Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer
File:                     2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer (raw, json)
Hash identifier:          F84uFT65ipT0wcuYakjiIF3K3n0jkkA3pdXKqvjyKw4=
Subject key identifier:   2B:47:0E:5C:23:88:FD:4E:E2:7F:D0:93:A1:88:DB:51:D5:7C:AD:3B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       750E8A58B7A64731E9E96D369FBF15E0377CE60C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 12:05:55 +0000
Certificate not after:    Thu 03 Apr 2025 12:10:55 +0000
Subordinate resources:    AS: 52589
                          IP: 177.87.44.0/22
                          IP: 2804:1ad8::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 12:57:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:0e:8a:58:b7:a6:47:31:e9:e9:6d:36:9f:bf:15:e0:37:7c:e6:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 12:05:55 2024 GMT
            Not After : Apr  3 12:10:55 2025 GMT
        Subject: CN=2B470E5C2388FD4EE27FD093A188DB51D57CAD3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:49:37:e6:4e:ab:0b:05:8e:3e:31:1f:9c:61:
                    82:9c:ec:ec:51:3b:cd:ba:32:90:d1:8a:91:6b:5b:
                    b7:0c:ce:54:3e:30:4b:73:0c:40:dd:05:3a:0f:19:
                    e6:fa:63:f3:df:43:95:3a:53:8c:78:49:23:64:30:
                    82:72:ee:c5:33:04:4a:d5:4c:c4:02:63:86:e4:6d:
                    cd:d5:4f:b9:05:45:3a:b0:d5:65:76:6f:84:6e:ee:
                    e5:47:03:f8:76:7b:1e:d9:31:06:fd:95:ad:eb:53:
                    9c:7c:38:10:33:7a:5c:13:e9:9e:4e:b4:57:7d:87:
                    fe:29:3c:d1:12:55:7f:09:69:fa:f6:bc:b3:60:7c:
                    00:a9:64:a4:28:1c:78:33:95:76:30:ca:0d:8a:1f:
                    e6:09:0e:f2:cb:db:e2:df:56:57:9d:4b:3f:12:8d:
                    b3:b4:16:d9:a2:d3:85:9f:b9:eb:76:83:91:ab:b8:
                    bc:f9:50:00:a5:c9:07:db:44:c0:50:a2:48:6e:bd:
                    90:ba:49:d7:01:1e:f4:c8:34:b0:ed:e0:44:fd:7c:
                    b0:64:8e:c4:c4:4a:2d:fd:ce:e1:12:c8:0b:4d:c8:
                    1d:08:73:f0:2f:b0:a7:71:f8:20:c7:d4:08:ee:03:
                    3b:20:f0:a4:f2:bb:b0:1f:ad:7b:4f:d6:5c:29:3e:
                    bd:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2B:47:0E:5C:23:88:FD:4E:E2:7F:D0:93:A1:88:DB:51:D5:7C:AD:3B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.44.0/22
                IPv6:
                  2804:1ad8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52589

    Signature Algorithm: sha256WithRSAEncryption
         55:ed:f3:ef:e5:ea:4a:72:86:63:a9:f8:aa:e3:f4:7b:39:e8:
         3d:15:5d:ec:c5:16:f8:a2:e6:a6:91:25:f4:2a:1a:04:1c:c9:
         ca:f9:3b:c5:d3:f8:10:0a:7f:6e:36:f1:dd:9e:44:38:cf:20:
         8b:4e:45:fc:1c:3d:27:ad:21:00:d9:f9:3d:21:a6:7c:88:27:
         b7:56:77:63:c9:8a:a5:05:8f:68:5f:3e:08:1c:cf:f4:ca:12:
         fc:79:46:4c:ee:a1:f2:5b:40:1f:4f:51:99:44:22:3c:ad:ca:
         93:f7:57:b1:63:04:73:38:ac:1f:c3:4b:7d:d9:80:c5:37:2b:
         15:5e:5f:63:0f:28:4e:35:66:f2:3b:cc:24:e4:cd:29:0e:61:
         17:f4:eb:6d:ce:59:c2:fe:5d:1f:44:47:09:09:90:b2:23:75:
         43:d9:16:f0:ac:10:36:11:0b:1c:a9:fc:19:11:07:36:56:22:
         85:ea:15:fe:73:b6:4d:76:ae:c0:93:83:21:9f:5b:39:7e:67:
         e0:e7:76:a0:0b:1f:79:f8:8f:3b:11:ff:09:db:47:52:76:03:
         85:52:6c:90:82:b1:da:9b:d4:e4:40:b0:c2:1b:5f:98:62:02:
         63:24:60:0c:d6:21:b2:13:e0:b4:39:1e:bf:71:a2:f9:c6:dc:
         9d:a8:81:13
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUdQ6KWLemRzHp6W02n78V4Dd85gwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQxMjA1NTVaFw0yNTA0MDMxMjEwNTVaMDMxMTAvBgNV
BAMTKDJCNDcwRTVDMjM4OEZENEVFMjdGRDA5M0ExODhEQjUxRDU3Q0FEM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaSTfmTqsLBY4+MR+cYYKc7OxR
O826MpDRipFrW7cMzlQ+MEtzDEDdBToPGeb6Y/PfQ5U6U4x4SSNkMIJy7sUzBErV
TMQCY4bkbc3VT7kFRTqw1WV2b4Ru7uVHA/h2ex7ZMQb9la3rU5x8OBAzelwT6Z5O
tFd9h/4pPNESVX8Jafr2vLNgfACpZKQoHHgzlXYwyg2KH+YJDvLL2+LfVledSz8S
jbO0Ftmi04Wfuet2g5GruLz5UAClyQfbRMBQokhuvZC6SdcBHvTINLDt4ET9fLBk
jsTESi39zuESyAtNyB0Ic/AvsKdx+CDH1AjuAzsg8KTyu7AfrXtP1lwpPr1HAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQrRw5cI4j9TuJ/
0JOhiNtR1XytOzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ3Y5
WHhQRWt5ZXY4ZnNtZDdnZ3dMWE1pUHlOdmdWa2pBckg1UnhHRUpkWDEvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ3Y5
WHhQRWt5ZXY4ZnNtZDdnZ3dMWE1pUHlOdmdWa2pBckg1UnhHRUpkWDEvMS8yQjQ3
MEU1QzIzODhGRDRFRTI3RkQwOTNBMTg4REI1MUQ1N0NBRDNCLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAKxVywwDQQCAAIwBwMFACgEGtgwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDAM1tMA0GCSqGSIb3DQEBCwUAA4IBAQBV7fPv5epKcoZjqfiq
4/R7Oeg9FV3sxRb4ouamkSX0KhoEHMnK+TvF0/gQCn9uNvHdnkQ4zyCLTkX8HD0n
rSEA2fk9IaZ8iCe3VndjyYqlBY9oXz4IHM/0yhL8eUZM7qHyW0AfT1GZRCI8rcqT
91exYwRzOKwfw0t92YDFNysVXl9jDyhONWbyO8wk5M0pDmEX9OttzlnC/l0fREcJ
CZCyI3VD2RbwrBA2EQscqfwZEQc2ViKF6hX+c7ZNdq7Ak4Mhn1s5fmfg53agCx95
+I87Ef8J20dSdgOFUmyQgrHam9TkQLDCG1+YYgJjJGAM1iGyE+C0OR6/caL5xtyd
qIET
-----END CERTIFICATE-----
Generated at Tue Jun 18 13:55:27 2024 by rpki-client on console-fra.rpki-client.org