Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/19FF3CAC4DD2A26EC7E57760D9D9A231D6B5A1E5.cer
File:                     19FF3CAC4DD2A26EC7E57760D9D9A231D6B5A1E5.cer (raw, json)
Hash identifier:          z/a/Qbu3dXgAqqHXewhAxkE5gjC8tH5gBN9xrcL0Pwg=
Subject key identifier:   19:FF:3C:AC:4D:D2:A2:6E:C7:E5:77:60:D9:D9:A2:31:D6:B5:A1:E5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       205DDB9D4CBE4E19C33F713619A2CA77F9C9A8D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/2/19FF3CAC4DD2A26EC7E57760D9D9A231D6B5A1E5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 21:38:15 +0000
Certificate not after:    Thu 03 Apr 2025 21:43:15 +0000
Subordinate resources:    AS: 52551
                          IP: 177.130.112.0/20
                          IP: 2804:cc4::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 23:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:5d:db:9d:4c:be:4e:19:c3:3f:71:36:19:a2:ca:77:f9:c9:a8:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 21:38:15 2024 GMT
            Not After : Apr  3 21:43:15 2025 GMT
        Subject: CN=19FF3CAC4DD2A26EC7E57760D9D9A231D6B5A1E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:60:59:b1:9c:70:81:37:24:fe:9a:0a:e3:a1:
                    4b:f7:d8:2e:67:db:03:72:b5:9f:06:cd:d7:75:ef:
                    2f:fe:81:88:bc:97:86:de:92:b1:97:91:92:50:85:
                    8d:39:e4:e2:da:b7:ba:7f:30:0d:36:d1:1a:f1:5e:
                    26:b3:58:43:7f:6f:65:b4:a3:67:b8:83:38:90:2a:
                    72:d9:99:67:85:fb:23:8c:ee:23:44:df:f4:10:92:
                    c1:80:22:d5:83:00:05:97:d7:72:47:fa:58:fc:f7:
                    73:43:80:61:ef:ef:11:17:b1:b0:e9:f1:3e:c5:45:
                    d5:01:ac:0b:d3:18:75:48:0f:51:6e:65:8c:97:da:
                    b1:44:c7:c8:ab:3f:21:2b:aa:03:f3:54:78:69:e6:
                    55:be:39:32:41:89:a5:78:38:78:69:b7:01:e1:da:
                    7e:80:c2:97:cc:a2:74:da:42:8a:c8:7f:d6:4a:c6:
                    77:a3:39:4b:4c:43:ef:29:fd:3f:7c:7b:be:6c:b4:
                    bf:b0:9d:b4:9d:94:20:20:73:17:71:00:2e:82:24:
                    29:ea:a6:c3:a9:e0:ed:03:15:6a:b9:bd:7a:4e:66:
                    d8:59:04:6e:15:dd:08:84:58:bb:73:c7:a6:76:21:
                    e7:21:fb:2b:a1:7b:bc:5e:89:3b:f0:0b:bf:b9:4b:
                    b2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                19:FF:3C:AC:4D:D2:A2:6E:C7:E5:77:60:D9:D9:A2:31:D6:B5:A1:E5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/2/19FF3CAC4DD2A26EC7E57760D9D9A231D6B5A1E5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.112.0/20
                IPv6:
