Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/252D6C06BE26C39AC59D0269A484BC7CDA2E17D0.cer
File:                     252D6C06BE26C39AC59D0269A484BC7CDA2E17D0.cer (raw, json)
Hash identifier:          4KJyfl3ZNgERYtAV3wrxbQi23gW2UrMmwPPs2tpjDTk=
Subject key identifier:   25:2D:6C:06:BE:26:C3:9A:C5:9D:02:69:A4:84:BC:7C:DA:2E:17:D0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0E7B335E55630ADEDA7690E6AFB532F5E669F645
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8vYMFeQ6JuADYG1En39NgYmAPykR2R5zWJDGcNJcHJnD/1/252D6C06BE26C39AC59D0269A484BC7CDA2E17D0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8vYMFeQ6JuADYG1En39NgYmAPykR2R5zWJDGcNJcHJnD/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:26:54 +0000
Certificate not after:    Wed 02 Apr 2025 18:31:54 +0000
Subordinate resources:    AS: 61615
                          IP: 2804:8c64::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 05:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:7b:33:5e:55:63:0a:de:da:76:90:e6:af:b5:32:f5:e6:69:f6:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:26:54 2024 GMT
            Not After : Apr  2 18:31:54 2025 GMT
        Subject: CN=252D6C06BE26C39AC59D0269A484BC7CDA2E17D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:35:63:d8:91:9e:c0:dd:18:83:61:ba:a6:d6:
                    41:ac:0d:67:98:75:6b:64:a9:53:91:81:9e:90:11:
                    fb:c6:3c:15:b4:02:fe:61:4b:2b:1a:a0:e8:50:30:
                    63:98:7d:e2:06:8e:8d:05:2f:85:14:cf:63:84:62:
                    d4:4e:08:e9:cb:0a:36:97:9e:51:f6:c7:a9:c8:5d:
                    a0:d7:36:d4:b2:7f:e8:7a:62:41:8a:57:2c:d3:7a:
                    40:e7:d0:ca:b9:b4:c9:f0:35:c1:5d:1d:50:a3:ad:
                    c1:88:fb:1f:15:6b:e8:37:2d:90:db:39:1e:d6:3f:
                    d9:a9:3a:d0:cc:15:69:90:28:da:17:ae:c5:fa:d8:
                    38:fc:9a:6c:08:af:cb:75:d7:c6:9c:29:e6:fe:99:
                    1e:9a:b0:94:f4:a4:1c:8d:fb:f4:d0:6b:fb:84:4c:
                    5d:a5:68:af:88:6e:1b:3f:4a:c4:ff:45:f6:88:e7:
                    45:35:21:e2:bb:8d:6b:5b:ef:57:1a:43:d7:32:cf:
                    fc:9e:0d:4b:03:1b:fa:5c:88:e3:55:eb:8a:00:b7:
                    03:d9:ac:83:61:8b:0f:3a:b4:b3:bd:6b:97:08:7b:
                    ea:f2:5e:99:bb:21:03:c7:f7:f5:74:ed:b3:45:69:
                    ac:a4:af:df:2f:f5:c4:09:40:e2:55:4b:41:08:5b:
                    a8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                25:2D:6C:06:BE:26:C3:9A:C5:9D:02:69:A4:84:BC:7C:DA:2E:17:D0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8vYMFeQ6JuADYG1En39NgYmAPykR2R5zWJDGcNJcHJnD/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8vYMFeQ6JuADYG1En39NgYmAPykR2R5zWJDGcNJcHJnD/1/252D6C06BE26C39AC59D0269A484BC7CDA2E17D0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61615

