Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer
File:                     1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer (raw, json)
Hash identifier:          Fpx+xuWrIvKF+Esr7BcMhjxz7La9L7awLIEHd2/Ug5A=
Subject key identifier:   1D:8D:63:16:65:74:8A:7E:3D:1B:22:EA:B3:E9:67:5F:5F:67:56:D0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1F9759B0B9A8692F67026AA251FA3C9EFF90291A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:26:08 +0000
Certificate not after:    Wed 02 Apr 2025 18:31:08 +0000
Subordinate resources:    AS: 263585
                          IP: 179.109.128.0/19
                          IP: 2804:f6c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:97:59:b0:b9:a8:69:2f:67:02:6a:a2:51:fa:3c:9e:ff:90:29:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:26:08 2024 GMT
            Not After : Apr  2 18:31:08 2025 GMT
        Subject: CN=1D8D631665748A7E3D1B22EAB3E9675F5F6756D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a2:a4:23:d1:58:dc:4c:86:8e:ec:14:68:ef:
                    7c:3e:6d:27:f0:5d:5a:9c:f8:53:f8:b7:d9:11:7b:
                    d5:45:bb:63:c4:b0:ef:45:c2:ce:c3:53:90:30:3e:
                    45:49:84:6c:45:ff:d0:a7:9a:c8:71:9b:37:75:2c:
                    27:2b:34:88:ae:f8:eb:79:d0:c0:30:f4:2a:b4:ed:
                    22:14:cb:ec:c5:58:20:20:44:b3:cb:3c:3f:c2:39:
                    33:6b:e1:e2:f7:7e:6d:de:20:f1:a0:cf:2e:19:cb:
                    b1:4a:d3:84:00:77:bd:de:3a:da:f6:4a:fb:66:0b:
                    fb:3e:df:d7:8c:8a:b8:93:be:ca:66:aa:68:62:b9:
                    bc:56:e6:fb:4c:02:52:71:97:4f:41:4a:a4:1b:eb:
                    3f:56:78:af:ee:8a:7e:20:fd:ea:d0:34:d9:44:f8:
                    54:02:f3:02:7f:00:a4:ca:b2:d6:12:a2:85:cd:a5:
                    f8:f0:44:4a:06:a3:35:ea:f8:2e:db:03:78:21:d6:
                    7d:d1:09:5b:f4:b1:39:93:14:b2:67:69:89:28:45:
                    8f:02:29:63:4c:18:99:13:f0:07:a4:73:b4:3a:37:
                    79:35:7f:34:0d:d2:9f:86:bc:c6:98:17:ad:58:c8:
                    39:8e:9f:9c:22:2f:14:1f:09:ee:83:3f:dc:98:f3:
                    3d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1D:8D:63:16:65:74:8A:7E:3D:1B:22:EA:B3:E9:67:5F:5F:67:56:D0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.128.0/19
                IPv6:
                  2804:f6c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263585

    Signature Algorithm: sha256WithRSAEncryption
         88:ea:bb:1d:31:b3:7b:89:47:8a:73:49:6c:42:6e:15:20:a9:
         6b:49:a3:1c:ed:ec:15:b0:5a:38:79:ac:e7:58:85:60:fa:af:
         2c:de:8b:99:a5:a2:c6:83:d6:80:a5:64:7c:be:3a:7f:63:b5:
         0e:8a:40:d5:cf:7c:b1:3e:6a:e2:8b:1a:8a:18:d6:ee:e0:5d:
         b0:01:26:11:6a:f4:23:98:80:58:3d:85:db:b0:27:90:19:72:
         d1:86:db:9e:53:6b:21:a8:14:ec:09:3b:78:97:b0:6d:da:73:
         14:30:29:f5:a4:09:cb:8d:31:0b:f4:5c:35:a8:15:33:cd:c8:
         7f:ab:e0:54:c4:10:2f:d7:fa:66:97:a2:e9:47:f3:2a:5a:67:
         c7:c0:67:e5:02:9b:c4:b8:13:33:aa:95:93:4b:d8:a5:97:d1:
         e5:ca:7f:25:9b:09:71:a4:03:3b:4e:f9:3c:a9:f1:67:a3:0e:
         a7:1a:b3:a5:8a:98:d4:77:37:3f:09:78:0e:82:4f:fc:a0:43:
         54:11:95:6b:1a:0a:47:f3:e0:7f:45:76:05:86:c1:52:c0:b6:
         81:d5:63:f9:59:21:b6:27:cc:36:f7:84:bc:6b:12:1d:34:37:
         9d:6e:70:fc:ac:eb:bf:08:b8:17:68:e8:67:00:aa:d3:0f:77:
         2b:61:d3:77
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUH5dZsLmoaS9nAmqiUfo8nv+QKRowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMxODI2MDhaFw0yNTA0MDIxODMxMDhaMDMxMTAvBgNV
BAMTKDFEOEQ2MzE2NjU3NDhBN0UzRDFCMjJFQUIzRTk2NzVGNUY2NzU2RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCboqQj0VjcTIaO7BRo73w+bSfw
XVqc+FP4t9kRe9VFu2PEsO9Fws7DU5AwPkVJhGxF/9Cnmshxmzd1LCcrNIiu+Ot5
0MAw9Cq07SIUy+zFWCAgRLPLPD/COTNr4eL3fm3eIPGgzy4Zy7FK04QAd73eOtr2
SvtmC/s+39eMiriTvspmqmhiubxW5vtMAlJxl09BSqQb6z9WeK/uin4g/erQNNlE
+FQC8wJ/AKTKstYSooXNpfjwREoGozXq+C7bA3gh1n3RCVv0sTmTFLJnaYkoRY8C
KWNMGJkT8Aekc7Q6N3k1fzQN0p+GvMaYF61YyDmOn5wiLxQfCe6DP9yY8z2nAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQdjWMWZXSKfj0b
Iuqz6WdfX2dW0DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOFBS
UldDV1dqUUxuZFR0aHg3UGVHV2hOOHVlb2J2SnVtRHI5OHBoU2ttTVQvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhQ
UlJXQ1dXalFMbmRUdGh4N1BlR1doTjh1ZW9idkp1bURyOThwaFNrbU1ULzEvMUQ4
RDYzMTY2NTc0OEE3RTNEMUIyMkVBQjNFOTY3NUY1RjY3NTZEMC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQFs22AMA0EAgACMAcDBQAoBA9sMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQFoTANBgkqhkiG9w0BAQsFAAOCAQEAiOq7HTGze4lHinNJ
bEJuFSCpa0mjHO3sFbBaOHms51iFYPqvLN6LmaWixoPWgKVkfL46f2O1DopA1c98
sT5q4osaihjW7uBdsAEmEWr0I5iAWD2F27AnkBly0YbbnlNrIagU7Ak7eJewbdpz
FDAp9aQJy40xC/RcNagVM83If6vgVMQQL9f6Zpei6UfzKlpnx8Bn5QKbxLgTM6qV
k0vYpZfR5cp/JZsJcaQDO075PKnxZ6MOpxqzpYqY1Hc3Pwl4DoJP/KBDVBGVaxoK
R/Pgf0V2BYbBUsC2gdVj+VkhtifMNveEvGsSHTQ3nW5w/Kzrvwi4F2joZwCq0w93
K2HTdw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:55 2024 by rpki-client on console-ams.rpki-client.org