67:80:8d:cd:cf:80:b0:81:8b:
                    89:29:e1:e4:4c:4f:87:67:f3:e4:c4:a9:f2:c3:2f:
                    1e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.152.0/22
                  177.23.96.0/21
                  191.37.32.0/19
                IPv6:
                  2804:14bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263347

    Signature Algorithm: sha256WithRSAEncryption
         4c:01:95:bb:c3:5f:25:7a:6a:a3:af:0b:15:42:2d:0b:ad:53:
         6d:13:a8:73:9e:b0:6e:dc:e6:a2:b6:e4:e0:54:cc:67:3a:d0:
         5b:ea:16:2b:41:f8:29:ad:eb:94:16:e7:f0:04:b6:7a:75:bb:
         47:fe:7b:7e:23:84:b4:c4:07:48:7b:3d:f5:2d:5b:4f:15:82:
         96:51:e0:17:e8:ac:4c:c3:dd:86:a0:e4:a5:42:ff:08:20:24:
         55:8f:a2:55:08:11:aa:a5:f9:bd:e3:bd:9c:b1:95:ed:72:78:
         99:2a:c6:c5:69:a3:4b:35:3b:14:5b:dc:64:6e:67:b4:4a:b7:
         e4:7e:63:74:44:9e:7e:ae:44:30:d7:9b:c7:ee:fb:ff:aa:3f:
         5b:91:dd:ce:83:03:33:3a:ea:28:29:16:74:07:b6:4b:a7:bc:
         59:02:1f:ef:98:a9:71:8b:fd:53:be:f1:7d:f1:bc:c2:a4:d0:
         68:99:ec:05:2d:39:a5:65:ea:d0:3a:87:ce:15:c2:3a:c9:d7:
         6f:2a:97:39:0d:25:59:ec:ae:13:b0:03:c6:22:67:bd:13:35:
         74:f4:9f:57:17:df:e3:5b:b9:9f:10:48:02:a9:d9:cf:70:96:
         be:f6:aa:68:ca:e8:93:fb:8c:29:ef:06:f5:8a:66:53:6b:be:
         2c:69:72:20
-----BEGIN CERTIFICATE-----
MIIGPDCCBSSgAwIBAgIUSJo4uuGVTgKlO3OFU+9ApWBAi+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQxNzM1MjNaFw0yNTA0MDMxNzQwMjNaMDMxMTAvBgNV
BAMTKDAzMDkxNjY5N0NDNzdBMUE4NzZFNDg2NUJFMDJGNTVBOEVGRjlCRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq+vTxdqwG4rRbZzPMS6rdlsMV
BTJOVTlarNKwovysTSbqvy77I+0P6HKtiTGo4ixH0+IaxmH8F7+kk4lmfq+Yl755
Cjw97st++2OzI7AggX2rE8oQ76Jo+VK3V0q0A6irUnM48GmbbR6JmYQSMeRoqz+W
4td49LDWTaa4lHH9XBdI/SxxgA9DbVNqc8qu+QKI7ydLG2C1OsxtsgEv3DOEgXV9
C0AudePA0z2ctZ1OxGTu6smlb9t/oAAI9KZaGUcCDtxkIHahjoOQShMpNpNt9gbK
dn2BjvjoRyZ+SIATw2EeLY35NWeAjc3PgLCBi4kp4eRMT4dn8+TEqfLDLx5fAgMB
AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQDCRZpfMd6Godu
SGW+AvVajv+b8jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOGtV
eWFzTm5lVW1TcXhESnVwZG15c3dteUtSdENHZEt0dmtQODUxSHh5ZEMvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhr
VXlhc05uZVVtU3F4REp1cGRteXN3bXlLUnRDR2RLdHZrUDg1MUh4eWRDLzEvMDMw
OTE2Njk3Q0M3N0ExQTg3NkU0ODY1QkUwMkY1NUE4RUZGOUJGMi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH
AQH/BCswKTAYBAIAATASAwQCLaKYAwQDsRdgAwQFvyUgMA0EAgACMAcDBQAoBBS8
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQEszANBgkqhkiG9w0BAQsFAAOCAQEA
TAGVu8NfJXpqo68LFUItC61TbROoc56wbtzmorbk4FTMZzrQW+oWK0H4Ka3rlBbn
8AS2enW7R/57fiOEtMQHSHs99S1bTxWCllHgF+isTMPdhqDkpUL/CCAkVY+iVQgR
qqX5veO9nLGV7XJ4mSrGxWmjSzU7FFvcZG5ntEq35H5jdESefq5EMNebx+77/6o/
W5HdzoMDMzrqKCkWdAe2S6e8WQIf75ipcYv9U77xffG8wqTQaJnsBS05pWXq0DqH
zhXCOsnXbyqXOQ0lWeyuE7ADxiJnvRM1dPSfVxff41u5nxBIAqnZz3CWvvaqaMro
k/uMKe8G9YpmU2u+LGlyIA==
-----END CERTIFICATE-----
Generated at Sun Jun 30 19:52:24 2024 by rpki-client on console-ams.rpki-client.org