Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/21CCB924D97FD1E969080933C375EF56E7FBA4FC.cer
File:                     21CCB924D97FD1E969080933C375EF56E7FBA4FC.cer (raw, json)
Hash identifier:          x2y6/yfMsdhhIwje036Fdh1V2+YITGJzoDohb956txA=
Subject key identifier:   21:CC:B9:24:D9:7F:D1:E9:69:08:09:33:C3:75:EF:56:E7:FB:A4:FC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5A25FAD10AA4988531E7DEFD4D97EF9F903C8599
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/21CCB924D97FD1E969080933C375EF56E7FBA4FC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Nov 2024 20:41:57 +0000
Certificate not after:    Wed 05 Nov 2025 20:46:57 +0000
Subordinate resources:    AS: 262316
                          IP: 131.221.200.0/22
                          IP: 138.117.192.0/22
                          IP: 167.250.152.0/22
                          IP: 177.74.64.0/20
                          IP: 177.124.48.0/22
                          IP: 2804:7c0::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:25:fa:d1:0a:a4:98:85:31:e7:de:fd:4d:97:ef:9f:90:3c:85:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  6 20:41:57 2024 GMT
            Not After : Nov  5 20:46:57 2025 GMT
        Subject: CN=21CCB924D97FD1E969080933C375EF56E7FBA4FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:9c:b7:2b:c4:e2:2c:80:da:cb:4d:a4:1d:f9:
                    5b:47:6d:92:09:4c:c7:4f:70:01:94:e9:d9:72:bf:
                    f1:d4:26:e8:09:fc:c0:99:9f:67:0e:c5:4a:96:37:
                    43:be:af:e0:52:6b:97:10:4a:9d:f4:07:a2:83:39:
                    9f:72:09:62:2e:09:9e:c1:82:e8:f1:a6:33:8e:08:
                    55:2f:a4:47:1d:4d:db:eb:28:a5:85:d5:5d:c0:cf:
                    2e:33:af:15:41:a2:7e:bc:af:c4:3b:3b:f2:e4:88:
                    ec:d5:f7:a5:21:fd:63:1b:11:05:0f:a3:1b:55:45:
                    c2:f6:15:37:b8:60:58:03:60:c8:cc:93:77:2c:0b:
                    aa:ed:a5:55:32:63:d1:bf:fe:07:26:b9:a2:2f:5b:
                    99:0c:8f:a0:89:17:be:c5:91:44:5b:13:f8:4a:c6:
                    76:6e:7f:24:71:e8:6e:ee:b3:d7:ec:50:27:d0:72:
                    81:04:25:9f:70:d6:09:d4:a9:dc:f2:98:b4:69:05:
                    d2:01:8d:32:ee:33:dc:14:40:15:24:8f:5b:b7:54:
                    01:00:69:ee:a4:65:33:fc:af:52:25:7c:bd:57:2c:
                    61:a1:8d:b3:76:1e:02:14:d9:94:b1:0e:26:59:64:
                    48:ec:33:05:c3:4f:0c:25:1d:c9:7f:c5:53:57:07:
                    85:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                21:CC:B9:24:D9:7F:D1:E9:69:08:09:33:C3:75:EF:56:E7:FB:A4:FC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/21CCB924D97FD1E969080933C375EF56E7FBA4FC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.200.0/22
                  138.117.192.0/22
                  167.250.152.0/22
                  177.74.64.0/20
