Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1C56253CEF2C7C6D01C4D0C06935463CFCD2140F.cer
File:                     1C56253CEF2C7C6D01C4D0C06935463CFCD2140F.cer (raw, json)
Hash identifier:          tR4g70v6Zq4dYJediJbW0LFgcMeWbRBCtSbb8Mtj+O0=
Subject key identifier:   1C:56:25:3C:EF:2C:7C:6D:01:C4:D0:C0:69:35:46:3C:FC:D2:14:0F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4A2F8EAD57D811E3B92A90A99A7A874C86ACD745
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2VvJ4R92QD8jtcxUqPMifL15B6LQiZM4gU3t55TwKaWZ/0/1C56253CEF2C7C6D01C4D0C06935463CFCD2140F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2VvJ4R92QD8jtcxUqPMifL15B6LQiZM4gU3t55TwKaWZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 19 Sep 2024 01:47:14 +0000
Certificate not after:    Thu 18 Sep 2025 01:52:14 +0000
Subordinate resources:    AS: 265162
                          IP: 143.255.228.0/22
                          IP: 2804:2b98::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:2f:8e:ad:57:d8:11:e3:b9:2a:90:a9:9a:7a:87:4c:86:ac:d7:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 19 01:47:14 2024 GMT
            Not After : Sep 18 01:52:14 2025 GMT
        Subject: CN=1C56253CEF2C7C6D01C4D0C06935463CFCD2140F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bb:65:b4:77:e1:b6:cc:23:aa:8d:99:f9:84:
                    1f:86:b5:14:d2:90:42:18:bd:26:b4:84:e8:45:cf:
                    dd:7e:c0:29:cd:09:eb:0c:8e:e7:75:23:6d:5b:49:
                    1c:cf:20:4c:40:86:28:eb:0c:d8:a3:51:63:32:67:
                    b1:be:f4:b4:a6:dd:60:bf:32:5d:d3:60:3a:95:b6:
                    0a:f2:4e:1e:d6:4f:48:1f:ab:fc:b8:b0:fb:d7:bb:
                    1d:37:25:dd:f5:ce:c7:7d:8a:a7:91:71:fd:55:df:
                    fe:e6:9c:f4:63:b9:3e:de:d7:76:1b:5a:bd:67:22:
                    09:f1:83:9c:9c:c2:3d:54:1b:b8:90:3d:29:19:01:
                    fd:f0:e1:6d:43:5c:40:8c:ac:63:24:4a:89:2e:0c:
                    cd:13:84:56:5b:69:44:7c:0c:3a:83:c1:d0:72:05:
                    af:8e:0a:15:0e:b5:94:dd:79:18:c0:07:94:0d:45:
                    05:d0:8f:3a:ec:2a:0d:e6:de:15:80:49:1c:db:de:
                    68:61:59:da:b5:23:5c:f1:28:c1:74:a3:c2:9a:df:
                    fd:3f:f9:1f:15:f8:54:7b:69:fb:b4:b7:20:6a:a8:
                    a4:a1:82:4d:3e:09:39:e6:59:aa:dc:41:c7:81:dd:
                    2a:b0:c7:e1:cb:54:43:2d:73:34:f5:cc:92:3a:ff:
                    db:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1C:56:25:3C:EF:2C:7C:6D:01:C4:D0:C0:69:35:46:3C:FC:D2:14:0F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2VvJ4R92QD8jtcxUqPMifL15B6LQiZM4gU3t55TwKaWZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2VvJ4R92QD8jtcxUqPMifL15B6LQiZM4gU3t55TwKaWZ/0/1C56253CEF2C7C6D01C4D0C06935463CFCD2140F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.228.0/22
