Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/102E8D201FEFBD18DA17FA1622858BB27784D51F.cer
File:                     102E8D201FEFBD18DA17FA1622858BB27784D51F.cer (raw, json)
Hash identifier:          8Vy+4lboKSwtKPx5NM2r5Wt/rhgfWd576zzl+1Lt6x8=
Subject key identifier:   10:2E:8D:20:1F:EF:BD:18:DA:17:FA:16:22:85:8B:B2:77:84:D5:1F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2BB8FBFD647AD6E82CEAF9233B8A090A01E3F914
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/2/102E8D201FEFBD18DA17FA1622858BB27784D51F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 14:41:43 +0000
Certificate not after:    Thu 03 Apr 2025 14:46:43 +0000
Subordinate resources:    AS: 270337
                          IP: 190.83.48.0/22
                          IP: 2804:6a74::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b8:fb:fd:64:7a:d6:e8:2c:ea:f9:23:3b:8a:09:0a:01:e3:f9:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 14:41:43 2024 GMT
            Not After : Apr  3 14:46:43 2025 GMT
        Subject: CN=102E8D201FEFBD18DA17FA1622858BB27784D51F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:71:11:10:be:8e:59:48:b7:cd:b4:06:5d:f3:
                    2b:5c:21:27:89:c7:d1:5e:82:ef:b5:7c:bf:09:de:
                    fc:84:e9:78:e3:1e:7e:91:b0:bf:e9:5c:37:4f:be:
                    5d:12:fb:e1:d8:ac:21:6b:4c:7e:fa:51:5e:55:9f:
                    dd:2d:c7:c7:0b:cb:58:c9:1a:bc:6a:89:13:8a:35:
                    50:ec:0d:1f:03:3f:a7:a7:dd:16:b2:b0:0d:f9:36:
                    56:05:61:26:b5:5a:c1:2a:18:ab:c0:32:19:fc:60:
                    99:46:6a:f0:e4:7f:56:f1:43:d9:5b:54:82:ad:59:
                    24:32:43:f6:f7:d8:54:03:82:04:06:36:33:f3:0a:
                    da:1f:5d:0d:66:e3:e9:e9:26:ee:77:40:a1:89:dc:
                    ed:b1:d7:3b:8e:e0:5c:38:78:ef:d1:ca:f3:d4:f1:
                    e9:e9:4b:8b:47:24:cf:e0:3b:22:c3:57:54:bc:7b:
                    2d:5b:b6:a6:33:78:76:2f:74:3e:0c:5e:88:9c:d0:
                    86:eb:f1:e5:07:89:eb:ec:42:a9:11:f8:e2:79:cc:
                    91:e9:93:f7:69:18:78:32:28:3d:93:c0:0b:25:8a:
                    93:44:9f:30:48:47:67:43:58:07:b2:db:b3:ff:7b:
                    c9:78:c8:b4:5a:30:a4:51:a6:58:4f:d3:a3:3d:f9:
                    f1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                10:2E:8D:20:1F:EF:BD:18:DA:17:FA:16:22:85:8B:B2:77:84:D5:1F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/2/102E8D201FEFBD18DA17FA1622858BB27784D51F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.48.0/22
                IPv6:
                  2804:6a74::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270337

    Signature Algorithm: sha256WithRSAEncryption
         c8:a6:e4:81:37:fe:97:54:a8:ca:40:5d:ec:9e:38:98:0a:67:
         b9:53:e7:f0:99:84:63:5e:73:c7:b5:3c:f1:d9:36:69:65:f0:
         c2:77:77:a0:b8:7a:82:25:ca:8a:79:af:25:d6:29:d8:b4:90:
         ea:60:b6:28:11:5a:fa:be:e2:0c:66:c1:a6:df:ed:8b:a3:d6:
         a1:94:b9:ac:81:c3:86:48:02:8f:6d:6d:d8:f7:23:5e:4d:a6:
         4b:e4:29:94:a2:98:28:45:aa:12:42:d8:ce:b2:e3:8c:16:2b:
         81:1a:b0:96:85:c2:6b:12:50:3f:b3:2e:38:f4:74:2d:7d:28:
         74:93:4c:df:2a:dc:3a:71:50:e5:c8:a4:a5:05:c9:5e:5a:9b:
         58:a3:52:f7:bb:c4:ec:47:1a:39:fe:be:f7:80:8d:04:f2:df:
         07:99:bc:5c:82:31:ec:30:d4:09:27:d4:4e:87:ae:d4:8e:ae:
         79:8f:65:70:4e:7f:46:dc:03:da:9f:3d:bc:9d:60:58:a6:a7:
         c9:db:b0:88:cd:fa:13:99:e5:03:d2:33:73:b5:43:66:3c:98:
         43:2c:8f:6b:26:2f:07:e4:d6:85:4d:85:ee:69:67:1f:5b:76:
         2c:01:df:db:9e:aa:7d:46:5b:24:d1:88:ed:fa:1f:a8:11:4f:
         03:46:9a:60
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUK7j7/WR61ugs6vkjO4oJCgHj+RQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQxNDQxNDNaFw0yNTA0MDMxNDQ2NDNaMDMxMTAvBgNV
BAMTKDEwMkU4RDIwMUZFRkJEMThEQTE3RkExNjIyODU4QkIyNzc4NEQ1MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+cREQvo5ZSLfNtAZd8ytcISeJ
x9Fegu+1fL8J3vyE6XjjHn6RsL/pXDdPvl0S++HYrCFrTH76UV5Vn90tx8cLy1jJ
GrxqiROKNVDsDR8DP6en3RaysA35NlYFYSa1WsEqGKvAMhn8YJlGavDkf1bxQ9lb
VIKtWSQyQ/b32FQDggQGNjPzCtofXQ1m4+npJu53QKGJ3O2x1zuO4Fw4eO/RyvPU
8enpS4tHJM/gOyLDV1S8ey1btqYzeHYvdD4MXoic0Ibr8eUHievsQqkR+OJ5zJHp
k/dpGHgyKD2TwAslipNEnzBIR2dDWAey27P/e8l4yLRaMKRRplhP06M9+fFxAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQQLo0gH++9GNoX
+hYihYuyd4TVHzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQWNk
eW5jTnVwSDlhZ2M4TXNoQmRidERYN0JDM1M0UFBCU2hvVGJqU3M2RkUvMi8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Fj
ZHluY051cEg5YWdjOE1zaEJkYnREWDdCQzNTNFBQQlNob1RialNzNkZFLzIvMTAy
RThEMjAxRkVGQkQxOERBMTdGQTE2MjI4NThCQjI3Nzg0RDUxRi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCvlMwMA0EAgACMAcDBQAoBGp0MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQgATANBgkqhkiG9w0BAQsFAAOCAQEAyKbkgTf+l1SoykBd
7J44mApnuVPn8JmEY15zx7U88dk2aWXwwnd3oLh6giXKinmvJdYp2LSQ6mC2KBFa
+r7iDGbBpt/ti6PWoZS5rIHDhkgCj21t2PcjXk2mS+QplKKYKEWqEkLYzrLjjBYr
gRqwloXCaxJQP7MuOPR0LX0odJNM3yrcOnFQ5cikpQXJXlqbWKNS97vE7EcaOf6+
94CNBPLfB5m8XIIx7DDUCSfUToeu1I6ueY9lcE5/RtwD2p89vJ1gWKanyduwiM36
E5nlA9Izc7VDZjyYQyyPayYvB+TWhU2F7mlnH1t2LAHf256qfUZbJNGI7fofqBFP
A0aaYA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:15 2024 by rpki-client on console-fra.rpki-client.org