Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/211F3D420A136AE7395A367C0DC2C730D3B84CBE.cer
File:                     211F3D420A136AE7395A367C0DC2C730D3B84CBE.cer (raw, json)
Hash identifier:          py6XFMVoPstCMJ6stbhyL7jl7g7WZLm+XIKz7FzfMS0=
Subject key identifier:   21:1F:3D:42:0A:13:6A:E7:39:5A:36:7C:0D:C2:C7:30:D3:B8:4C:BE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       64FF37AD660C55B378D9D46CC4F0A03E45347CC0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/211F3D420A136AE7395A367C0DC2C730D3B84CBE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 16 Jul 2024 15:38:36 +0000
Certificate not after:    Tue 15 Jul 2025 15:43:36 +0000
Subordinate resources:    AS: 270253
                          IP: 200.110.204.0/22
                          IP: 2804:692c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:ff:37:ad:66:0c:55:b3:78:d9:d4:6c:c4:f0:a0:3e:45:34:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 16 15:38:36 2024 GMT
            Not After : Jul 15 15:43:36 2025 GMT
        Subject: CN=211F3D420A136AE7395A367C0DC2C730D3B84CBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5a:e3:ed:f0:bb:74:dc:61:fc:76:9c:02:b3:
                    8a:e8:43:99:1a:81:2b:be:dd:aa:02:a2:71:65:3e:
                    54:df:88:da:35:a8:2d:8b:d0:ff:23:d7:c7:32:8c:
                    5c:3f:f2:d0:4c:1e:4e:b0:25:86:3f:eb:1a:40:ec:
                    71:ae:9a:cb:df:f8:f8:78:95:22:76:e7:ac:58:80:
                    69:0c:df:09:b1:67:79:06:77:a1:ab:fb:5a:f7:26:
                    80:4a:4e:a2:c3:aa:fb:75:ae:00:81:3b:54:a0:fd:
                    87:8f:47:f1:d0:76:7a:fa:c4:fc:44:c2:f5:1c:3c:
                    7c:2d:9c:bf:d9:83:b8:8a:41:f1:d9:b6:39:01:10:
                    68:fb:1f:d7:02:42:eb:b8:fc:9d:25:ca:a6:21:cd:
                    5d:72:2c:fa:66:bf:86:04:a5:b6:ca:e4:99:62:4d:
                    e0:fc:0e:f6:40:b3:d5:18:52:6b:c0:51:2b:0f:51:
                    2c:90:bb:6c:fd:80:e9:a7:fa:1c:a8:69:cd:ed:91:
                    11:fa:e7:92:8f:08:37:8b:b2:ec:97:66:85:68:d4:
                    2e:b6:d4:2d:d4:af:66:71:e5:e8:82:2a:15:0b:f9:
                    93:70:b1:e9:9e:9c:c8:d1:80:79:be:a6:8f:cd:6d:
                    38:c9:ad:8a:14:8d:e8:eb:1c:ce:0f:72:f9:54:04:
                    c6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                21:1F:3D:42:0A:13:6A:E7:39:5A:36:7C:0D:C2:C7:30:D3:B8:4C:BE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/211F3D420A136AE7395A367C0DC2C730D3B84CBE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.204.0/22
                IPv6:
                  2804:692c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270253

