Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/319A2EB3BED8FE75A1290CC392DA21B269F2DF8A.cer
File:                     319A2EB3BED8FE75A1290CC392DA21B269F2DF8A.cer (raw, json)
Hash identifier:          uDH1vBbc+PBFuxKOq8rNA7dGnuHq6POd7M3syMqUWm8=
Subject key identifier:   31:9A:2E:B3:BE:D8:FE:75:A1:29:0C:C3:92:DA:21:B2:69:F2:DF:8A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4272E4A86336EED45A801177A9EE12DCA21675E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9CzC26mSbqqo15jAZ9q1P25Uiu3EyLfaem6RUsxYNj24/0/319A2EB3BED8FE75A1290CC392DA21B269F2DF8A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9CzC26mSbqqo15jAZ9q1P25Uiu3EyLfaem6RUsxYNj24/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 27 Aug 2024 20:15:43 +0000
Certificate not after:    Tue 26 Aug 2025 20:20:43 +0000
Subordinate resources:    AS: 273527
                          IP: 45.6.242.0/23
                          IP: 2804:9000::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:72:e4:a8:63:36:ee:d4:5a:80:11:77:a9:ee:12:dc:a2:16:75:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 27 20:15:43 2024 GMT
            Not After : Aug 26 20:20:43 2025 GMT
        Subject: CN=319A2EB3BED8FE75A1290CC392DA21B269F2DF8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:11:f2:79:39:f2:42:e1:96:1e:8c:02:b9:9b:
                    b0:be:92:ab:d5:ce:b3:0f:10:2b:d0:a5:dd:07:cc:
                    a4:79:98:33:fe:6e:89:ac:05:a2:25:2a:4b:aa:b6:
                    40:bd:81:98:1a:61:ff:48:1c:e9:0c:da:a6:91:cd:
                    15:76:85:01:88:83:f1:21:63:f4:3f:74:c4:62:a7:
                    10:fc:99:39:15:e9:23:97:27:3c:5e:36:c8:09:3b:
                    52:58:ff:2e:75:89:e9:b3:3f:2b:23:67:0c:ad:16:
                    5c:e5:20:56:99:ae:37:cf:c8:c9:44:7d:30:e0:47:
                    1c:e3:0b:1f:0b:c0:d5:2a:87:19:8f:5d:a4:7b:47:
                    ab:fb:7a:61:ed:d1:e1:9a:ed:7b:49:bb:c8:66:07:
                    e3:d5:95:cc:25:12:30:a8:94:3b:49:f1:9f:99:68:
                    4a:32:b3:13:3d:04:5c:aa:54:5c:12:e6:36:35:c5:
                    20:4b:04:55:da:b0:54:54:da:89:5b:01:55:8b:54:
                    c1:0d:75:88:32:50:0e:44:fa:cd:cc:0e:4e:8d:dd:
                    81:06:18:04:f1:72:c6:e1:5f:ee:7a:78:57:22:04:
                    ef:50:9e:1b:70:cb:fa:1a:af:d1:b9:8d:06:64:5e:
                    2a:6f:00:5f:05:bb:aa:4e:c5:bc:e1:99:62:5d:6b:
                    30:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                31:9A:2E:B3:BE:D8:FE:75:A1:29:0C:C3:92:DA:21:B2:69:F2:DF:8A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9CzC26mSbqqo15jAZ9q1P25Uiu3EyLfaem6RUsxYNj24/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9CzC26mSbqqo15jAZ9q1P25Uiu3EyLfaem6RUsxYNj24/0/319A2EB3BED8FE75A1290CC392DA21B269F2DF8A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.242.0/23
