Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1.cer
File:                     14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1.cer (raw, json)
Hash identifier:          F8Z4WWIQGIzCmwTBHqX8cMBeMqbbiBDPAFvM7i4bPg0=
Subject key identifier:   14:DA:F3:CA:35:6C:52:B0:3F:2B:DD:7F:43:D3:D5:BC:B2:4D:25:C1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5955ED54F644802A86413C814C482F56B051083B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 26 Apr 2024 14:39:19 +0000
Certificate not after:    Fri 25 Apr 2025 14:44:19 +0000
Subordinate resources:    AS: 263483
                          IP: 191.242.224.0/22
                          IP: 2804:128c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 20:55:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:55:ed:54:f6:44:80:2a:86:41:3c:81:4c:48:2f:56:b0:51:08:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 26 14:39:19 2024 GMT
            Not After : Apr 25 14:44:19 2025 GMT
        Subject: CN=14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f3:95:59:6b:2e:f3:05:89:b0:81:b5:89:12:
                    46:bf:12:d3:c9:31:6e:82:d5:9a:5b:c0:a4:b8:3d:
                    aa:5c:f8:95:6c:4c:db:e3:6a:ef:eb:5f:da:a3:9a:
                    e8:01:31:87:87:e8:ca:30:fa:12:1a:33:09:2c:f5:
                    dd:3b:43:79:52:08:76:dd:47:15:f0:19:15:fb:30:
                    bc:4e:c7:a2:13:8c:15:3a:8a:f1:d3:68:d5:16:dc:
                    4b:04:60:22:c6:b1:04:00:86:44:cb:8f:62:b2:9a:
                    38:47:bd:b7:3b:cc:ea:5a:7a:f8:c2:e9:a7:e1:0c:
                    b9:1a:14:70:da:14:f1:34:d4:c5:f1:4e:df:50:c1:
                    db:08:b7:cc:2b:cb:27:2b:be:d8:59:da:d1:02:c6:
                    94:97:f3:bb:fe:bf:bc:87:0a:66:dd:7c:0e:8d:80:
                    61:64:5c:8e:e2:c8:f9:93:e9:c2:07:68:4a:62:fe:
                    ad:2f:47:d0:ac:50:8f:7b:92:88:b1:26:dc:dc:5a:
                    3d:40:e5:d5:13:57:6b:aa:dd:50:c5:bf:30:65:b0:
                    cc:9b:4a:ae:04:2e:38:0e:ae:87:3c:e1:62:72:48:
                    0b:0d:0d:84:0a:05:d6:c7:34:bb:23:ec:7a:75:f7:
                    1e:db:f0:38:c6:52:a0:fe:7e:2b:4c:b1:c7:61:dc:
                    8e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                14:DA:F3:CA:35:6C:52:B0:3F:2B:DD:7F:43:D3:D5:BC:B2:4D:25:C1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.224.0/22
                IPv6:
                  2804:128c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263483

    Signature Algorithm: sha256WithRSAEncryption
         61:61:cf:b2:6b:84:3a:13:74:94:9f:2e:a7:4e:ca:59:5a:76:
         20:e5:fc:70:4d:b3:14:b7:0b:3e:f7:0a:76:0b:ca:a4:ee:68:
         e8:67:1a:8f:74:85:1c:3f:58:57:e1:3f:6c:97:66:73:d5:50:
         0b:c8:70:95:da:d1:7a:fa:e2:3f:2c:6f:b8:b3:06:cf:2b:69:
         44:4b:de:86:69:ee:83:7a:52:e4:dd:cd:a6:02:6b:0c:a8:f3:
         e5:4f:99:db:c1:bf:f3:7b:ca:58:4f:4d:37:e1:c9:70:9a:0c:
         69:e9:6a:75:d3:12:a1:95:0a:fc:65:64:3d:26:c4:e5:e5:a5:
         c6:79:6f:9a:01:57:a9:c3:96:5b:02:2e:49:91:af:b8:59:83:
         26:cd:a8:25:fa:69:48:ba:d0:55:af:4d:c3:c1:86:87:10:b2:
         dc:0f:b7:41:e3:6c:49:c0:a2:b7:31:dc:16:e3:29:8b:02:d3:
         4d:1b:c8:2d:b3:48:d9:d1:e4:ac:04:c1:9f:8a:5f:92:fd:a3:
         03:71:3f:2f:6c:d9:0d:1c:2e:ec:87:77:28:d3:14:92:31:e3:
         42:29:c2:a4:11:18:78:ae:18:38:87:92:37:2e:1e:a3:01:fc:
         2c:b7:6d:2f:c8:05:64:83:65:9a:a6:9c:93:70:20:46:47:34:
         cb:b6:24:b7
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUWVXtVPZEgCqGQTyBTEgvVrBRCDswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MjYxNDM5MTlaFw0yNTA0MjUxNDQ0MTlaMDMxMTAvBgNV
BAMTKDE0REFGM0NBMzU2QzUyQjAzRjJCREQ3RjQzRDNENUJDQjI0RDI1QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/85VZay7zBYmwgbWJEka/EtPJ
MW6C1ZpbwKS4Papc+JVsTNvjau/rX9qjmugBMYeH6Mow+hIaMwks9d07Q3lSCHbd
RxXwGRX7MLxOx6ITjBU6ivHTaNUW3EsEYCLGsQQAhkTLj2KymjhHvbc7zOpaevjC
6afhDLkaFHDaFPE01MXxTt9QwdsIt8wryycrvthZ2tECxpSX87v+v7yHCmbdfA6N
gGFkXI7iyPmT6cIHaEpi/q0vR9CsUI97koixJtzcWj1A5dUTV2uq3VDFvzBlsMyb
Sq4ELjgOroc84WJySAsNDYQKBdbHNLsj7Hp19x7b8DjGUqD+fitMscdh3I4BAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQU2vPKNWxSsD8r
3X9D09W8sk0lwTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR0RZ
M2YzRGZOazhtdG1BaUhxOGpRN1R6c2dBY0JITnZQbkNmS3VOZFVtNzgvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dE
WTNmM0RmTms4bXRtQWlIcThqUTdUenNnQWNCSE52UG5DZkt1TmRVbTc4LzAvMTRE
QUYzQ0EzNTZDNTJCMDNGMkJERDdGNDNEM0Q1QkNCMjREMjVDMS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCv/LgMA0EAgACMAcDBQAoBBKMMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQFOzANBgkqhkiG9w0BAQsFAAOCAQEAYWHPsmuEOhN0lJ8u
p07KWVp2IOX8cE2zFLcLPvcKdgvKpO5o6Gcaj3SFHD9YV+E/bJdmc9VQC8hwldrR
evriPyxvuLMGzytpREvehmnug3pS5N3NpgJrDKjz5U+Z28G/83vKWE9NN+HJcJoM
aelqddMSoZUK/GVkPSbE5eWlxnlvmgFXqcOWWwIuSZGvuFmDJs2oJfppSLrQVa9N
w8GGhxCy3A+3QeNsScCitzHcFuMpiwLTTRvILbNI2dHkrATBn4pfkv2jA3E/L2zZ
DRwu7Id3KNMUkjHjQinCpBEYeK4YOIeSNy4eowH8LLdtL8gFZINlmqack3AgRkc0
y7Yktw==
-----END CERTIFICATE-----
Generated at Tue Jun 18 20:44:14 2024 by rpki-client on console-fra.rpki-client.org