Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1E8DC34E008DE152D57E76AA4AF28DE8D8ED62EB.cer
File:                     1E8DC34E008DE152D57E76AA4AF28DE8D8ED62EB.cer (raw, json)
Hash identifier:          dxB7zQbznXdvrvC5YUbhMpX2aMycHKzN414m1YS7cXY=
Subject key identifier:   1E:8D:C3:4E:00:8D:E1:52:D5:7E:76:AA:4A:F2:8D:E8:D8:ED:62:EB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       49C7DBEE965161A686CD23326AAAEF0CC8612E68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GgAP3392R3JEZswF7PTHGnAyijoSqjbbSJVyNCZJ7oG6/0/1E8DC34E008DE152D57E76AA4AF28DE8D8ED62EB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GgAP3392R3JEZswF7PTHGnAyijoSqjbbSJVyNCZJ7oG6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 30 Oct 2024 21:28:13 +0000
Certificate not after:    Wed 29 Oct 2025 21:33:13 +0000
Subordinate resources:    AS: 262957
                          IP: 186.226.216.0/22
                          IP: 2804:e78::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c7:db:ee:96:51:61:a6:86:cd:23:32:6a:aa:ef:0c:c8:61:2e:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 30 21:28:13 2024 GMT
            Not After : Oct 29 21:33:13 2025 GMT
        Subject: CN=1E8DC34E008DE152D57E76AA4AF28DE8D8ED62EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a8:3c:2f:46:1f:21:69:b2:80:ac:52:59:4d:
                    8e:d8:0a:ca:2f:13:b8:c8:17:da:ba:d6:0d:69:6d:
                    7d:1f:ca:0c:5d:7b:42:0f:30:b1:a2:0e:3e:cf:25:
                    5a:aa:62:ca:3a:85:2e:a8:24:97:36:45:c3:74:6c:
                    0f:8d:a9:f3:08:43:32:d5:b9:70:35:4a:ab:d1:33:
                    af:11:06:51:a6:b2:b6:fc:0e:62:3c:03:ac:27:08:
                    7c:0e:50:6e:d1:a4:53:48:a6:11:62:47:dc:a4:b1:
                    a6:06:e3:ee:0b:fa:5d:80:76:87:de:75:b0:86:4d:
                    fe:78:0d:bb:f3:87:f3:ab:03:e4:0e:44:bf:e8:9b:
                    20:43:cd:44:f7:dc:fc:36:7d:27:b6:15:8c:77:41:
                    0b:39:26:22:35:8b:30:9f:8a:c7:83:23:72:83:a2:
                    96:17:fa:df:98:56:40:7d:36:81:8d:57:a5:64:8d:
                    1e:51:1b:db:e6:35:db:2e:ab:4f:84:17:5e:97:12:
                    5d:ab:87:13:ac:fc:64:ba:0b:f5:2f:22:6b:83:7a:
                    99:fa:54:13:1c:80:79:09:88:dc:0b:09:a1:3a:3f:
                    b0:bf:cf:27:0f:67:68:3e:13:e1:b7:9c:76:d2:a0:
                    08:bb:5a:fd:ec:3c:5e:25:0c:76:0e:32:f9:b5:a1:
                    c7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1E:8D:C3:4E:00:8D:E1:52:D5:7E:76:AA:4A:F2:8D:E8:D8:ED:62:EB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GgAP3392R3JEZswF7PTHGnAyijoSqjbbSJVyNCZJ7oG6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GgAP3392R3JEZswF7PTHGnAyijoSqjbbSJVyNCZJ7oG6/0/1E8DC34E008DE152D57E76AA4AF28DE8D8ED62EB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.216.0/22
