Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/35F51181E5E9E18B41B49E6409FA12C4899C586F.cer
File:                     35F51181E5E9E18B41B49E6409FA12C4899C586F.cer (raw, json)
Hash identifier:          wxmPQspqBoDZikztfSy1gJKHw7XjMh7ddvYjvt/trfM=
Subject key identifier:   35:F5:11:81:E5:E9:E1:8B:41:B4:9E:64:09:FA:12:C4:89:9C:58:6F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3B54AA2A303B7E27709083B688575824E86BDEF7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/1/35F51181E5E9E18B41B49E6409FA12C4899C586F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 07:06:17 +0000
Certificate not after:    Thu 03 Apr 2025 07:11:17 +0000
Subordinate resources:    AS: 263336
                          IP: 191.36.168.0/21
                          IP: 2804:148c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 12:57:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:54:aa:2a:30:3b:7e:27:70:90:83:b6:88:57:58:24:e8:6b:de:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 07:06:17 2024 GMT
            Not After : Apr  3 07:11:17 2025 GMT
        Subject: CN=35F51181E5E9E18B41B49E6409FA12C4899C586F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:04:28:78:5b:89:81:9d:1b:c6:ec:4a:85:83:
                    b0:a7:69:6b:a2:99:36:91:9c:c2:08:ae:2f:48:73:
                    ce:bd:d7:69:88:25:2b:b1:04:c5:7e:53:d9:3b:3d:
                    69:95:7a:aa:f6:e0:e8:c9:a1:20:77:95:c9:59:a3:
                    5a:f3:5c:41:b1:9f:1c:81:67:3e:18:8c:75:98:e2:
                    1e:d6:aa:cc:70:4c:df:f1:79:f3:f4:a9:8a:66:30:
                    1a:0c:1b:11:3a:48:9e:62:4f:b3:5b:d0:7f:3f:53:
                    65:0a:70:8f:15:1e:09:b8:c9:a3:cc:dd:2c:81:4d:
                    7b:05:6f:e0:9c:86:69:39:89:33:95:4b:d1:0e:7d:
                    74:e5:05:32:6d:9e:66:55:66:55:ee:0c:ac:65:d1:
                    7d:14:56:c8:42:26:79:66:cb:1e:75:ed:a8:f6:77:
                    fd:af:99:1e:5c:14:ee:fc:7a:73:8b:52:08:01:88:
                    02:70:33:cb:f5:90:b1:39:4a:ad:21:32:86:36:71:
                    8d:6d:51:cf:93:e5:43:19:96:71:1e:25:d1:3b:92:
                    24:55:7a:4f:50:e8:fe:e2:09:d8:c5:dd:e2:e3:65:
                    72:c1:09:c8:5e:ed:7c:f3:33:fd:1d:eb:c7:66:94:
                    4c:67:b2:c6:ff:6f:18:a4:24:2f:02:41:33:b1:b4:
                    e3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                35:F5:11:81:E5:E9:E1:8B:41:B4:9E:64:09:FA:12:C4:89:9C:58:6F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/1/35F51181E5E9E18B41B49E6409FA12C4899C586F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.168.0/21
                IPv6:
