Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.cer
File:                     2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.cer (raw, json)
Hash identifier:          AH3sosQfL+1KvJRlLns25YMmqc9b+pwT/TdQ4U272gE=
Subject key identifier:   2E:88:86:F9:D3:C3:B9:E0:35:3D:B7:C7:2D:18:4C:7D:C5:02:65:FC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3AEFD4F7262F0F8B91006647819A0560F6196975
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 May 2024 12:47:15 +0000
Certificate not after:    Thu 08 May 2025 12:52:15 +0000
Subordinate resources:    AS: 271166
                          IP: 179.42.132.0/22
                          IP: 2804:7744::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ef:d4:f7:26:2f:0f:8b:91:00:66:47:81:9a:05:60:f6:19:69:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  9 12:47:15 2024 GMT
            Not After : May  8 12:52:15 2025 GMT
        Subject: CN=2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:86:8b:c4:9c:25:ca:57:78:4d:45:af:ce:86:
                    81:42:d8:14:82:47:5c:c6:dc:5f:1b:5d:6f:52:53:
                    fa:bd:73:5c:c0:1c:b4:ee:07:e5:1f:f3:c8:fd:65:
                    1a:e7:6e:82:4c:ac:ec:92:96:49:ea:b1:77:f6:d2:
                    1f:87:04:a8:2e:49:f2:06:5b:b2:31:3f:ae:61:15:
                    f3:06:bd:88:c9:a9:0c:7f:25:a8:fe:46:18:db:b0:
                    71:23:03:89:e2:94:52:39:64:f5:b2:0c:99:ff:f6:
                    77:e5:f0:d1:8e:48:06:d4:92:7e:93:d0:09:69:fe:
                    a9:b9:f3:8f:a9:a8:02:b7:06:96:b1:ed:72:08:40:
                    8b:23:93:d0:d1:b1:87:7d:9a:53:c3:25:c8:cd:c2:
                    77:71:ee:a0:b5:19:fd:00:ce:c0:5e:ae:95:57:d1:
                    78:df:4e:57:d9:e9:3c:a3:63:34:cb:47:e1:12:0c:
                    64:6d:e1:24:e3:f5:47:72:02:c1:10:4d:2a:10:ab:
                    47:04:a3:f3:91:fc:db:e5:ef:4b:ea:07:8a:c0:c6:
                    20:00:8a:c7:20:b7:47:bc:e9:90:b0:bb:c1:32:39:
                    77:4f:e3:32:32:36:4b:46:1e:e2:b1:d9:5d:18:e4:
                    7d:39:4c:ab:14:55:38:70:bf:b0:ea:0d:ae:69:b1:
                    d2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2E:88:86:F9:D3:C3:B9:E0:35:3D:B7:C7:2D:18:4C:7D:C5:02:65:FC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.132.0/22
                IPv6:
                  2804:7744::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271166

    Signature Algorithm: sha256WithRSAEncryption
         50:18:3a:ba:23:ed:4f:2c:f3:76:13:eb:7b:ee:75:c0:cb:f2:
         3e:4a:a5:93:e6:15:a7:09:aa:46:c7:33:42:ab:ae:b3:16:a3:
         f5:a6:a5:e7:cd:c3:61:85:01:be:1f:af:c8:dd:7e:99:04:ff:
         86:52:20:98:06:7c:ea:3b:05:99:5b:f8:34:9d:cc:86:82:a3:
         ef:74:21:77:3b:4f:df:37:49:26:22:34:30:2e:80:04:91:a1:
         05:fc:af:b5:de:1d:4d:b7:4e:41:1c:ea:d7:07:1b:b5:59:91:
         90:5c:ae:38:5c:bf:36:6b:09:c1:15:5f:69:41:bb:a4:76:f3:
         6d:4b:1e:a8:3f:ab:92:0e:03:6d:18:50:c8:5a:b0:ee:cf:3e:
         ab:0b:9b:be:90:e8:76:87:34:5f:88:b5:67:b7:8f:e9:5a:e8:
         85:b0:f4:f2:f3:fb:21:2a:45:4d:bc:20:93:57:68:3f:19:1b:
         84:d2:78:c8:23:8f:2e:40:db:e4:33:9c:40:17:51:38:1e:9a:
         1a:f7:38:8e:77:bf:bf:d8:3a:56:86:74:02:5b:2e:a6:00:a0:
         da:b8:0a:64:5e:d5:1a:8c:05:25:ec:21:66:d1:87:44:81:68:
         1c:1e:56:f9:ac:0b:4b:94:7f:50:b1:27:0d:ca:2e:3a:1f:a4:
         84:2e:54:6c
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUOu/U9yYvD4uRAGZHgZoFYPYZaXUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA1MDkxMjQ3MTVaFw0yNTA1MDgxMjUyMTVaMDMxMTAvBgNV
BAMTKDJFODg4NkY5RDNDM0I5RTAzNTNEQjdDNzJEMTg0QzdEQzUwMjY1RkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChhovEnCXKV3hNRa/OhoFC2BSC
R1zG3F8bXW9SU/q9c1zAHLTuB+Uf88j9ZRrnboJMrOySlknqsXf20h+HBKguSfIG
W7IxP65hFfMGvYjJqQx/Jaj+RhjbsHEjA4nilFI5ZPWyDJn/9nfl8NGOSAbUkn6T
0Alp/qm584+pqAK3Bpax7XIIQIsjk9DRsYd9mlPDJcjNwndx7qC1Gf0AzsBerpVX
0XjfTlfZ6TyjYzTLR+ESDGRt4STj9UdyAsEQTSoQq0cEo/OR/Nvl70vqB4rAxiAA
iscgt0e86ZCwu8EyOXdP4zIyNktGHuKx2V0Y5H05TKsUVThwv7DqDa5psdJ5AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQuiIb508O54DU9
t8ctGEx9xQJl/DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSG5x
UFpMcUM1YzFRUVJNN2RjbVdBVkR6Sm55aWZzQ0EycGVwOEdDZnA4VlYvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hu
cVBaTHFDNWMxUVFSTTdkY21XQVZEekpueWlmc0NBMnBlcDhHQ2ZwOFZWLzAvMkU4
ODg2RjlEM0MzQjlFMDM1M0RCN0M3MkQxODRDN0RDNTAyNjVGQy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCsyqEMA0EAgACMAcDBQAoBHdEMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQjPjANBgkqhkiG9w0BAQsFAAOCAQEAUBg6uiPtTyzzdhPr
e+51wMvyPkqlk+YVpwmqRsczQquusxaj9aal583DYYUBvh+vyN1+mQT/hlIgmAZ8
6jsFmVv4NJ3MhoKj73QhdztP3zdJJiI0MC6ABJGhBfyvtd4dTbdOQRzq1wcbtVmR
kFyuOFy/NmsJwRVfaUG7pHbzbUseqD+rkg4DbRhQyFqw7s8+qwubvpDodoc0X4i1
Z7eP6VrohbD08vP7ISpFTbwgk1doPxkbhNJ4yCOPLkDb5DOcQBdROB6aGvc4jne/
v9g6VoZ0AlsupgCg2rgKZF7VGowFJewhZtGHRIFoHB5W+awLS5R/ULEnDcouOh+k
hC5UbA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:45 2024 by rpki-client on console-ams.rpki-client.org