Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/085D77D4302255076FC0EF856AC7C40EF2F57975.cer
File:                     085D77D4302255076FC0EF856AC7C40EF2F57975.cer (raw, json)
Hash identifier:          Mg+rULiiBK1rzBdRCDFHWjfkSFoXl1AFTr5OBazfXrY=
Subject key identifier:   08:5D:77:D4:30:22:55:07:6F:C0:EF:85:6A:C7:C4:0E:F2:F5:79:75
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7A6C39555E76AB0E265B5C5C05294245EF0D5E3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/085D77D4302255076FC0EF856AC7C40EF2F57975.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 29 May 2024 22:59:16 +0000
Certificate not after:    Wed 28 May 2025 23:04:16 +0000
Subordinate resources:    AS: 270456
                          IP: 190.124.252.0/22
                          IP: 2804:6c44::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:6c:39:55:5e:76:ab:0e:26:5b:5c:5c:05:29:42:45:ef:0d:5e:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 29 22:59:16 2024 GMT
            Not After : May 28 23:04:16 2025 GMT
        Subject: CN=085D77D4302255076FC0EF856AC7C40EF2F57975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b1:77:2f:c8:87:f1:cb:24:5e:62:21:b2:d7:
                    39:6c:1f:4a:80:d4:40:5d:27:9b:3f:38:80:2a:e6:
                    59:2d:98:52:ca:ab:9c:1f:db:5e:a4:30:22:a5:b5:
                    b9:77:35:39:a5:a9:a6:bc:d3:76:82:8f:c8:c5:a1:
                    be:51:4b:f2:a8:0a:ff:cd:04:45:7f:7c:df:4c:89:
                    de:96:48:94:ac:7a:78:33:c9:5d:7b:87:3b:4d:e6:
                    40:f4:4d:19:05:ef:5d:ba:93:6a:ce:f0:fc:15:b3:
                    92:35:dd:d3:47:15:43:42:ac:18:dc:51:39:17:b4:
                    63:d9:c7:f3:5e:ce:1e:cd:67:72:4f:5d:f6:cd:1c:
                    05:29:b0:70:2a:73:6f:82:d7:f5:07:6b:38:d3:95:
                    6e:c7:83:1e:63:1e:57:9b:5f:99:3b:61:2e:75:8f:
                    e2:f1:f7:56:e5:cf:d7:cd:ce:4d:63:e4:1f:a0:43:
                    88:40:80:8a:0d:74:37:ad:f8:21:34:73:03:2f:93:
                    46:50:ed:c8:00:4b:b5:86:92:0c:27:82:42:e3:31:
                    a7:82:cb:2e:d5:47:b9:8f:95:89:46:a4:28:33:59:
                    63:23:a1:83:55:0a:e7:c8:f9:ca:89:1a:6f:9b:a1:
                    66:a0:e7:87:a4:ec:a0:ce:62:7d:fe:ac:4b:ff:f7:
                    37:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                08:5D:77:D4:30:22:55:07:6F:C0:EF:85:6A:C7:C4:0E:F2:F5:79:75
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/085D77D4302255076FC0EF856AC7C40EF2F57975.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.252.0/22
                IPv6:
                  2804:6c44::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270456