    Signature Algorithm: sha256WithRSAEncryption
         1c:32:d4:f1:35:4f:7d:5c:6c:47:87:ea:d4:d7:3a:80:9f:54:
         05:c9:ee:ae:3e:2c:fe:4a:28:98:0d:8d:a5:e1:ee:6c:35:4a:
         48:9e:05:47:34:e0:98:ce:21:c3:97:79:50:09:86:bd:10:c8:
         31:13:b8:98:9a:dd:9f:04:a3:24:08:41:a4:d9:55:2b:d7:08:
         5c:fd:56:34:ca:0d:51:f3:2d:95:c8:87:3b:af:c5:52:d3:15:
         a9:f3:ed:09:47:fa:be:58:94:94:d9:52:6a:eb:d6:e0:a3:de:
         95:46:cf:b8:ea:b5:00:16:11:95:d6:60:1e:7c:95:de:e6:59:
         6f:4f:c3:ad:6c:17:85:8d:2a:a7:64:71:78:6b:5a:30:e2:9d:
         8c:85:98:fd:c1:88:8f:ed:89:d8:47:3e:9a:de:37:ce:20:a2:
         85:01:11:e4:64:e5:44:cb:92:d5:23:4f:6e:1d:a1:51:f9:21:
         ef:08:03:79:db:00:c6:1b:75:72:ea:7f:fd:16:6c:28:12:ea:
         bd:fa:72:4a:c7:a8:25:94:37:94:9f:b3:db:0e:a1:d7:2e:ca:
         6e:5b:85:7f:51:20:ee:d7:57:95:91:0a:af:aa:16:8e:a3:cd:
         f8:43:90:d2:11:4a:31:49:f3:e6:8c:b0:e1:8c:62:71:c8:3e:
         e9:90:3c:4e
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUZP83rWYMVbN42dRsxPCgPkU0fMAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA3MTYxNTM4MzZaFw0yNTA3MTUxNTQzMzZaMDMxMTAvBgNV
BAMTKDIxMUYzRDQyMEExMzZBRTczOTVBMzY3QzBEQzJDNzMwRDNCODRDQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXWuPt8Lt03GH8dpwCs4roQ5ka
gSu+3aoConFlPlTfiNo1qC2L0P8j18cyjFw/8tBMHk6wJYY/6xpA7HGumsvf+Ph4
lSJ256xYgGkM3wmxZ3kGd6Gr+1r3JoBKTqLDqvt1rgCBO1Sg/YePR/HQdnr6xPxE
wvUcPHwtnL/Zg7iKQfHZtjkBEGj7H9cCQuu4/J0lyqYhzV1yLPpmv4YEpbbK5Jli
TeD8DvZAs9UYUmvAUSsPUSyQu2z9gOmn+hyoac3tkRH655KPCDeLsuyXZoVo1C62
1C3Ur2Zx5eiCKhUL+ZNwsemenMjRgHm+po/NbTjJrYoUjejrHM4PcvlUBMa1AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQhHz1CChNq5zla
NnwNwscw07hMvjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM2Jj
NDg2dGN5QmF2YW9oV2Y2OW9MOEJ2WDJCOUFUeDVaUE5OVFRRcDM4UnIvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNi
YzQ4NnRjeUJhdmFvaFdmNjlvTDhCdlgyQjlBVHg1WlBOTlRUUXAzOFJyLzAvMjEx
RjNENDIwQTEzNkFFNzM5NUEzNjdDMERDMkM3MzBEM0I4NENCRS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCyG7MMA0EAgACMAcDBQAoBGksMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQfrTANBgkqhkiG9w0BAQsFAAOCAQEAHDLU8TVPfVxsR4fq
1Nc6gJ9UBcnurj4s/koomA2NpeHubDVKSJ4FRzTgmM4hw5d5UAmGvRDIMRO4mJrd
nwSjJAhBpNlVK9cIXP1WNMoNUfMtlciHO6/FUtMVqfPtCUf6vliUlNlSauvW4KPe
lUbPuOq1ABYRldZgHnyV3uZZb0/DrWwXhY0qp2RxeGtaMOKdjIWY/cGIj+2J2Ec+
mt43ziCihQER5GTlRMuS1SNPbh2hUfkh7wgDedsAxht1cup//RZsKBLqvfpySseo
JZQ3lJ+z2w6h1y7KbluFf1Eg7tdXlZEKr6oWjqPN+EOQ0hFKMUnz5oyw4Yxiccg+
6ZA8Tg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:41 2024 by rpki-client on console-ams.rpki-client.org