                  177.124.48.0/22
                IPv6:
                  2804:7c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262316

    Signature Algorithm: sha256WithRSAEncryption
         b1:34:56:ae:f0:63:b2:36:af:01:14:1e:fe:1b:3e:77:d9:13:
         02:34:9a:92:73:09:28:d9:2c:d3:ba:84:b0:54:ad:b6:93:41:
         17:de:5d:1b:6d:89:92:c8:ef:b8:46:a9:9e:cc:72:64:2c:52:
         1d:c8:b8:a1:40:06:c0:b3:dd:a9:c1:90:bd:ae:9e:04:a8:7f:
         0c:c4:a5:71:52:f4:07:0e:8f:c7:95:bb:9b:a3:61:40:cd:c1:
         84:3c:7e:7d:58:72:b4:c4:3a:f6:fa:40:75:cf:45:86:a8:a8:
         28:d5:08:42:42:d8:02:59:2c:07:4f:10:a5:92:fa:71:32:7b:
         d7:fe:01:59:d9:5b:09:0e:1e:e2:d9:48:02:28:6f:78:d6:a6:
         72:a5:e9:a1:a0:98:b1:c4:80:83:20:c0:36:61:b0:7d:ce:77:
         8b:73:15:ed:bc:49:1b:3e:91:b1:7b:d4:d0:1c:64:01:e7:8f:
         5d:42:62:e3:01:4c:35:ca:3d:4f:4b:72:2f:ff:62:fa:89:c4:
         d1:50:4e:65:61:ce:f3:e0:2a:91:3b:29:03:18:e5:eb:d9:3d:
         34:1e:89:f0:26:67:29:e4:ad:89:57:33:b3:e8:1e:24:c0:a9:
         0e:07:1c:ab:17:96:c3:36:01:06:df:9b:23:4b:39:6c:24:f8:
         0e:bf:c7:da
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUWiX60QqkmIUx5979TZfvn5A8hZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDExMDYyMDQxNTdaFw0yNTExMDUyMDQ2NTdaMDMxMTAvBgNV
BAMTKDIxQ0NCOTI0RDk3RkQxRTk2OTA4MDkzM0MzNzVFRjU2RTdGQkE0RkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfnLcrxOIsgNrLTaQd+VtHbZIJ
TMdPcAGU6dlyv/HUJugJ/MCZn2cOxUqWN0O+r+BSa5cQSp30B6KDOZ9yCWIuCZ7B
gujxpjOOCFUvpEcdTdvrKKWF1V3Azy4zrxVBon68r8Q7O/LkiOzV96Uh/WMbEQUP
oxtVRcL2FTe4YFgDYMjMk3csC6rtpVUyY9G//gcmuaIvW5kMj6CJF77FkURbE/hK
xnZufyRx6G7us9fsUCfQcoEEJZ9w1gnUqdzymLRpBdIBjTLuM9wUQBUkj1u3VAEA
ae6kZTP8r1IlfL1XLGGhjbN2HgIU2ZSxDiZZZEjsMwXDTwwlHcl/xVNXB4V/AgMB
AAGjggNSMIIDTjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQhzLkk2X/R6WkI
CTPDde9W5/uk/DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vODhT
cjZrNWc1bnkxdndkaXdoOHlmTURTMkVlclc0NXBaZERob1h1VXQyS2EvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzg4
U3I2azVnNW55MXZ3ZGl3aDh5Zk1EUzJFZXJXNDVwWmREaG9YdVV0MkthLzAvMjFD
Q0I5MjREOTdGRDFFOTY5MDgwOTMzQzM3NUVGNTZFN0ZCQTRGQy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEH
AQH/BDcwNTAkBAIAATAeAwQCg93IAwQCinXAAwQCp/qYAwQEsUpAAwQCsXwwMA0E
AgACMAcDBQAoBAfAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQArDANBgkqhkiG
9w0BAQsFAAOCAQEAsTRWrvBjsjavARQe/hs+d9kTAjSaknMJKNks07qEsFSttpNB
F95dG22JksjvuEapnsxyZCxSHci4oUAGwLPdqcGQva6eBKh/DMSlcVL0Bw6Px5W7
m6NhQM3BhDx+fVhytMQ69vpAdc9FhqioKNUIQkLYAlksB08QpZL6cTJ71/4BWdlb
CQ4e4tlIAihveNamcqXpoaCYscSAgyDANmGwfc53i3MV7bxJGz6RsXvU0BxkAeeP
XUJi4wFMNco9T0tyL/9i+onE0VBOZWHO8+AqkTspAxjl69k9NB6J8CZnKeStiVcz
s+geJMCpDgccqxeWwzYBBt+bI0s5bCT4Dr/H2g==
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:29 2024 by rpki-client on console-ams.rpki-client.org