Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1B09EBB67C9B35E19584F3CF3801F0C7FA94194F.cer
File:                     1B09EBB67C9B35E19584F3CF3801F0C7FA94194F.cer (raw, json)
Hash identifier:          DtQAP59r71bxK/BsJOF5QQV2beViOpBNerNoWmsUIkQ=
Subject key identifier:   1B:09:EB:B6:7C:9B:35:E1:95:84:F3:CF:38:01:F0:C7:FA:94:19:4F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6548E10A6FA61EC8804A85C017BF88B49369AA39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/1B09EBB67C9B35E19584F3CF3801F0C7FA94194F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 09 Sep 2024 16:35:06 +0000
Certificate not after:    Mon 08 Sep 2025 16:40:06 +0000
Subordinate resources:    AS: 267077
                          IP: 45.228.104.0/22
                          IP: 2804:47cc::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:48:e1:0a:6f:a6:1e:c8:80:4a:85:c0:17:bf:88:b4:93:69:aa:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep  9 16:35:06 2024 GMT
            Not After : Sep  8 16:40:06 2025 GMT
        Subject: CN=1B09EBB67C9B35E19584F3CF3801F0C7FA94194F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d1:e5:ae:01:6c:e1:2a:6f:07:cb:d2:fc:e7:
                    3f:ca:f5:ed:e6:39:1d:da:de:35:11:ff:01:58:b6:
                    91:a9:9b:07:c0:13:86:ed:d1:0c:2e:9a:b8:c4:a1:
                    fa:a1:64:11:6f:7d:9d:91:a5:a3:55:bb:9f:f4:b3:
                    15:e4:64:6d:1d:7c:e3:6c:4f:5d:00:75:81:1e:00:
                    1c:b6:78:2a:fd:a3:74:7f:66:65:a9:92:28:ba:b1:
                    d7:10:7a:a6:73:d6:f3:46:49:e8:37:a0:ce:ae:68:
                    c9:23:4b:bf:17:69:91:c9:64:44:54:dc:3f:95:84:
                    ca:1d:cd:4b:8a:46:0d:2f:f7:d8:c0:00:26:66:d0:
                    f5:1b:aa:75:73:a8:94:b2:55:2c:72:67:cd:72:ab:
                    c3:14:10:b2:73:fe:8b:0c:e3:30:99:58:81:79:f7:
                    30:5f:13:a9:09:91:e8:d5:e0:d6:82:19:9f:06:e3:
                    6e:3e:d6:ec:ce:19:87:df:14:18:2c:71:53:f1:f4:
                    25:48:b8:e1:0e:d0:e1:b2:6d:a0:09:bd:0a:c2:55:
                    ef:bc:61:27:54:72:e6:7b:6d:29:5a:e7:51:30:de:
                    6d:74:6a:13:b6:84:79:74:38:50:0a:92:7d:11:11:
                    cd:da:2c:8f:75:18:75:d0:97:6e:78:55:1c:18:f0:
                    fc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1B:09:EB:B6:7C:9B:35:E1:95:84:F3:CF:38:01:F0:C7:FA:94:19:4F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/1B09EBB67C9B35E19584F3CF3801F0C7FA94194F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.104.0/22
                IPv6:
                  2804:47cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267077

    Signature Algorithm: sha256WithRSAEncryption
         89:fc:28:15:fd:51:a7:b2:85:93:27:60:6e:66:f7:ab:89:16:
         0d:18:7f:ae:e7:47:b7:66:2d:44:1b:74:ea:25:3a:78:65:51:
         b6:57:33:1e:64:03:f1:79:41:d2:fb:a1:82:55:3d:91:e2:76:
         ac:f5:9e:fb:11:8d:68:6b:49:23:af:be:70:07:f1:a5:c4:00:
         b7:29:32:85:0a:a9:bd:b0:b8:c8:d5:0c:99:8d:7d:83:89:f4:
         c4:9b:f4:ee:0a:17:76:32:3a:d0:bf:d6:4d:7a:10:7e:82:ec:
         47:c1:01:75:0a:e8:67:c6:aa:a0:7f:e3:15:5a:0c:47:95:71:
         72:f3:f5:1c:2c:fa:13:c2:c4:6b:80:53:9b:39:65:71:77:3a:
         a1:a4:40:fb:1a:7b:c9:9d:7d:a4:8c:88:8d:c3:a5:37:fb:99:
         cf:16:aa:71:3c:77:70:32:0c:22:6b:d5:63:48:93:d8:fb:77:
         34:5e:5f:a9:3e:74:85:ab:44:42:81:6d:2b:c3:80:ce:42:3e:
         68:23:a2:37:43:24:48:58:72:79:33:52:13:b2:43:8e:b3:17:
         78:56:71:03:2c:ff:bb:7f:11:b9:3b:d2:f0:bd:ce:c0:49:2b:
         9d:f4:14:79:b4:42:3b:7a:1e:79:49:5f:98:6e:25:3e:ad:c2:
         d7:04:32:6c
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUZUjhCm+mHsiASoXAF7+ItJNpqjkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA5MDkxNjM1MDZaFw0yNTA5MDgxNjQwMDZaMDMxMTAvBgNV
BAMTKDFCMDlFQkI2N0M5QjM1RTE5NTg0RjNDRjM4MDFGMEM3RkE5NDE5NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW0eWuAWzhKm8Hy9L85z/K9e3m
OR3a3jUR/wFYtpGpmwfAE4bt0QwumrjEofqhZBFvfZ2RpaNVu5/0sxXkZG0dfONs
T10AdYEeABy2eCr9o3R/ZmWpkii6sdcQeqZz1vNGSeg3oM6uaMkjS78XaZHJZERU
3D+VhModzUuKRg0v99jAACZm0PUbqnVzqJSyVSxyZ81yq8MUELJz/osM4zCZWIF5
9zBfE6kJkejV4NaCGZ8G424+1uzOGYffFBgscVPx9CVIuOEO0OGybaAJvQrCVe+8
YSdUcuZ7bSla51Ew3m10ahO2hHl0OFAKkn0REc3aLI91GHXQl254VRwY8PwfAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQbCeu2fJs14ZWE
8884AfDH+pQZTzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOFph
VUpBZ01Yall0WjhwZW9LMnlCY0hkeGpKU0FZMmI5U3pYczQ3NjNLMUovMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzha
YVVKQWdNWGpZdFo4cGVvSzJ5QmNIZHhqSlNBWTJiOVN6WHM0NzYzSzFKLzAvMUIw
OUVCQjY3QzlCMzVFMTk1ODRGM0NGMzgwMUYwQzdGQTk0MTk0Ri5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLeRoMA0EAgACMAcDBQAoBEfMMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQTRTANBgkqhkiG9w0BAQsFAAOCAQEAifwoFf1Rp7KFkydg
bmb3q4kWDRh/rudHt2YtRBt06iU6eGVRtlczHmQD8XlB0vuhglU9keJ2rPWe+xGN
aGtJI6++cAfxpcQAtykyhQqpvbC4yNUMmY19g4n0xJv07goXdjI60L/WTXoQfoLs
R8EBdQroZ8aqoH/jFVoMR5VxcvP1HCz6E8LEa4BTmzllcXc6oaRA+xp7yZ19pIyI
jcOlN/uZzxaqcTx3cDIMImvVY0iT2Pt3NF5fqT50hatEQoFtK8OAzkI+aCOiN0Mk
SFhyeTNSE7JDjrMXeFZxAyz/u38RuTvS8L3OwEkrnfQUebRCO3oeeUlfmG4lPq3C
1wQybA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:40 2024 by rpki-client on console-ams.rpki-client.org