Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/14DCE6323F84F3FE671A04D650359F18CDAE5603.cer
File:                     14DCE6323F84F3FE671A04D650359F18CDAE5603.cer (raw, json)
Hash identifier:          gMp3r2lSAJGkf1u31VaZaQJH1k1QZF5Vsn0c7H7Zc7E=
Subject key identifier:   14:DC:E6:32:3F:84:F3:FE:67:1A:04:D6:50:35:9F:18:CD:AE:56:03
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3E712DF160A40E6733C2900D0E3437F2B0424B79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CxLacMP8HhzLvRZpei26FAEXZkmJXCMC1iTEGJwMHyNX/1/14DCE6323F84F3FE671A04D650359F18CDAE5603.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CxLacMP8HhzLvRZpei26FAEXZkmJXCMC1iTEGJwMHyNX/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 06:15:46 +0000
Certificate not after:    Thu 03 Apr 2025 06:20:46 +0000
Subordinate resources:    AS: 270780
                          IP: 186.233.24.0/22
                          IP: 2804:714c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:71:2d:f1:60:a4:0e:67:33:c2:90:0d:0e:34:37:f2:b0:42:4b:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 06:15:46 2024 GMT
            Not After : Apr  3 06:20:46 2025 GMT
        Subject: CN=14DCE6323F84F3FE671A04D650359F18CDAE5603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f1:e2:b4:6c:22:69:94:31:e1:90:9e:00:01:
                    ed:f6:4b:f2:09:a4:11:4e:6a:fc:48:d3:19:6e:68:
                    ee:ef:78:b0:c4:9e:54:df:5f:09:cf:1b:6d:59:ef:
                    21:6a:00:c1:58:8b:ec:dd:09:d5:85:7e:85:b6:ae:
                    8e:91:26:6c:3b:3f:42:34:52:96:5c:fd:72:44:3b:
                    ba:37:5b:c2:06:27:aa:6d:71:f3:f7:13:c3:db:61:
                    7f:39:7e:dc:aa:cc:91:b9:18:0f:b2:2c:16:2c:01:
                    c0:bb:d4:5b:2f:e5:6d:e0:82:7b:38:92:a9:ec:66:
                    1b:7f:70:46:0c:7c:8e:33:e8:ef:af:ad:d2:7b:0b:
                    05:18:d8:6d:72:f9:fa:0c:76:4b:32:d1:17:9a:4f:
                    9f:a2:8e:ee:56:d5:ff:ca:05:5b:fd:32:fb:e9:e8:
                    02:db:9d:f9:05:34:14:6e:48:50:00:d5:55:6b:01:
                    04:a1:b7:70:e1:af:3d:ec:4c:13:36:a3:90:0c:5c:
                    cb:8d:ae:3f:bf:b0:39:10:ab:58:21:0d:83:c9:23:
                    b7:eb:f2:d9:99:3b:46:4f:a6:6f:d3:cf:26:54:09:
                    2f:8d:84:bc:36:76:6c:bf:96:6e:3c:37:b3:0e:2c:
                    c9:ef:84:8e:f7:a3:e2:a1:77:34:79:2a:3e:97:69:
                    b8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                14:DC:E6:32:3F:84:F3:FE:67:1A:04:D6:50:35:9F:18:CD:AE:56:03
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CxLacMP8HhzLvRZpei26FAEXZkmJXCMC1iTEGJwMHyNX/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CxLacMP8HhzLvRZpei26FAEXZkmJXCMC1iTEGJwMHyNX/1/14DCE6323F84F3FE671A04D650359F18CDAE5603.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.24.0/22
