Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.cer
File:                     032EBC04B31CCA7416FFF2267C50AACE979BC999.cer (raw, json)
Hash identifier:          7FZpcDT9RJCOVWyXN8A0O+0YJZQEOng/btwJPO39elc=
Subject key identifier:   03:2E:BC:04:B3:1C:CA:74:16:FF:F2:26:7C:50:AA:CE:97:9B:C9:99
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       46AB594EEAAB96060AADA15FE634823FE3EBDAAF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 19:40:52 +0000
Certificate not after:    Wed 02 Apr 2025 19:45:52 +0000
Subordinate resources:    AS: 266154
                          IP: 192.140.8.0/22
                          IP: 2804:3b84::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 05:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ab:59:4e:ea:ab:96:06:0a:ad:a1:5f:e6:34:82:3f:e3:eb:da:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 19:40:52 2024 GMT
            Not After : Apr  2 19:45:52 2025 GMT
        Subject: CN=032EBC04B31CCA7416FFF2267C50AACE979BC999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fe:a7:c9:8e:89:80:30:36:d1:b1:e1:7a:7f:
                    50:1e:19:e7:55:d4:26:8f:d2:9f:dd:25:4e:20:91:
                    fd:ee:6c:56:6f:8d:9f:0c:56:4f:18:d4:81:74:12:
                    ad:b8:9a:12:72:ff:65:8a:af:71:7c:1a:ba:41:3f:
                    a3:24:05:da:ac:8d:93:00:ba:fa:b8:3e:44:0d:d3:
                    c8:e4:11:0c:45:eb:19:a3:40:48:80:f5:16:a4:63:
                    6c:15:37:67:83:28:c7:cb:58:e3:14:6a:5f:3e:67:
                    5c:37:96:ed:05:cf:c1:b8:21:0b:12:2d:c7:bd:be:
                    15:0c:1c:e9:a2:6e:94:b0:35:c2:97:8c:a4:b5:0b:
                    e4:56:b7:41:01:e6:cc:74:e0:15:51:ab:41:e8:85:
                    cd:ec:31:05:2c:c9:74:fa:62:0a:ad:f3:d1:98:09:
                    ee:d4:88:c7:b0:35:c7:81:2f:5a:da:ac:83:60:fd:
                    f2:bd:4c:6d:cc:11:6a:b1:34:bd:b1:ec:2b:47:29:
                    02:3a:ab:74:1b:a8:5d:d4:8c:ab:98:6f:24:4e:3b:
                    fd:d4:8a:e5:74:88:ef:bb:f0:73:40:d1:c7:0f:b8:
                    cb:90:36:49:c9:96:84:df:7c:77:40:d9:f5:2d:c7:
                    42:81:cc:80:44:14:b0:0c:68:36:79:e9:ff:76:a5:
                    b7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                03:2E:BC:04:B3:1C:CA:74:16:FF:F2:26:7C:50:AA:CE:97:9B:C9:99
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.8.0/22
                IPv6:
                  2804:3b84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266154

    Signature Algorithm: sha256WithRSAEncryption
         d3:af:9c:47:24:71:87:5d:72:5d:16:6e:9a:47:c6:4c:6d:cb:
         50:15:ef:54:f6:64:b2:bd:8c:01:d5:25:ad:2a:f8:72:7c:be:
         bc:4e:34:4c:33:fb:2f:e8:d6:1b:4e:86:8f:5f:24:7a:cc:77:
         aa:b0:9e:6c:f6:36:d3:72:9f:81:88:28:0c:06:ea:58:3a:6a:
         64:ac:68:75:32:5a:a2:d5:78:28:a8:51:51:a0:9a:e0:ae:53:
         99:a1:57:bd:4e:76:36:91:26:2c:de:24:35:20:5b:ee:2f:c8:
         28:6a:85:ad:5e:9f:ae:22:85:96:5d:6e:db:02:fc:ce:e6:91:
         79:8a:6f:69:f7:e4:fc:57:fd:21:79:5e:7a:6f:c1:6e:e1:2d:
         c0:ad:93:29:ac:e2:98:4c:07:9d:e4:2b:57:89:db:e8:42:c4:
         b3:15:8a:df:be:0a:44:62:d0:43:01:cc:41:ee:73:4e:ba:10:
         1a:d9:37:55:c1:6c:b2:a2:3c:db:73:05:3a:5f:a8:63:63:89:
         48:1b:16:ed:8a:66:36:b0:2f:6e:3f:a7:6d:a3:16:27:d0:1b:
         47:c4:d5:42:8e:4a:8e:58:bf:e7:41:0c:e6:4a:01:a6:64:e7:
         af:e1:cd:13:fa:81:aa:79:9a:57:84:50:f5:05:48:be:40:bb:
         16:fc:64:b9
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIURqtZTuqrlgYKraFf5jSCP+Pr2q8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMxOTQwNTJaFw0yNTA0MDIxOTQ1NTJaMDMxMTAvBgNV
BAMTKDAzMkVCQzA0QjMxQ0NBNzQxNkZGRjIyNjdDNTBBQUNFOTc5QkM5OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB/qfJjomAMDbRseF6f1AeGedV
1CaP0p/dJU4gkf3ubFZvjZ8MVk8Y1IF0Eq24mhJy/2WKr3F8GrpBP6MkBdqsjZMA
uvq4PkQN08jkEQxF6xmjQEiA9RakY2wVN2eDKMfLWOMUal8+Z1w3lu0Fz8G4IQsS
Lce9vhUMHOmibpSwNcKXjKS1C+RWt0EB5sx04BVRq0Hohc3sMQUsyXT6Ygqt89GY
Ce7UiMewNceBL1rarINg/fK9TG3MEWqxNL2x7CtHKQI6q3QbqF3UjKuYbyROO/3U
iuV0iO+78HNA0ccPuMuQNknJloTffHdA2fUtx0KBzIBEFLAMaDZ56f92pbd/AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQDLrwEsxzKdBb/
8iZ8UKrOl5vJmTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNE16
dFpSQVUyR1FyNGV6azhSODk4Z0YzYUZnbnBoQTlRc05LQWRDa0Z0TWsvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRN
enRaUkFVMkdRcjRlems4Ujg5OGdGM2FGZ25waEE5UXNOS0FkQ2tGdE1rLzEvMDMy
RUJDMDRCMzFDQ0E3NDE2RkZGMjI2N0M1MEFBQ0U5NzlCQzk5OS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCwIwIMA0EAgACMAcDBQAoBDuEMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQPqjANBgkqhkiG9w0BAQsFAAOCAQEA06+cRyRxh11yXRZu
mkfGTG3LUBXvVPZksr2MAdUlrSr4cny+vE40TDP7L+jWG06Gj18kesx3qrCebPY2
03KfgYgoDAbqWDpqZKxodTJaotV4KKhRUaCa4K5TmaFXvU52NpEmLN4kNSBb7i/I
KGqFrV6friKFll1u2wL8zuaReYpvaffk/Ff9IXleem/BbuEtwK2TKazimEwHneQr
V4nb6ELEsxWK374KRGLQQwHMQe5zTroQGtk3VcFssqI823MFOl+oY2OJSBsW7Ypm
NrAvbj+nbaMWJ9AbR8TVQo5Kjli/50EM5koBpmTnr+HNE/qBqnmaV4RQ9QVIvkC7
FvxkuQ==
-----END CERTIFICATE-----
Generated at Tue Jun 18 06:20:03 2024 by rpki-client on console-fra.rpki-client.org