                IPv6:
                  2804:e78::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262957

    Signature Algorithm: sha256WithRSAEncryption
         b8:74:9a:13:4e:4c:68:98:59:a0:30:1f:e3:b4:ea:35:f4:78:
         5a:5d:95:63:af:21:5f:bc:55:f3:fa:dc:a1:57:4d:15:3b:9c:
         15:bc:9d:8f:81:ac:d2:7f:94:f1:44:21:67:22:6b:95:e8:d2:
         8e:03:92:5c:33:e3:f8:58:3c:0c:5c:52:30:da:84:b6:48:51:
         0d:1f:f2:6a:a2:73:35:39:6b:50:46:27:16:38:05:fb:10:35:
         03:d1:81:f6:b2:d8:2b:a5:db:2c:e7:01:03:22:4e:bb:fa:5e:
         54:c8:29:0f:f7:3b:3c:9c:61:e5:9c:38:b5:44:b9:c6:bf:48:
         c4:c1:1b:50:c5:ec:40:90:8a:28:1b:e9:e2:e0:dc:d8:0c:6b:
         88:98:dd:4d:a2:b4:5e:f1:44:15:a6:e5:02:c6:c8:74:c6:ef:
         38:5d:f6:77:4e:b3:4e:3a:b9:8b:69:84:87:c5:84:1d:f5:a2:
         a5:af:ee:47:d8:f2:91:ea:0e:61:ca:57:42:5e:cb:e7:e1:bb:
         49:4b:88:3f:00:89:7d:c2:f4:98:32:09:67:a5:b2:c6:40:13:
         04:80:07:a5:df:b0:03:7d:2a:01:48:20:f4:2c:4e:87:9f:80:
         70:3c:0d:74:b0:9c:8a:72:f8:2d:14:9d:88:cc:40:b8:90:33:
         eb:1b:27:d5
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUScfb7pZRYaaGzSMyaqrvDMhhLmgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDEwMzAyMTI4MTNaFw0yNTEwMjkyMTMzMTNaMDMxMTAvBgNV
BAMTKDFFOERDMzRFMDA4REUxNTJENTdFNzZBQTRBRjI4REU4RDhFRDYyRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmqDwvRh8habKArFJZTY7YCsov
E7jIF9q61g1pbX0fygxde0IPMLGiDj7PJVqqYso6hS6oJJc2RcN0bA+NqfMIQzLV
uXA1SqvRM68RBlGmsrb8DmI8A6wnCHwOUG7RpFNIphFiR9yksaYG4+4L+l2Adofe
dbCGTf54Dbvzh/OrA+QORL/omyBDzUT33Pw2fSe2FYx3QQs5JiI1izCfiseDI3KD
opYX+t+YVkB9NoGNV6VkjR5RG9vmNdsuq0+EF16XEl2rhxOs/GS6C/UvImuDepn6
VBMcgHkJiNwLCaE6P7C/zycPZ2g+E+G3nHbSoAi7Wv3sPF4lDHYOMvm1oceXAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQejcNOAI3hUtV+
dqpK8o3o2O1i6zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR2dB
UDMzOTJSM0pFWnN3RjdQVEhHbkF5aWpvU3FqYmJTSlZ5TkNaSjdvRzYvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dn
QVAzMzkyUjNKRVpzd0Y3UFRIR25BeWlqb1NxamJiU0pWeU5DWko3b0c2LzAvMUU4
REMzNEUwMDhERTE1MkQ1N0U3NkFBNEFGMjhERThEOEVENjJFQi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCuuLYMA0EAgACMAcDBQAoBA54MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQDLTANBgkqhkiG9w0BAQsFAAOCAQEAuHSaE05MaJhZoDAf
47TqNfR4Wl2VY68hX7xV8/rcoVdNFTucFbydj4Gs0n+U8UQhZyJrlejSjgOSXDPj
+Fg8DFxSMNqEtkhRDR/yaqJzNTlrUEYnFjgF+xA1A9GB9rLYK6XbLOcBAyJOu/pe
VMgpD/c7PJxh5Zw4tUS5xr9IxMEbUMXsQJCKKBvp4uDc2AxriJjdTaK0XvFEFabl
AsbIdMbvOF32d06zTjq5i2mEh8WEHfWipa/uR9jykeoOYcpXQl7L5+G7SUuIPwCJ
fcL0mDIJZ6WyxkATBIAHpd+wA30qAUgg9CxOh5+AcDwNdLCcinL4LRSdiMxAuJAz
6xsn1Q==
-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:45 2024 by rpki-client on console-ams.rpki-client.org