                IPv6:
                  2804:2b98::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265162

    Signature Algorithm: sha256WithRSAEncryption
         53:df:5d:aa:c9:ea:34:6a:e4:d2:57:b5:e4:68:84:9e:75:31:
         11:20:0f:7f:95:ad:71:af:e2:64:23:da:7c:cc:45:4c:4e:cc:
         7b:63:7d:de:27:05:0f:2e:63:e7:d9:6c:64:63:37:7d:97:e2:
         dc:e3:ff:2d:e4:f0:86:18:67:77:c6:af:bb:f2:69:6e:e9:5c:
         04:8c:e6:8b:26:19:cd:48:b3:68:4a:f3:45:97:93:21:fd:40:
         40:49:85:72:05:7c:e3:6f:5c:3a:5f:7c:ed:69:ff:14:25:1f:
         1b:fe:4d:13:3a:18:42:0e:14:9a:bb:8e:6c:f5:75:1f:41:c4:
         42:6a:df:02:98:36:a8:77:16:7f:7f:0e:a4:64:c2:f9:e6:f0:
         37:a4:71:45:b1:50:56:f6:eb:84:38:fb:a4:b3:27:5a:20:f1:
         9c:5b:f0:6f:79:c1:b8:cf:52:e5:c6:f6:e2:b3:1e:c3:0d:19:
         7a:88:24:27:c6:fe:20:74:52:20:c9:dc:c9:bd:9f:16:8a:f5:
         4c:a8:88:bd:c7:6f:e4:4a:cd:64:18:61:40:31:7c:46:3b:4f:
         18:43:23:14:02:71:79:58:60:96:bd:ce:3a:ba:5e:fa:3b:f6:
         29:c1:aa:13:3f:9b:1a:fe:7b:ca:96:b7:d3:09:ac:1c:d1:d0:
         7f:3f:6a:a9
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUSi+OrVfYEeO5KpCpmnqHTIas10UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA5MTkwMTQ3MTRaFw0yNTA5MTgwMTUyMTRaMDMxMTAvBgNV
BAMTKDFDNTYyNTNDRUYyQzdDNkQwMUM0RDBDMDY5MzU0NjNDRkNEMjE0MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnu2W0d+G2zCOqjZn5hB+GtRTS
kEIYvSa0hOhFz91+wCnNCesMjud1I21bSRzPIExAhijrDNijUWMyZ7G+9LSm3WC/
Ml3TYDqVtgryTh7WT0gfq/y4sPvXux03Jd31zsd9iqeRcf1V3/7mnPRjuT7e13Yb
Wr1nIgnxg5ycwj1UG7iQPSkZAf3w4W1DXECMrGMkSokuDM0ThFZbaUR8DDqDwdBy
Ba+OChUOtZTdeRjAB5QNRQXQjzrsKg3m3hWASRzb3mhhWdq1I1zxKMF0o8Ka3/0/
+R8V+FR7afu0tyBqqKShgk0+CTnmWarcQceB3Sqwx+HLVEMtczT1zJI6/9vRAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQcViU87yx8bQHE
0MBpNUY8/NIUDzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMlZ2
SjRSOTJRRDhqdGN4VXFQTWlmTDE1QjZMUWlaTTRnVTN0NTVUd0thV1ovMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJW
dko0UjkyUUQ4anRjeFVxUE1pZkwxNUI2TFFpWk00Z1UzdDU1VHdLYVdaLzAvMUM1
NjI1M0NFRjJDN0M2RDAxQzREMEMwNjkzNTQ2M0NGQ0QyMTQwRi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCj//kMA0EAgACMAcDBQAoBCuYMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQLyjANBgkqhkiG9w0BAQsFAAOCAQEAU99dqsnqNGrk0le1
5GiEnnUxESAPf5Wtca/iZCPafMxFTE7Me2N93icFDy5j59lsZGM3fZfi3OP/LeTw
hhhnd8avu/JpbulcBIzmiyYZzUizaErzRZeTIf1AQEmFcgV8429cOl987Wn/FCUf
G/5NEzoYQg4UmruObPV1H0HEQmrfApg2qHcWf38OpGTC+ebwN6RxRbFQVvbrhDj7
pLMnWiDxnFvwb3nBuM9S5cb24rMeww0ZeogkJ8b+IHRSIMncyb2fFor1TKiIvcdv
5ErNZBhhQDF8RjtPGEMjFAJxeVhglr3OOrpe+jv2KcGqEz+bGv57ypa30wmsHNHQ
fz9qqQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:45 2024 by rpki-client on console-ams.rpki-client.org