Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25.cer
File:                     0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25.cer (raw, json)
Hash identifier:          18qUJClLK5kpNnlavtYBlFy/iEYLBhW34PHd33ghh1E=
Subject key identifier:   0B:DA:57:76:E6:D9:6F:40:CC:3E:4E:7A:CB:15:D5:80:14:44:FF:25
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       28F76AB7C24FB54D3EB52BDC06D843955C208ECB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25.mft
caRepository:             rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Nov 2024 00:52:26 +0000
Certificate not after:    Tue 11 Nov 2025 00:57:26 +0000
Subordinate resources:    AS: 264562
                          IP: 45.174.188.0/22
                          IP: 45.239.8.0/22
                          IP: 138.36.0.0/22
                          IP: 168.232.84.0/22
                          IP: 187.49.176.0/22
                          IP: 2804:2190::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 00:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f7:6a:b7:c2:4f:b5:4d:3e:b5:2b:dc:06:d8:43:95:5c:20:8e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 12 00:52:26 2024 GMT
            Not After : Nov 11 00:57:26 2025 GMT
        Subject: CN=0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:05:01:26:97:7f:f6:2a:9c:03:c0:aa:10:c8:
                    df:84:ea:10:fe:e2:58:f0:fe:2f:5f:77:30:59:2b:
                    61:50:98:40:e8:56:76:fb:96:76:ca:48:38:ff:31:
                    f5:af:0c:5b:88:f8:38:41:9f:54:88:c5:ae:2a:46:
                    7d:b1:31:65:ae:43:9f:4d:b8:ce:a6:02:62:14:2f:
                    eb:f6:4d:40:75:a5:c7:68:3d:83:36:f1:72:2a:b5:
                    01:6a:07:af:93:f1:5c:28:b3:82:46:93:3c:5a:6a:
                    c7:4c:aa:9e:ec:d6:87:b2:fb:4f:d9:c7:0e:23:68:
                    b9:b3:ba:8b:fa:61:f5:47:94:17:06:d0:b3:5c:03:
                    2f:fa:81:ac:04:6a:fe:55:63:77:78:e8:e7:11:77:
                    f8:54:41:c9:83:0f:0a:74:c2:56:93:f7:01:af:85:
                    d0:0d:8a:c8:7a:ed:ec:50:87:c4:6a:19:8a:20:c3:
                    d0:86:42:9a:c5:61:f6:a7:ee:d0:1d:5f:5d:33:28:
                    66:31:67:8e:44:4c:ff:88:a4:30:c6:bc:93:13:d3:
                    92:31:60:61:bb:73:13:52:a6:58:e1:f2:0e:1a:62:
                    71:9d:af:bd:59:e6:d4:35:ba:94:00:1b:9f:cc:93:
                    9a:7c:92:8e:9e:99:83:f0:4e:fc:52:09:93:77:30:
                    6b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0B:DA:57:76:E6:D9:6F:40:CC:3E:4E:7A:CB:15:D5:80:14:44:FF:25
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.188.0/22
                  45.239.8.0/22
                  138.36.0.0/22
                  168.232.84.0/22
                  187.49.176.0/22
                IPv6:
                  2804:2190::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264562

    Signature Algorithm: sha256WithRSAEncryption
         08:aa:5f:48:62:78:8a:d0:eb:c8:b1:8f:d9:5f:da:7b:e6:cb:
         a5:a9:61:52:de:96:df:1a:ef:fa:3a:95:a7:09:c0:80:59:67:
         0c:09:6e:fc:f1:b8:29:7f:1a:d9:ec:dc:a8:1a:b5:b4:a2:a1:
         3e:7d:1d:14:df:bd:39:eb:cf:c7:14:87:eb:7f:27:0f:99:39:
         35:bf:18:ae:a3:5b:53:6d:0e:f4:e3:bc:0b:f7:8a:88:62:0a:
         2e:cc:c1:c5:d2:58:6e:5f:f5:04:56:74:88:da:be:fb:41:66:
         e8:c4:6d:73:b8:75:f0:d0:f0:fe:42:11:5e:28:d4:ad:1c:e4:
         66:ea:ab:cb:d6:9f:46:73:21:fa:47:ef:4b:56:83:ed:b3:41:
         e3:69:aa:3f:0c:44:71:61:be:33:be:ac:b2:7f:9e:d9:55:2f:
         2e:d8:08:c4:42:1c:46:e1:74:83:d2:e5:f0:7c:54:ab:7d:7e:
         b7:12:0f:b5:6b:18:1b:c3:05:cf:b0:13:5c:45:10:de:73:3e:
         7c:ac:48:6b:aa:d4:c0:5a:96:cf:e7:f5:19:90:fa:af:3f:e0:
         81:9b:45:b8:4a:dc:a1:db:be:f9:22:8b:55:34:56:09:39:61:
         2c:15:8b:54:f1:a1:9d:aa:f9:28:1a:c8:f9:2a:9b:9a:eb:36:
         da:04:c4:71
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUKPdqt8JPtU0+tSvcBthDlVwgjsswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDExMTIwMDUyMjZaFw0yNTExMTEwMDU3MjZaMDMxMTAvBgNV
BAMTKDBCREE1Nzc2RTZEOTZGNDBDQzNFNEU3QUNCMTVENTgwMTQ0NEZGMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2BQEml3/2KpwDwKoQyN+E6hD+
4ljw/i9fdzBZK2FQmEDoVnb7lnbKSDj/MfWvDFuI+DhBn1SIxa4qRn2xMWWuQ59N
uM6mAmIUL+v2TUB1pcdoPYM28XIqtQFqB6+T8Vwos4JGkzxaasdMqp7s1oey+0/Z
xw4jaLmzuov6YfVHlBcG0LNcAy/6gawEav5VY3d46OcRd/hUQcmDDwp0wlaT9wGv
hdANish67exQh8RqGYogw9CGQprFYfan7tAdX10zKGYxZ45ETP+IpDDGvJMT05Ix
YGG7cxNSpljh8g4aYnGdr71Z5tQ1upQAG5/Mk5p8ko6emYPwTvxSCZN3MGt/AgMB
AAGjggNSMIIDTjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQL2ld25tlvQMw+
TnrLFdWAFET/JTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNTlq
VW50Y1duTjZ1SkxBbmZSaTJwSlM0aW1NdjE3V3pEZVM3SFVrRHY4ZHkvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzU5
alVudGNXbk42dUpMQW5mUmkycEpTNGltTXYxN1d6RGVTN0hVa0R2OGR5LzAvMEJE
QTU3NzZFNkQ5NkY0MENDM0U0RTdBQ0IxNUQ1ODAxNDQ0RkYyNS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEH
AQH/BDcwNTAkBAIAATAeAwQCLa68AwQCLe8IAwQCiiQAAwQCqOhUAwQCuzGwMA0E
AgACMAcDBQAoBCGQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQJcjANBgkqhkiG
9w0BAQsFAAOCAQEACKpfSGJ4itDryLGP2V/ae+bLpalhUt6W3xrv+jqVpwnAgFln
DAlu/PG4KX8a2ezcqBq1tKKhPn0dFN+9OevPxxSH638nD5k5Nb8YrqNbU20O9OO8
C/eKiGIKLszBxdJYbl/1BFZ0iNq++0Fm6MRtc7h18NDw/kIRXijUrRzkZuqry9af
RnMh+kfvS1aD7bNB42mqPwxEcWG+M76ssn+e2VUvLtgIxEIcRuF0g9Ll8HxUq31+
txIPtWsYG8MFz7ATXEUQ3nM+fKxIa6rUwFqWz+f1GZD6rz/ggZtFuErcodu++SKL
VTRWCTlhLBWLVPGhnar5KBrI+Sqbmus22gTEcQ==
-----END CERTIFICATE-----
Generated at Wed Nov 27 01:59:43 2024 by rpki-client on console-ams.rpki-client.org