Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/34FF878B6081E776A912EF69DE77676D3D752020.cer
File:                     34FF878B6081E776A912EF69DE77676D3D752020.cer (raw, json)
Hash identifier:          OwH7SE2N7KvqsnZahw7bQu/qgvd+WJbNNDK7pxrRAZs=
Subject key identifier:   34:FF:87:8B:60:81:E7:76:A9:12:EF:69:DE:77:67:6D:3D:75:20:20
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2D29DBAC9B0B6FC490B4F50948A25B39DF433CDF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A9rFbKoycy9w6yB2fKvKmUkuGRR3vDpkNN9qxu4ofFT9/0/34FF878B6081E776A912EF69DE77676D3D752020.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A9rFbKoycy9w6yB2fKvKmUkuGRR3vDpkNN9qxu4ofFT9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 01 Nov 2024 11:52:07 +0000
Certificate not after:    Fri 31 Oct 2025 11:57:07 +0000
Subordinate resources:    AS: 268670
                          IP: 45.163.132.0/22
                          IP: 2804:54cc::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:29:db:ac:9b:0b:6f:c4:90:b4:f5:09:48:a2:5b:39:df:43:3c:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  1 11:52:07 2024 GMT
            Not After : Oct 31 11:57:07 2025 GMT
        Subject: CN=34FF878B6081E776A912EF69DE77676D3D752020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:35:09:90:0e:08:bc:79:4f:44:f8:c0:c3:54:
                    0e:d9:ab:d1:0e:4a:26:92:87:96:9b:c8:77:d6:ed:
                    39:16:ea:ec:8b:b7:12:23:90:02:99:55:ff:c2:90:
                    c0:18:2c:46:62:86:c2:63:47:8c:f9:b5:93:3c:ec:
                    b5:37:60:7b:18:2c:1b:fd:6a:f7:b7:58:71:ea:ca:
                    ce:2f:6e:f3:99:51:57:5b:71:9d:43:59:af:23:65:
                    79:4b:0d:2b:ed:ae:09:f6:f0:bd:90:52:bc:cb:42:
                    ab:8c:48:8f:8c:79:bd:01:f5:95:2c:7a:d5:97:61:
                    bf:30:99:cc:d8:2e:9f:5c:2e:2b:99:2a:5a:62:a9:
                    33:08:7d:e5:70:a8:d1:92:db:34:c2:1f:f0:39:15:
                    fb:2a:25:4d:83:6a:69:2f:8d:03:22:00:f3:7c:2f:
                    be:cc:89:1a:65:5c:4d:f0:46:4c:80:fd:14:fd:fd:
                    dd:fa:61:bd:21:e8:fb:42:f8:ce:7d:1e:56:f3:d9:
                    79:5c:7a:38:b9:30:a0:47:58:79:b6:75:6e:c5:08:
                    6a:24:cf:d5:74:cc:fd:8e:b3:c6:ad:60:06:68:5e:
                    6a:b7:44:e8:2a:f2:72:bf:47:9d:14:85:91:6b:5b:
                    fd:86:6e:1b:2b:c6:0b:74:9a:24:e0:d0:18:2e:1e:
                    cd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                34:FF:87:8B:60:81:E7:76:A9:12:EF:69:DE:77:67:6D:3D:75:20:20
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A9rFbKoycy9w6yB2fKvKmUkuGRR3vDpkNN9qxu4ofFT9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A9rFbKoycy9w6yB2fKvKmUkuGRR3vDpkNN9qxu4ofFT9/0/34FF878B6081E776A912EF69DE77676D3D752020.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.132.0/22
