Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3535B922B6C48DAC53ACB01C9BA56D1A9BE28AF6.cer
File:                     3535B922B6C48DAC53ACB01C9BA56D1A9BE28AF6.cer (raw, json)
Hash identifier:          DTnhMQHG8a1TB3vo95BBEDiDNHNsGodU4N0CJukc9q4=
Subject key identifier:   35:35:B9:22:B6:C4:8D:AC:53:AC:B0:1C:9B:A5:6D:1A:9B:E2:8A:F6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7A6673D3607AB8AE9DF22691186B5B7654055214
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/1/3535B922B6C48DAC53ACB01C9BA56D1A9BE28AF6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 21:58:16 +0000
Certificate not after:    Thu 03 Apr 2025 22:03:16 +0000
Subordinate resources:    AS: 263567
                          IP: 179.109.32.0/20
                          IP: 2804:f24::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 02:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:66:73:d3:60:7a:b8:ae:9d:f2:26:91:18:6b:5b:76:54:05:52:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 21:58:16 2024 GMT
            Not After : Apr  3 22:03:16 2025 GMT
        Subject: CN=3535B922B6C48DAC53ACB01C9BA56D1A9BE28AF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:8a:b9:ae:79:39:d7:19:fa:3d:a0:6f:ff:66:
                    7c:5a:0b:9b:a7:8a:35:b8:a2:76:7c:7c:ea:20:5e:
                    85:a4:9e:15:d3:2a:3d:86:3d:4a:36:81:d2:83:27:
                    a5:4b:74:4c:b6:52:a0:9f:72:2b:bc:d6:16:db:ba:
                    d4:46:b2:8f:39:5d:eb:64:c6:a9:7a:4f:78:89:4d:
                    73:3b:4b:db:41:64:7b:c3:43:0d:9d:2a:dc:d5:aa:
                    4e:5a:c6:f9:d1:88:1b:11:be:47:47:0f:46:9a:a2:
                    0b:1e:05:39:e6:26:6a:c2:b3:a7:d6:c5:91:b8:b3:
                    47:c2:88:56:f5:fc:5d:11:76:6a:f7:48:ad:db:76:
                    c3:3a:ca:9b:d5:21:7d:29:ff:93:84:a8:27:8b:27:
                    5c:f8:31:15:31:34:83:90:aa:d3:12:94:86:94:2f:
                    38:b9:17:8b:08:14:a7:3d:aa:ea:70:0b:13:87:c5:
                    39:b6:10:70:14:fb:25:0b:52:5a:98:ee:a0:08:1a:
                    59:f0:61:ec:b0:00:e4:d2:15:59:0e:71:cb:8d:fb:
                    c8:c3:d0:f8:98:97:8b:85:d1:77:94:cf:2e:a2:fe:
                    23:18:34:6f:25:19:51:12:13:17:10:e3:c4:3b:27:
                    d1:93:17:b4:0a:cf:30:84:a3:c8:38:4f:f0:1a:68:
                    0b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                35:35:B9:22:B6:C4:8D:AC:53:AC:B0:1C:9B:A5:6D:1A:9B:E2:8A:F6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/1/3535B922B6C48DAC53ACB01C9BA56D1A9BE28AF6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.32.0/20
                IPv6:
                  2804:f24::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263567

    Signature Algorithm: sha256WithRSAEncryption
         2b:0e:7f:8b:c8:40:10:d7:0b:02:83:41:df:05:c0:92:59:cf:
         9c:b2:49:c7:37:4b:8f:81:e7:81:37:74:42:b7:79:e4:40:2f:
         16:2e:3c:2e:56:28:9c:33:56:65:02:00:9d:ec:02:28:69:5d:
         9c:69:cc:aa:95:ae:2f:df:b8:42:b1:f1:61:c9:13:e4:b3:fb:
         a9:7f:d4:ab:11:bd:52:00:fd:e4:98:7e:0b:a4:98:a6:07:e7:
         26:73:44:72:6d:d0:e0:7e:19:d5:f4:be:a5:20:b1:2b:e7:59:
         ab:af:57:27:33:e0:bb:1c:c0:c1:d0:b6:72:b6:34:09:9a:6c:
         17:b4:31:f4:4c:02:38:f7:f2:80:5a:d3:a7:ed:56:6e:1b:3d:
         11:3e:d4:c7:09:e5:5c:2d:59:73:8d:f1:9e:58:e0:32:c0:4a:
         0a:34:9a:d9:89:fa:2a:6b:94:8c:82:2f:8c:8e:1c:80:3a:d2:
         cc:db:25:a0:52:a7:7e:b5:56:cd:a9:25:d0:11:e6:4e:fc:21:
         b3:6a:5d:6f:e3:67:11:dd:9b:d4:83:4e:92:04:6a:06:49:26:
         af:62:35:a3:5f:81:dd:5d:fb:94:34:e4:6b:11:88:9c:da:ee:
         25:04:f5:cf:cf:7e:16:9a:65:72:e8:f9:14:66:2b:29:13:f5:
         f7:57:3f:a3
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUemZz02B6uK6d8iaRGGtbdlQFUhQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQyMTU4MTZaFw0yNTA0MDMyMjAzMTZaMDMxMTAvBgNV
BAMTKDM1MzVCOTIyQjZDNDhEQUM1M0FDQjAxQzlCQTU2RDFBOUJFMjhBRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0irmueTnXGfo9oG//ZnxaC5un
ijW4onZ8fOogXoWknhXTKj2GPUo2gdKDJ6VLdEy2UqCfciu81hbbutRGso85Xetk
xql6T3iJTXM7S9tBZHvDQw2dKtzVqk5axvnRiBsRvkdHD0aaogseBTnmJmrCs6fW
xZG4s0fCiFb1/F0Rdmr3SK3bdsM6ypvVIX0p/5OEqCeLJ1z4MRUxNIOQqtMSlIaU
Lzi5F4sIFKc9qupwCxOHxTm2EHAU+yULUlqY7qAIGlnwYeywAOTSFVkOccuN+8jD
0PiYl4uF0XeUzy6i/iMYNG8lGVESExcQ48Q7J9GTF7QKzzCEo8g4T/AaaAuhAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ1NbkitsSNrFOs
sBybpW0am+KK9jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOVhw
Z3VOQmdDdlpWSnBWM2VZYVFoTGNvY0tpMVZjbkpwMkF6SGdpNk5ZckEvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlY
cGd1TkJnQ3ZaVkpwVjNlWWFRaExjb2NLaTFWY25KcDJBekhnaTZOWXJBLzEvMzUz
NUI5MjJCNkM0OERBQzUzQUNCMDFDOUJBNTZEMUE5QkUyOEFGNi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQEs20gMA0EAgACMAcDBQAoBA8kMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQFjzANBgkqhkiG9w0BAQsFAAOCAQEAKw5/i8hAENcLAoNB
3wXAklnPnLJJxzdLj4HngTd0Qrd55EAvFi48LlYonDNWZQIAnewCKGldnGnMqpWu
L9+4QrHxYckT5LP7qX/UqxG9UgD95Jh+C6SYpgfnJnNEcm3Q4H4Z1fS+pSCxK+dZ
q69XJzPguxzAwdC2crY0CZpsF7Qx9EwCOPfygFrTp+1Wbhs9ET7UxwnlXC1Zc43x
nljgMsBKCjSa2Yn6KmuUjIIvjI4cgDrSzNsloFKnfrVWzakl0BHmTvwhs2pdb+Nn
Ed2b1INOkgRqBkkmr2I1o1+B3V37lDTkaxGInNruJQT1z89+Fpplcuj5FGYrKRP1
91c/ow==
-----END CERTIFICATE-----
Generated at Sun Jun 2 02:06:32 2024 by rpki-client on console-fra.rpki-client.org