    Signature Algorithm: sha256WithRSAEncryption
         54:0f:1b:fc:e8:60:32:be:8c:96:a1:a2:f0:41:36:3c:2b:46:
         ca:41:0d:2b:a5:cb:fd:4e:b4:98:06:45:e5:34:02:16:51:53:
         6a:f7:3d:60:a6:15:61:3c:a5:68:ea:55:7a:92:e2:bf:87:91:
         44:3f:97:90:d5:7a:fe:33:b8:f8:a7:e0:f2:03:aa:d5:fa:1c:
         67:27:eb:4d:16:bf:11:f8:18:7a:ca:75:b1:34:f6:96:7a:c9:
         06:76:cf:a6:b2:49:68:a5:17:41:6b:78:97:07:99:9a:c2:74:
         2a:73:c4:56:ac:58:5b:10:fd:53:8f:c4:fb:4b:09:ac:f8:50:
         01:fe:63:15:52:2f:a0:c9:37:87:28:7e:c5:99:b2:19:cf:6b:
         34:39:9a:2e:eb:e7:24:bb:49:65:51:52:e8:0d:2d:a2:6a:b5:
         bc:f5:00:21:3e:4e:17:82:75:ce:b3:60:98:33:5b:26:bd:16:
         7b:4d:ee:7d:ea:cf:ac:8c:f8:61:a4:95:93:88:38:ef:e5:48:
         6e:27:86:c4:38:5f:aa:43:ee:f3:bc:6e:0e:0e:09:31:ab:f4:
         77:1e:48:73:4e:74:a2:a5:0b:11:a8:df:e8:98:60:0c:10:04:
         0c:9a:3b:9a:9c:fa:cc:64:28:6e:d1:df:44:bf:34:6a:61:34:
         43:6b:4e:0d
-----BEGIN CERTIFICATE-----
MIIGITCCBQmgAwIBAgIUDnszXlVjCt7adpDmr7Uy9eZp9kUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMxODI2NTRaFw0yNTA0MDIxODMxNTRaMDMxMTAvBgNV
BAMTKDI1MkQ2QzA2QkUyNkMzOUFDNTlEMDI2OUE0ODRCQzdDREEyRTE3RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWNWPYkZ7A3RiDYbqm1kGsDWeY
dWtkqVORgZ6QEfvGPBW0Av5hSysaoOhQMGOYfeIGjo0FL4UUz2OEYtROCOnLCjaX
nlH2x6nIXaDXNtSyf+h6YkGKVyzTekDn0Mq5tMnwNcFdHVCjrcGI+x8Va+g3LZDb
OR7WP9mpOtDMFWmQKNoXrsX62Dj8mmwIr8t118acKeb+mR6asJT0pByN+/TQa/uE
TF2laK+Ibhs/SsT/RfaI50U1IeK7jWtb71caQ9cyz/yeDUsDG/pciONV64oAtwPZ
rINhiw86tLO9a5cIe+ryXpm7IQPH9/V07bNFaaykr98v9cQJQOJVS0EIW6jxAgMB
AAGjggMrMIIDJzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQlLWwGvibDmsWd
AmmkhLx82i4X0DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOHZZ
TUZlUTZKdUFEWUcxRW4zOU5nWW1BUHlrUjJSNXpXSkRHY05KY0hKbkQvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOHZZ
TUZlUTZKdUFEWUcxRW4zOU5nWW1BUHlrUjJSNXpXSkRHY05KY0hKbkQvMS8yNTJE
NkMwNkJFMjZDMzlBQzU5RDAyNjlBNDg0QkM3Q0RBMkUxN0QwLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB
Af8EETAPMA0EAgACMAcDBQAoBIxkMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDw
rzANBgkqhkiG9w0BAQsFAAOCAQEAVA8b/OhgMr6MlqGi8EE2PCtGykENK6XL/U60
mAZF5TQCFlFTavc9YKYVYTylaOpVepLiv4eRRD+XkNV6/jO4+Kfg8gOq1focZyfr
TRa/EfgYesp1sTT2lnrJBnbPprJJaKUXQWt4lweZmsJ0KnPEVqxYWxD9U4/E+0sJ
rPhQAf5jFVIvoMk3hyh+xZmyGc9rNDmaLuvnJLtJZVFS6A0tomq1vPUAIT5OF4J1
zrNgmDNbJr0We03uferPrIz4YaSVk4g47+VIbieGxDhfqkPu87xuDg4JMav0dx5I
c050oqULEajf6JhgDBAEDJo7mpz6zGQobtHfRL80amE0Q2tODQ==
-----END CERTIFICATE-----
Generated at Tue Jun 18 06:20:06 2024 by rpki-client on console-fra.rpki-client.org