                IPv6:
                  2804:54cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268670

    Signature Algorithm: sha256WithRSAEncryption
         48:4e:32:16:51:dd:1b:c6:8c:c0:02:61:fd:c2:2d:dc:d5:62:
         f5:6b:a0:cc:41:33:dc:b4:2b:3d:4e:b6:af:47:b1:00:60:08:
         bd:29:c9:2d:ac:1f:f0:04:37:31:a0:b3:c1:5f:d7:08:01:79:
         41:fe:62:b1:6b:86:d1:d7:ba:e1:48:6e:c7:7b:0b:fd:63:af:
         fa:22:46:18:33:b0:86:e1:09:56:4a:cf:65:3d:ec:45:5f:9b:
         39:85:2b:f0:d2:a2:75:80:63:08:68:f4:10:a4:a4:0d:90:54:
         76:6e:24:c0:be:1c:9e:e2:31:b0:ca:07:b3:71:21:4a:d3:a0:
         df:b2:1e:92:c8:f5:71:d1:bb:63:0c:45:4c:a3:d6:75:a5:86:
         b7:43:69:c7:86:14:6b:fb:3e:eb:d3:64:4b:6a:28:33:41:97:
         90:80:dd:6c:8e:3c:fe:c4:1c:37:65:9c:36:bd:41:46:06:d3:
         35:5b:df:2c:7c:7a:7b:51:97:e4:53:29:cc:99:0f:bd:78:6d:
         57:24:75:df:32:3e:b7:86:b5:9d:ec:58:63:60:24:f5:b9:c3:
         23:bd:10:5a:08:42:a7:47:d3:c1:f6:06:ba:c1:14:6c:29:b3:
         9f:c3:fc:2c:df:74:cc:e9:c6:38:44:95:c9:06:e5:f2:93:af:
         43:0c:5e:81
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIULSnbrJsLb8SQtPUJSKJbOd9DPN8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDExMDExMTUyMDdaFw0yNTEwMzExMTU3MDdaMDMxMTAvBgNV
BAMTKDM0RkY4NzhCNjA4MUU3NzZBOTEyRUY2OURFNzc2NzZEM0Q3NTIwMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuNQmQDgi8eU9E+MDDVA7Zq9EO
SiaSh5abyHfW7TkW6uyLtxIjkAKZVf/CkMAYLEZihsJjR4z5tZM87LU3YHsYLBv9
ave3WHHqys4vbvOZUVdbcZ1DWa8jZXlLDSvtrgn28L2QUrzLQquMSI+Meb0B9ZUs
etWXYb8wmczYLp9cLiuZKlpiqTMIfeVwqNGS2zTCH/A5FfsqJU2DamkvjQMiAPN8
L77MiRplXE3wRkyA/RT9/d36Yb0h6PtC+M59Hlbz2Xlceji5MKBHWHm2dW7FCGok
z9V0zP2Os8atYAZoXmq3ROgq8nK/R50UhZFrW/2Gbhsrxgt0miTg0BguHs3HAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ0/4eLYIHndqkS
72ned2dtPXUgIDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQTly
RmJLb3ljeTl3NnlCMmZLdkttVWt1R1JSM3ZEcGtOTjlxeHU0b2ZGVDkvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0E5
ckZiS295Y3k5dzZ5QjJmS3ZLbVVrdUdSUjN2RHBrTk45cXh1NG9mRlQ5LzAvMzRG
Rjg3OEI2MDgxRTc3NkE5MTJFRjY5REU3NzY3NkQzRDc1MjAyMC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLaOEMA0EAgACMAcDBQAoBFTMMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQZfjANBgkqhkiG9w0BAQsFAAOCAQEASE4yFlHdG8aMwAJh
/cIt3NVi9WugzEEz3LQrPU62r0exAGAIvSnJLawf8AQ3MaCzwV/XCAF5Qf5isWuG
0de64Uhux3sL/WOv+iJGGDOwhuEJVkrPZT3sRV+bOYUr8NKidYBjCGj0EKSkDZBU
dm4kwL4cnuIxsMoHs3EhStOg37Ieksj1cdG7YwxFTKPWdaWGt0Npx4YUa/s+69Nk
S2ooM0GXkIDdbI48/sQcN2WcNr1BRgbTNVvfLHx6e1GX5FMpzJkPvXhtVyR13zI+
t4a1nexYY2Ak9bnDI70QWghCp0fTwfYGusEUbCmzn8P8LN90zOnGOESVyQbl8pOv
QwxegQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:20 2024 by rpki-client on console-fra.rpki-client.org