                IPv6:
                  2804:9000::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273527

    Signature Algorithm: sha256WithRSAEncryption
         46:08:9b:4a:a4:81:af:01:9e:c7:06:cc:d3:09:c9:90:ba:06:
         83:cf:76:80:72:a0:bd:ef:d7:71:94:57:3b:af:07:89:b1:40:
         a7:d1:d1:5a:cb:e2:93:22:9f:83:9e:75:76:88:4c:1c:ab:71:
         cf:43:9f:5f:14:11:f6:f1:37:e4:d8:5c:18:64:1e:3e:81:03:
         3e:e5:de:c7:8b:4b:0f:65:a5:ab:e2:dc:fd:1d:63:49:89:e4:
         71:17:e9:74:9b:ab:ee:97:37:2c:18:b5:02:b6:29:fc:d0:8c:
         4d:51:47:39:84:33:5e:4c:b3:96:03:74:96:17:09:09:72:2d:
         69:ca:e9:9f:1d:81:37:ac:b9:82:47:cb:67:53:ad:d0:07:57:
         3b:e1:93:da:de:d1:6a:78:70:14:17:59:5d:e9:d4:00:b5:66:
         66:37:ff:d9:be:34:49:04:d2:e4:27:4d:92:3c:a8:48:40:52:
         5a:4f:c3:9e:92:c2:f5:c2:a1:82:95:33:d7:69:9c:3c:32:81:
         cd:d4:14:bb:66:bc:34:53:26:cc:ad:31:5b:bf:8a:e1:4c:aa:
         41:f2:0e:c6:6d:ed:84:54:17:e6:69:c2:43:3d:38:1b:1b:4b:
         fb:bf:55:dd:65:00:a9:16:76:fc:f4:ea:06:b4:22:6e:62:aa:
         87:6f:f3:73
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUQnLkqGM27tRagBF3qe4S3KIWdecwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA4MjcyMDE1NDNaFw0yNTA4MjYyMDIwNDNaMDMxMTAvBgNV
BAMTKDMxOUEyRUIzQkVEOEZFNzVBMTI5MENDMzkyREEyMUIyNjlGMkRGOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSEfJ5OfJC4ZYejAK5m7C+kqvV
zrMPECvQpd0HzKR5mDP+bomsBaIlKkuqtkC9gZgaYf9IHOkM2qaRzRV2hQGIg/Eh
Y/Q/dMRipxD8mTkV6SOXJzxeNsgJO1JY/y51iemzPysjZwytFlzlIFaZrjfPyMlE
fTDgRxzjCx8LwNUqhxmPXaR7R6v7emHt0eGa7XtJu8hmB+PVlcwlEjColDtJ8Z+Z
aEoysxM9BFyqVFwS5jY1xSBLBFXasFRU2olbAVWLVMENdYgyUA5E+s3MDk6N3YEG
GATxcsbhX+56eFciBO9Qnhtwy/oar9G5jQZkXipvAF8Fu6pOxbzhmWJdazARAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQxmi6zvtj+daEp
DMOS2iGyafLfijAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOUN6
QzI2bVNicXFvMTVqQVo5cTFQMjVVaXUzRXlMZmFlbTZSVXN4WU5qMjQvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlD
ekMyNm1TYnFxbzE1akFaOXExUDI1VWl1M0V5TGZhZW02UlVzeFlOajI0LzAvMzE5
QTJFQjNCRUQ4RkU3NUExMjkwQ0MzOTJEQTIxQjI2OUYyREY4QS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQBLQbyMA0EAgACMAcDBQAoBJAAMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQsdzANBgkqhkiG9w0BAQsFAAOCAQEARgibSqSBrwGexwbM
0wnJkLoGg892gHKgve/XcZRXO68HibFAp9HRWsvikyKfg551dohMHKtxz0OfXxQR
9vE35NhcGGQePoEDPuXex4tLD2Wlq+Lc/R1jSYnkcRfpdJur7pc3LBi1ArYp/NCM
TVFHOYQzXkyzlgN0lhcJCXItacrpnx2BN6y5gkfLZ1Ot0AdXO+GT2t7RanhwFBdZ
XenUALVmZjf/2b40SQTS5CdNkjyoSEBSWk/DnpLC9cKhgpUz12mcPDKBzdQUu2a8
NFMmzK0xW7+K4UyqQfIOxm3thFQX5mnCQz04GxtL+79V3WUAqRZ2/PTqBrQibmKq
h2/zcw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:03 2025 by rpki-client