Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.cer
File:                     049A7D9E6745910CF5F3435E31224EA7BBDE9280.cer (raw, json)
Hash identifier:          pElrd625hUyPm5JUIWfIJNZc70s2WC+78ULS3RrkkPc=
Subject key identifier:   04:9A:7D:9E:67:45:91:0C:F5:F3:43:5E:31:22:4E:A7:BB:DE:92:80
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       29550116E4CF2FF38C1FCCF2990F989769FB385C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 14:54:43 +0000
Certificate not after:    Thu 03 Apr 2025 14:59:43 +0000
Subordinate resources:    AS: 266226
                          IP: 216.98.216.0/22
                          IP: 2804:3ca4::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 23:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:55:01:16:e4:cf:2f:f3:8c:1f:cc:f2:99:0f:98:97:69:fb:38:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 14:54:43 2024 GMT
            Not After : Apr  3 14:59:43 2025 GMT
        Subject: CN=049A7D9E6745910CF5F3435E31224EA7BBDE9280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:10:ce:e3:3a:46:0f:77:47:04:1a:9b:c2:82:
                    35:85:76:f4:40:26:d0:e1:19:f0:a7:f7:40:78:0b:
                    04:17:8e:ea:ea:05:bd:c8:3a:52:31:07:87:a8:94:
                    c0:1f:35:60:db:bc:80:2e:9f:5a:a3:01:b8:e5:ef:
                    79:0e:e6:c6:6d:cf:a1:79:fb:fa:55:e0:31:c2:9e:
                    96:1a:22:0e:8d:73:ef:e1:7f:a6:8c:ca:5a:88:21:
                    e3:b7:bb:cc:c3:10:e5:ec:0e:81:8f:96:4e:c4:5f:
                    04:22:a8:5f:17:95:12:05:c2:dd:43:cb:d6:ab:00:
                    a9:40:cf:8a:c4:b5:e5:33:f1:8e:60:77:e5:f5:32:
                    75:55:7b:71:46:3d:bf:ed:c5:24:0c:23:c3:a6:a1:
                    8d:6f:01:69:80:ab:0f:fc:16:3e:06:70:3d:1b:55:
                    fe:c0:e0:cb:72:ed:46:76:3c:08:42:ab:64:b7:96:
                    fd:9f:c7:78:4a:5c:3c:c9:b3:41:b2:4a:8e:40:23:
                    e5:8e:4b:28:49:08:4a:42:3d:bb:48:53:44:48:f6:
                    96:30:fe:e5:eb:c1:63:48:36:93:5f:7f:94:12:21:
                    84:7c:41:78:ab:88:a2:dd:f1:9f:7c:53:dd:16:32:
                    96:14:ba:79:7e:fa:c4:17:32:16:70:da:eb:c9:13:
                    30:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                04:9A:7D:9E:67:45:91:0C:F5:F3:43:5E:31:22:4E:A7:BB:DE:92:80
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.98.216.0/22
                IPv6:
                  2804:3ca4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266226

    Signature Algorithm: sha256WithRSAEncryption
         0c:0e:5f:d1:54:af:71:24:ec:f5:10:4e:2b:43:b2:38:82:83:
         50:d0:62:e2:d0:2b:94:9e:42:41:3c:d0:92:3d:71:99:79:74:
         ad:70:ea:4b:7c:b5:22:cf:f4:00:55:0f:45:38:11:e6:12:b3:
         6e:61:5d:0e:93:f9:c8:6f:6d:2a:8a:9d:a0:5e:4c:91:ba:21:
         51:4c:bf:65:cc:96:1d:20:7b:c1:64:19:fd:98:eb:76:9c:c2:
         8c:17:7e:62:35:3d:70:d5:2c:f8:f0:99:4d:70:a8:78:df:d5:
         7a:d4:a4:0a:ae:2d:87:22:32:b1:ab:71:57:7a:d0:15:b4:99:
         54:d9:8c:83:aa:f5:e5:ed:57:e0:48:a2:f3:a5:6b:46:a1:d5:
         87:c3:6d:b4:9a:4e:c9:72:96:23:74:2d:e8:65:51:18:a6:f7:
         03:e3:59:71:47:9c:38:7d:4f:5b:a2:e4:df:65:57:a7:8e:f1:
         00:de:25:e5:98:52:dd:67:ab:6f:86:39:fb:a9:88:9f:70:86:
         af:68:79:d5:09:53:11:87:5c:bc:28:7b:dd:04:46:55:7b:49:
         e2:34:b6:b3:82:3c:1c:ba:e8:38:6a:6b:0c:09:40:33:b6:ab:
         c5:53:22:26:13:81:09:20:ff:08:91:ff:de:62:ac:61:75:b8:
         f1:a9:fc:84
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUKVUBFuTPL/OMH8zymQ+Yl2n7OFwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQxNDU0NDNaFw0yNTA0MDMxNDU5NDNaMDMxMTAvBgNV
BAMTKDA0OUE3RDlFNjc0NTkxMENGNUYzNDM1RTMxMjI0RUE3QkJERTkyODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNEM7jOkYPd0cEGpvCgjWFdvRA
JtDhGfCn90B4CwQXjurqBb3IOlIxB4eolMAfNWDbvIAun1qjAbjl73kO5sZtz6F5
+/pV4DHCnpYaIg6Nc+/hf6aMylqIIeO3u8zDEOXsDoGPlk7EXwQiqF8XlRIFwt1D
y9arAKlAz4rEteUz8Y5gd+X1MnVVe3FGPb/txSQMI8OmoY1vAWmAqw/8Fj4GcD0b
Vf7A4Mty7UZ2PAhCq2S3lv2fx3hKXDzJs0GySo5AI+WOSyhJCEpCPbtIU0RI9pYw
/uXrwWNINpNff5QSIYR8QXiriKLd8Z98U90WMpYUunl++sQXMhZw2uvJEzD9AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQEmn2eZ0WRDPXz
Q14xIk6nu96SgDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOEJr
OFhpdUFpekdCeWpnQjI4Vm5FcU5CbmlTc3luN2NNY1QxNXlDSjFyeWgvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhC
azhYaXVBaXpHQnlqZ0IyOFZuRXFOQm5pU3N5bjdjTWNUMTV5Q0oxcnloLzEvMDQ5
QTdEOUU2NzQ1OTEwQ0Y1RjM0MzVFMzEyMjRFQTdCQkRFOTI4MC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQC2GLYMA0EAgACMAcDBQAoBDykMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQP8jANBgkqhkiG9w0BAQsFAAOCAQEADA5f0VSvcSTs9RBO
K0OyOIKDUNBi4tArlJ5CQTzQkj1xmXl0rXDqS3y1Is/0AFUPRTgR5hKzbmFdDpP5
yG9tKoqdoF5MkbohUUy/ZcyWHSB7wWQZ/ZjrdpzCjBd+YjU9cNUs+PCZTXCoeN/V
etSkCq4thyIysatxV3rQFbSZVNmMg6r15e1X4Eii86VrRqHVh8NttJpOyXKWI3Qt
6GVRGKb3A+NZcUecOH1PW6Lk32VXp47xAN4l5ZhS3Werb4Y5+6mIn3CGr2h51QlT
EYdcvCh73QRGVXtJ4jS2s4I8HLroOGprDAlAM7arxVMiJhOBCSD/CJH/3mKsYXW4
8an8hA==
-----END CERTIFICATE-----
Generated at Sat Jun 1 23:43:25 2024 by rpki-client on console-fra.rpki-client.org