Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD.cer
File:                     3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD.cer (raw, json)
Hash identifier:          kqo9e6VLzo5Vc1mqaTYNbCTEMQoMP/1EXhzrws6CpME=
Subject key identifier:   3F:D3:A1:2D:37:BF:70:EB:94:5F:12:1D:5A:05:38:B9:8B:BC:EB:CD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0E1C42C4DD52758A4909D2B5BDEB8FD6A850EC5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 24 Apr 2024 12:31:46 +0000
Certificate not after:    Wed 23 Apr 2025 12:36:46 +0000
Subordinate resources:    AS: 270253
                          IP: 200.110.204.0/22
                          IP: 2804:692c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 03:07:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:1c:42:c4:dd:52:75:8a:49:09:d2:b5:bd:eb:8f:d6:a8:50:ec:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 24 12:31:46 2024 GMT
            Not After : Apr 23 12:36:46 2025 GMT
        Subject: CN=3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6b:98:6b:af:59:3f:de:84:b4:73:e4:88:c7:
                    b6:d9:2a:7b:89:90:fc:1b:0b:6f:51:ec:bc:f1:6c:
                    40:cc:fa:99:bc:a3:4f:43:f9:c8:24:fe:ea:c9:ab:
                    31:fd:9f:35:e3:96:f1:02:85:d8:43:9d:8c:9f:14:
                    a2:47:d2:0d:fd:46:55:9f:18:94:06:be:a9:f5:20:
                    90:62:a9:da:66:51:bc:8c:72:87:df:56:13:c3:d1:
                    97:83:37:fd:81:94:3d:b4:0f:1e:9d:a9:c8:c6:57:
                    da:fb:1e:8a:83:61:d9:63:60:5c:cc:cc:9c:5f:53:
                    76:05:4d:cd:d3:5a:96:db:6d:2e:a2:f3:1e:10:35:
                    0e:b6:69:bf:9a:4c:b4:bf:90:cd:c7:d0:56:fc:c6:
                    9f:87:2b:92:3a:d8:09:04:8d:80:d8:ce:d5:3d:fe:
                    22:7c:47:9c:89:86:fe:33:5b:27:5e:c9:98:05:c8:
                    50:0c:b4:66:05:1c:5d:4a:75:b2:d6:65:19:57:71:
                    f3:ea:68:13:53:01:73:42:01:a6:80:bb:4b:69:37:
                    8a:d2:78:7a:5d:f5:76:c1:25:01:f5:67:44:bf:6e:
                    67:c2:c3:00:9a:7f:e2:43:3e:aa:b7:11:8e:40:a2:
                    43:87:ea:da:d2:55:25:65:71:4b:c4:05:bb:13:b6:
                    80:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3F:D3:A1:2D:37:BF:70:EB:94:5F:12:1D:5A:05:38:B9:8B:BC:EB:CD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.204.0/22
                IPv6:
                  2804:692c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270253

    Signature Algorithm: sha256WithRSAEncryption
         37:19:93:a0:4a:36:be:fe:12:03:23:53:54:c8:79:48:fb:5d:
         6a:2f:f3:b5:da:46:ce:cd:5b:09:ba:0c:ca:b3:93:01:58:cd:
         32:80:b1:de:e6:65:c5:da:93:94:5d:4b:3f:66:7e:c9:c4:1c:
         41:64:1b:84:59:1f:3d:c3:4d:77:56:00:26:78:4f:93:00:f5:
         9e:90:d1:3f:93:f6:c0:18:c1:46:d2:30:2f:04:e1:8d:88:10:
         ed:a0:b5:94:16:48:dc:bc:dd:2f:dd:aa:1e:00:6d:f0:7e:6c:
         de:02:9c:15:77:9b:c3:55:95:d7:4c:e8:49:7d:f6:74:f6:9e:
         29:66:47:89:80:20:40:ed:56:73:ac:10:cc:78:7a:4d:3b:a6:
         e5:9d:4e:7c:2c:f5:db:e4:4b:4e:8c:32:63:78:8b:3e:60:8b:
         09:5f:ad:9a:e3:92:19:ed:17:37:03:8e:02:bd:44:32:83:2f:
         cc:81:61:ae:03:61:2d:5a:dd:14:ff:5a:75:da:5b:82:27:ef:
         24:e3:9e:41:7e:a1:73:9c:1e:0c:f7:a8:45:6d:91:3b:f5:d1:
         b6:18:9d:49:5a:51:03:de:f9:f3:95:04:26:2a:9c:fd:18:28:
         ea:bc:7e:50:f1:96:eb:de:86:9a:08:66:6e:17:85:64:4f:b3:
         89:8b:ec:bc
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUDhxCxN1SdYpJCdK1veuP1qhQ7F0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MjQxMjMxNDZaFw0yNTA0MjMxMjM2NDZaMDMxMTAvBgNV
BAMTKDNGRDNBMTJEMzdCRjcwRUI5NDVGMTIxRDVBMDUzOEI5OEJCQ0VCQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCia5hrr1k/3oS0c+SIx7bZKnuJ
kPwbC29R7LzxbEDM+pm8o09D+cgk/urJqzH9nzXjlvEChdhDnYyfFKJH0g39RlWf
GJQGvqn1IJBiqdpmUbyMcoffVhPD0ZeDN/2BlD20Dx6dqcjGV9r7HoqDYdljYFzM
zJxfU3YFTc3TWpbbbS6i8x4QNQ62ab+aTLS/kM3H0Fb8xp+HK5I62AkEjYDYztU9
/iJ8R5yJhv4zWydeyZgFyFAMtGYFHF1KdbLWZRlXcfPqaBNTAXNCAaaAu0tpN4rS
eHpd9XbBJQH1Z0S/bmfCwwCaf+JDPqq3EY5AokOH6trSVSVlcUvEBbsTtoBjAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ/06EtN79w65Rf
Eh1aBTi5i7zrzTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM2Jj
NDg2dGN5QmF2YW9oV2Y2OW9MOEJ2WDJCOUFUeDVaUE5OVFRRcDM4UnIvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNi
YzQ4NnRjeUJhdmFvaFdmNjlvTDhCdlgyQjlBVHg1WlBOTlRUUXAzOFJyLzAvM0ZE
M0ExMkQzN0JGNzBFQjk0NUYxMjFENUEwNTM4Qjk4QkJDRUJDRC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCyG7MMA0EAgACMAcDBQAoBGksMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQfrTANBgkqhkiG9w0BAQsFAAOCAQEANxmToEo2vv4SAyNT
VMh5SPtdai/ztdpGzs1bCboMyrOTAVjNMoCx3uZlxdqTlF1LP2Z+ycQcQWQbhFkf
PcNNd1YAJnhPkwD1npDRP5P2wBjBRtIwLwThjYgQ7aC1lBZI3LzdL92qHgBt8H5s
3gKcFXebw1WV10zoSX32dPaeKWZHiYAgQO1Wc6wQzHh6TTum5Z1OfCz12+RLTowy
Y3iLPmCLCV+tmuOSGe0XNwOOAr1EMoMvzIFhrgNhLVrdFP9addpbgifvJOOeQX6h
c5weDPeoRW2RO/XRthidSVpRA97585UEJiqc/Rgo6rx+UPGW696GmghmbheFZE+z
iYvsvA==
-----END CERTIFICATE-----
Generated at Wed Jun 26 02:08:41 2024 by rpki-client on console-ams.rpki-client.org