Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.cer
File:                     2ED5E473D72A6D301514B818C3D2A94A5E387474.cer (raw, json)
Hash identifier:          9PLS29SLLLEqOZ8y3gp7EJjzvb9CQ7WtVaimQMyGNIQ=
Subject key identifier:   2E:D5:E4:73:D7:2A:6D:30:15:14:B8:18:C3:D2:A9:4A:5E:38:74:74
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       199619FB440E16B9C51EC94FD6010F81391EC49E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 19:14:06 +0000
Certificate not after:    Thu 03 Apr 2025 19:19:06 +0000
Subordinate resources:    AS: 267163
                          IP: 45.230.144.0/22
                          IP: 2804:4914::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:96:19:fb:44:0e:16:b9:c5:1e:c9:4f:d6:01:0f:81:39:1e:c4:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 19:14:06 2024 GMT
            Not After : Apr  3 19:19:06 2025 GMT
        Subject: CN=2ED5E473D72A6D301514B818C3D2A94A5E387474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9e:fd:fa:71:83:0e:59:87:95:80:e6:69:25:
                    a9:df:0b:3d:e4:6b:00:e4:f2:f6:bc:14:a0:71:ab:
                    94:5a:06:db:1d:2e:75:3e:4b:1b:74:da:dd:75:16:
                    87:20:b2:45:be:30:28:af:69:53:20:88:cf:d2:fb:
                    25:d4:59:49:07:32:64:0f:3b:31:9f:c9:3e:ff:03:
                    7f:52:f5:33:f9:00:8e:90:76:35:3b:7f:4d:73:ab:
                    b8:d2:ec:26:a5:e1:01:a4:d5:9a:0a:e5:c1:b7:78:
                    0d:cb:53:28:81:49:52:d2:39:57:60:54:fb:31:0d:
                    0e:05:e4:2c:f7:9d:03:ff:6f:89:c5:8c:ea:ea:98:
                    26:0c:86:df:d7:9c:b6:67:52:c5:5d:a4:68:57:c0:
                    c3:43:01:a5:e1:07:50:be:8b:8e:28:c0:0c:e7:3b:
                    7b:b0:88:f9:6e:37:b4:b0:c2:fc:cd:14:41:44:a3:
                    f4:f6:30:e0:eb:01:8c:94:b0:16:2d:55:a1:58:5b:
                    4b:42:14:3b:11:98:14:84:c5:b3:91:77:bc:4d:d9:
                    13:f4:33:cd:6b:ef:73:a3:58:08:11:08:65:e5:3c:
                    94:7f:39:a2:b6:db:1e:60:01:6b:ab:64:3f:32:d8:
                    26:dd:2b:15:bd:22:78:c8:3b:b3:77:be:97:23:fb:
                    c7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2E:D5:E4:73:D7:2A:6D:30:15:14:B8:18:C3:D2:A9:4A:5E:38:74:74
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.144.0/22
                IPv6:
                  2804:4914::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267163

    Signature Algorithm: sha256WithRSAEncryption
         74:83:65:61:9b:68:47:a3:d3:66:17:e1:b6:a7:ce:e7:8b:f0:
         e1:40:d0:c5:2d:fa:38:7e:80:2c:5e:04:be:a5:30:14:0c:6e:
         a8:4d:f9:81:76:dd:92:fe:4e:df:95:8a:14:6f:5b:27:a1:50:
         ef:24:53:3d:e6:a3:b6:c9:3a:83:e1:80:78:1f:7c:2f:91:c0:
         77:68:55:d0:51:a4:4f:55:4e:b4:17:82:2a:42:6b:f0:4a:33:
         9a:be:9f:82:43:07:d4:4b:79:71:e7:58:5b:0d:3e:4e:08:97:
         ee:b9:87:91:a0:a8:75:da:6a:f2:0a:4b:02:e8:ef:38:8c:5d:
         27:98:ef:8a:f1:98:5c:f5:c3:09:49:67:42:36:b6:e0:49:d6:
         80:30:c5:b9:bf:72:91:9a:22:20:ae:2f:f3:fb:3f:1d:e1:17:
         07:49:6f:4d:34:1f:67:00:fb:36:84:48:04:eb:36:3b:42:88:
         de:c5:d2:c2:db:8d:4d:a1:d8:25:d4:ce:b2:a8:10:29:e3:86:
         a0:f5:51:61:08:e1:1e:28:16:aa:22:aa:52:bb:b8:a3:a4:0d:
         23:f5:45:86:ca:af:fc:be:b3:f7:91:29:0c:be:57:8a:6d:4a:
         7f:14:e2:89:fd:bd:1a:60:76:6e:06:45:06:22:cb:70:fa:da:
         ae:28:d6:61
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUGZYZ+0QOFrnFHslP1gEPgTkexJ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQxOTE0MDZaFw0yNTA0MDMxOTE5MDZaMDMxMTAvBgNV
BAMTKDJFRDVFNDczRDcyQTZEMzAxNTE0QjgxOEMzRDJBOTRBNUUzODc0NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAnv36cYMOWYeVgOZpJanfCz3k
awDk8va8FKBxq5RaBtsdLnU+Sxt02t11FocgskW+MCivaVMgiM/S+yXUWUkHMmQP
OzGfyT7/A39S9TP5AI6QdjU7f01zq7jS7Cal4QGk1ZoK5cG3eA3LUyiBSVLSOVdg
VPsxDQ4F5Cz3nQP/b4nFjOrqmCYMht/XnLZnUsVdpGhXwMNDAaXhB1C+i44owAzn
O3uwiPluN7SwwvzNFEFEo/T2MODrAYyUsBYtVaFYW0tCFDsRmBSExbORd7xN2RP0
M81r73OjWAgRCGXlPJR/OaK22x5gAWurZD8y2CbdKxW9InjIO7N3vpcj+8eRAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQu1eRz1yptMBUU
uBjD0qlKXjh0dDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQUxX
Y1JVald4UXptQ1FMU1prbmhaUU5mU1BQblQySERxNlJqY3NDeDN3cU0vMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQUxX
Y1JVald4UXptQ1FMU1prbmhaUU5mU1BQblQySERxNlJqY3NDeDN3cU0vMS8yRUQ1
RTQ3M0Q3MkE2RDMwMTUxNEI4MThDM0QyQTk0QTVFMzg3NDc0Lm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAIt5pAwDQQCAAIwBwMFACgESRQwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBBObMA0GCSqGSIb3DQEBCwUAA4IBAQB0g2Vhm2hHo9NmF+G2
p87ni/DhQNDFLfo4foAsXgS+pTAUDG6oTfmBdt2S/k7flYoUb1snoVDvJFM95qO2
yTqD4YB4H3wvkcB3aFXQUaRPVU60F4IqQmvwSjOavp+CQwfUS3lx51hbDT5OCJfu
uYeRoKh12mryCksC6O84jF0nmO+K8Zhc9cMJSWdCNrbgSdaAMMW5v3KRmiIgri/z
+z8d4RcHSW9NNB9nAPs2hEgE6zY7QojexdLC241Nodgl1M6yqBAp44ag9VFhCOEe
KBaqIqpSu7ijpA0j9UWGyq/8vrP3kSkMvleKbUp/FOKJ/b0aYHZuBkUGIstw+tqu
KNZh
-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:49 2024 by rpki-client on console-ams.rpki-client.org