                IPv6:
                  2804:714c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270780

    Signature Algorithm: sha256WithRSAEncryption
         6e:3c:84:b9:d3:f0:8e:03:c5:48:1a:d6:7c:03:6e:0c:10:4c:
         94:e3:95:f5:29:84:71:64:31:6b:9c:d1:dc:a7:13:61:37:5a:
         fb:88:91:ea:03:4c:2f:20:c0:cb:52:75:d5:62:85:52:a2:72:
         25:62:a8:ec:82:ad:75:51:1c:c9:7d:d6:88:ee:2e:d9:91:22:
         2c:37:08:33:c1:92:b5:c7:e4:4a:1e:54:68:a3:16:da:ca:e6:
         88:81:55:02:28:0f:f3:19:d0:61:11:d1:ff:da:30:f2:cf:81:
         c4:3c:3c:b8:f8:ce:09:5b:bb:7d:af:46:20:55:05:80:08:07:
         33:c6:12:36:85:13:b8:0c:2c:62:23:4f:f8:c2:f1:44:9f:ab:
         2a:6b:bc:f2:34:cc:66:e3:af:f5:da:15:8c:f2:fc:c9:26:15:
         67:21:32:92:98:32:14:00:7d:7e:df:6c:bb:92:48:b5:64:01:
         dd:f1:e8:b5:01:bd:64:0f:af:5e:33:fe:ca:b6:11:83:f5:14:
         81:5e:b2:0e:f9:bd:8f:b8:6a:d5:93:f9:d4:f3:9d:7d:b2:91:
         f7:a4:6a:80:dc:b7:df:ae:9b:d0:fd:ab:7c:59:80:ab:cd:2d:
         15:94:b4:9a:ee:bf:b6:b9:2b:ab:c8:5b:13:95:bf:68:e0:f3:
         ed:c2:09:33
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUPnEt8WCkDmczwpANDjQ38rBCS3kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwNjE1NDZaFw0yNTA0MDMwNjIwNDZaMDMxMTAvBgNV
BAMTKDE0RENFNjMyM0Y4NEYzRkU2NzFBMDRENjUwMzU5RjE4Q0RBRTU2MDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv8eK0bCJplDHhkJ4AAe32S/IJ
pBFOavxI0xluaO7veLDEnlTfXwnPG21Z7yFqAMFYi+zdCdWFfoW2ro6RJmw7P0I0
UpZc/XJEO7o3W8IGJ6ptcfP3E8PbYX85ftyqzJG5GA+yLBYsAcC71Fsv5W3ggns4
kqnsZht/cEYMfI4z6O+vrdJ7CwUY2G1y+foMdksy0ReaT5+iju5W1f/KBVv9Mvvp
6ALbnfkFNBRuSFAA1VVrAQSht3Dhrz3sTBM2o5AMXMuNrj+/sDkQq1ghDYPJI7fr
8tmZO0ZPpm/TzyZUCS+NhLw2dmy/lm48N7MOLMnvhI73o+KhdzR5Kj6XabjdAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQU3OYyP4Tz/mca
BNZQNZ8Yza5WAzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ3hM
YWNNUDhIaHpMdlJacGVpMjZGQUVYWmttSlhDTUMxaVRFR0p3TUh5TlgvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0N4
TGFjTVA4SGh6THZSWnBlaTI2RkFFWFprbUpYQ01DMWlURUdKd01IeU5YLzEvMTRE
Q0U2MzIzRjg0RjNGRTY3MUEwNEQ2NTAzNTlGMThDREFFNTYwMy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCuukYMA0EAgACMAcDBQAoBHFMMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQhvDANBgkqhkiG9w0BAQsFAAOCAQEAbjyEudPwjgPFSBrW
fANuDBBMlOOV9SmEcWQxa5zR3KcTYTda+4iR6gNMLyDAy1J11WKFUqJyJWKo7IKt
dVEcyX3WiO4u2ZEiLDcIM8GStcfkSh5UaKMW2srmiIFVAigP8xnQYRHR/9ow8s+B
xDw8uPjOCVu7fa9GIFUFgAgHM8YSNoUTuAwsYiNP+MLxRJ+rKmu88jTMZuOv9doV
jPL8ySYVZyEykpgyFAB9ft9su5JItWQB3fHotQG9ZA+vXjP+yrYRg/UUgV6yDvm9
j7hq1ZP51POdfbKR96RqgNy3366b0P2rfFmAq80tFZS0mu6/trkrq8hbE5W/aODz
7cIJMw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:16 2024 by rpki-client on console-fra.rpki-client.org