    Signature Algorithm: sha256WithRSAEncryption
         74:64:8f:ed:ab:17:49:b8:df:99:50:46:a9:b1:5a:a0:a1:0f:
         78:d0:cf:46:66:6f:e1:ec:e4:ee:9c:3c:a3:01:2f:80:35:6f:
         83:a9:bd:e4:ab:1b:c8:ce:a8:9e:43:7f:51:fd:80:87:55:17:
         a9:d2:4e:27:17:e2:7b:41:63:9d:ce:b0:74:c2:7a:1a:e3:42:
         17:d1:69:06:c4:b8:b9:a4:4c:6f:54:20:6d:a3:c3:a6:9e:13:
         a9:c9:73:83:be:d7:a4:75:33:06:dc:27:23:4f:d4:21:a0:0d:
         90:c3:50:f2:06:87:56:af:50:05:fb:af:f4:3a:5b:1c:c2:2c:
         4f:94:50:90:0b:14:eb:86:37:3f:4d:c8:f5:be:e6:8e:83:bc:
         e1:ac:0c:80:77:bd:ab:06:d4:cb:23:1a:da:bd:05:f9:50:a3:
         00:1e:c9:c8:89:a7:10:83:1c:16:c0:7c:b8:20:b4:7e:bf:b2:
         df:56:35:9d:be:c3:83:fe:94:2e:e9:a4:2c:b7:3a:3f:ae:36:
         fd:e4:fe:e3:7a:1c:af:7c:64:ba:17:58:8b:09:5a:90:2b:05:
         49:0b:ef:08:ff:10:7d:ae:92:6d:62:2d:29:23:87:8a:1c:cc:
         cb:62:a4:87:ca:3a:58:d0:3a:84:ac:39:cd:91:4a:5b:bc:f2:
         ae:aa:64:63
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUemw5VV52qw4mW1xcBSlCRe8NXjwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA1MjkyMjU5MTZaFw0yNTA1MjgyMzA0MTZaMDMxMTAvBgNV
BAMTKDA4NUQ3N0Q0MzAyMjU1MDc2RkMwRUY4NTZBQzdDNDBFRjJGNTc5NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCusXcvyIfxyyReYiGy1zlsH0qA
1EBdJ5s/OIAq5lktmFLKq5wf216kMCKltbl3NTmlqaa803aCj8jFob5RS/KoCv/N
BEV/fN9Mid6WSJSsengzyV17hztN5kD0TRkF7126k2rO8PwVs5I13dNHFUNCrBjc
UTkXtGPZx/Nezh7NZ3JPXfbNHAUpsHAqc2+C1/UHazjTlW7Hgx5jHlebX5k7YS51
j+Lx91blz9fNzk1j5B+gQ4hAgIoNdDet+CE0cwMvk0ZQ7cgAS7WGkgwngkLjMaeC
yy7VR7mPlYlGpCgzWWMjoYNVCufI+cqJGm+boWag54ek7KDOYn3+rEv/9zdbAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQIXXfUMCJVB2/A
74Vqx8QO8vV5dTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOXlx
VVR3Z1dpTEJ5dWdtckFSNEdHTEM2dm1lc21vVzYyRTZrcEhIelpVd2EvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzl5
cVVUd2dXaUxCeXVnbXJBUjRHR0xDNnZtZXNtb1c2MkU2a3BISHpaVXdhLzAvMDg1
RDc3RDQzMDIyNTUwNzZGQzBFRjg1NkFDN0M0MEVGMkY1Nzk3NS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCvnz8MA0EAgACMAcDBQAoBGxEMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQgeDANBgkqhkiG9w0BAQsFAAOCAQEAdGSP7asXSbjfmVBG
qbFaoKEPeNDPRmZv4ezk7pw8owEvgDVvg6m95KsbyM6onkN/Uf2Ah1UXqdJOJxfi
e0Fjnc6wdMJ6GuNCF9FpBsS4uaRMb1QgbaPDpp4Tqclzg77XpHUzBtwnI0/UIaAN
kMNQ8gaHVq9QBfuv9DpbHMIsT5RQkAsU64Y3P03I9b7mjoO84awMgHe9qwbUyyMa
2r0F+VCjAB7JyImnEIMcFsB8uCC0fr+y31Y1nb7Dg/6ULumkLLc6P642/eT+43oc
r3xkuhdYiwlakCsFSQvvCP8Qfa6SbWItKSOHihzMy2Kkh8o6WNA6hKw5zZFKW7zy
rqpkYw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:28 2024 by rpki-client on console-fra.rpki-client.org