                  2804:cc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52551

    Signature Algorithm: sha256WithRSAEncryption
         4d:95:f2:63:ab:7e:80:5b:b8:a1:50:e5:ca:44:76:49:2c:4a:
         6e:2a:61:27:0a:c0:9b:82:f0:6d:20:8e:41:64:e6:cb:7a:44:
         53:1c:7e:9e:b6:1a:d0:c0:d0:f3:5d:49:05:40:19:4d:26:d6:
         5b:87:05:2b:55:1d:c0:57:71:44:4d:5e:d7:44:17:27:12:d2:
         9d:e6:dc:dd:4c:0e:c4:52:fc:b9:77:f4:ea:6a:bf:72:ab:68:
         4f:39:05:25:2f:7b:20:7a:55:dc:61:5e:0f:02:b6:3f:e5:87:
         1e:5e:32:48:6d:89:52:0e:5b:07:b2:b5:80:ce:65:b3:6b:2e:
         af:bf:34:82:a4:db:16:7f:e4:28:27:bc:71:34:9d:38:03:9f:
         8e:b6:53:98:f1:41:a5:f3:e0:12:59:f4:fe:36:0f:36:5f:d2:
         ae:9e:15:ec:8e:5c:d6:7f:10:60:39:0f:94:0f:9d:53:72:91:
         e3:53:9f:f9:e0:e1:a2:50:bf:f5:e8:85:8b:f6:3d:c3:b2:9c:
         ab:2b:82:42:4a:3f:73:21:54:ca:d6:16:14:f8:cd:85:be:71:
         18:bf:36:c5:f9:9d:04:8a:41:08:a8:1a:ec:5a:e3:0f:e6:47:
         a0:d9:e1:a7:98:4d:54:b3:bb:a3:0d:32:4a:19:ca:c0:4d:c3:
         b5:d4:56:ca
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUIF3bnUy+ThnDP3E2GaLKd/nJqNkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQyMTM4MTVaFw0yNTA0MDMyMTQzMTVaMDMxMTAvBgNV
BAMTKDE5RkYzQ0FDNEREMkEyNkVDN0U1Nzc2MEQ5RDlBMjMxRDZCNUExRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5YFmxnHCBNyT+mgrjoUv32C5n
2wNytZ8Gzdd17y/+gYi8l4bekrGXkZJQhY055OLat7p/MA020RrxXiazWEN/b2W0
o2e4gziQKnLZmWeF+yOM7iNE3/QQksGAItWDAAWX13JH+lj893NDgGHv7xEXsbDp
8T7FRdUBrAvTGHVID1FuZYyX2rFEx8irPyErqgPzVHhp5lW+OTJBiaV4OHhptwHh
2n6AwpfMonTaQorIf9ZKxnejOUtMQ+8p/T98e75stL+wnbSdlCAgcxdxAC6CJCnq
psOp4O0DFWq5vXpOZthZBG4V3QiEWLtzx6Z2Iech+yuhe7xeiTvwC7+5S7InAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQZ/zysTdKibsfl
d2DZ2aIx1rWh5TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ3ZX
ZGl1TEExckx6djFOOEI4d3c1S2FReVY5M0s2eWpWSnJSamliRDlMZWMvMi8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0N2
V2RpdUxBMXJMenYxTjhCOHd3NUthUXlWOTNLNnlqVkpyUmppYkQ5TGVjLzIvMTlG
RjNDQUM0REQyQTI2RUM3RTU3NzYwRDlEOUEyMzFENkI1QTFFNS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQEsYJwMA0EAgACMAcDBQAoBAzEMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwDNRzANBgkqhkiG9w0BAQsFAAOCAQEATZXyY6t+gFu4oVDl
ykR2SSxKbiphJwrAm4LwbSCOQWTmy3pEUxx+nrYa0MDQ811JBUAZTSbWW4cFK1Ud
wFdxRE1e10QXJxLSnebc3UwOxFL8uXf06mq/cqtoTzkFJS97IHpV3GFeDwK2P+WH
Hl4ySG2JUg5bB7K1gM5ls2sur780gqTbFn/kKCe8cTSdOAOfjrZTmPFBpfPgEln0
/jYPNl/Srp4V7I5c1n8QYDkPlA+dU3KR41Of+eDholC/9eiFi/Y9w7KcqyuCQko/
cyFUytYWFPjNhb5xGL82xfmdBIpBCKga7FrjD+ZHoNnhp5hNVLO7ow0yShnKwE3D
tdRWyg==
-----END CERTIFICATE-----
Generated at Sun Jun 2 00:29:07 2024 by rpki-client on console-ams.rpki-client.org