                  2804:148c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263336

    Signature Algorithm: sha256WithRSAEncryption
         ce:70:50:7f:7e:b1:cd:5a:bf:81:9a:7a:85:2c:64:cf:72:5a:
         35:d5:2b:73:62:81:e7:7e:31:18:86:06:53:c1:5b:6c:7d:c5:
         c8:af:db:b9:7b:ed:41:06:e0:fa:e9:a3:01:b2:00:88:d0:be:
         66:4e:3c:2e:62:b0:d1:80:29:e5:8a:c3:25:b3:52:a5:49:c2:
         d2:4c:66:2d:55:56:c2:e9:19:73:4d:5b:64:b5:a9:1d:32:7a:
         d8:d2:9b:28:bd:01:a6:54:c6:fd:75:8f:24:1d:e2:10:64:9c:
         a7:bd:01:f0:e9:6a:69:8f:40:ff:68:50:b1:5c:fa:4c:19:50:
         db:86:18:04:27:2a:35:36:b5:48:23:30:b8:42:ef:45:76:a4:
         ee:08:96:ea:5e:0e:dc:54:3c:77:af:94:6c:b1:f7:61:92:f2:
         67:dc:91:95:bf:ed:3b:ef:29:23:97:71:55:13:55:21:67:03:
         bc:de:ef:e1:61:af:ce:df:f7:38:d6:e4:1e:cf:10:db:99:c4:
         7d:37:11:52:ee:9b:5e:a2:ec:f9:5e:2a:43:8f:cf:dc:60:e4:
         b5:97:f6:7b:3e:a9:8d:00:84:d7:e0:67:ba:e8:90:86:ed:89:
         b1:4c:4a:13:62:c2:b2:b7:ce:e8:48:56:ea:9d:ea:14:ee:70:
         41:70:c8:1d
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUO1SqKjA7fidwkIO2iFdYJOhr3vcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwNzA2MTdaFw0yNTA0MDMwNzExMTdaMDMxMTAvBgNV
BAMTKDM1RjUxMTgxRTVFOUUxOEI0MUI0OUU2NDA5RkExMkM0ODk5QzU4NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLBCh4W4mBnRvG7EqFg7CnaWui
mTaRnMIIri9Ic86912mIJSuxBMV+U9k7PWmVeqr24OjJoSB3lclZo1rzXEGxnxyB
Zz4YjHWY4h7WqsxwTN/xefP0qYpmMBoMGxE6SJ5iT7Nb0H8/U2UKcI8VHgm4yaPM
3SyBTXsFb+Cchmk5iTOVS9EOfXTlBTJtnmZVZlXuDKxl0X0UVshCJnlmyx517aj2
d/2vmR5cFO78enOLUggBiAJwM8v1kLE5Sq0hMoY2cY1tUc+T5UMZlnEeJdE7kiRV
ek9Q6P7iCdjF3eLjZXLBCche7XzzM/0d68dmlExnssb/bxikJC8CQTOxtONRAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ19RGB5enhi0G0
nmQJ+hLEiZxYbzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRkIy
cTdhR1RMdkdCVnRQcllVTUp0ZEF0YlhSWFZDWFFMQVlHZkZwUVlIMkovMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZC
MnE3YUdUTHZHQlZ0UHJZVU1KdGRBdGJYUlhWQ1hRTEFZR2ZGcFFZSDJKLzEvMzVG
NTExODFFNUU5RTE4QjQxQjQ5RTY0MDlGQTEyQzQ4OTlDNTg2Ri5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQDvySoMA0EAgACMAcDBQAoBBSMMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQEqDANBgkqhkiG9w0BAQsFAAOCAQEAznBQf36xzVq/gZp6
hSxkz3JaNdUrc2KB534xGIYGU8FbbH3FyK/buXvtQQbg+umjAbIAiNC+Zk48LmKw
0YAp5YrDJbNSpUnC0kxmLVVWwukZc01bZLWpHTJ62NKbKL0BplTG/XWPJB3iEGSc
p70B8OlqaY9A/2hQsVz6TBlQ24YYBCcqNTa1SCMwuELvRXak7giW6l4O3FQ8d6+U
bLH3YZLyZ9yRlb/tO+8pI5dxVRNVIWcDvN7v4WGvzt/3ONbkHs8Q25nEfTcRUu6b
XqLs+V4qQ4/P3GDktZf2ez6pjQCE1+BnuuiQhu2JsUxKE2LCsrfO6EhW6p3qFO5w
QXDIHQ==
-----END CERTIFICATE-----
Generated at Tue Jun 18 14:02:02 2024 by rpki-client on console-ams.rpki-client.org