Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/42614C68B5B97437E1FC1379B17F977D9E72CCB3.cer
File:                     42614C68B5B97437E1FC1379B17F977D9E72CCB3.cer (raw, json)
Hash identifier:          rrb2jQEcXAEqznGaWdRz2YEGQKue2zXIHjTTxqAMcBE=
Subject key identifier:   42:61:4C:68:B5:B9:74:37:E1:FC:13:79:B1:7F:97:7D:9E:72:CC:B3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0CBF90C80FA6090AE0F68A0ACFD2B9D72E0CB7BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/42614C68B5B97437E1FC1379B17F977D9E72CCB3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 03 Jun 2024 16:41:27 +0000
Certificate not after:    Mon 02 Jun 2025 16:46:27 +0000
Subordinate resources:    AS: 267999
                          IP: 45.167.108.0/22
                          IP: 2804:5674::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jul 2024 05:09:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:bf:90:c8:0f:a6:09:0a:e0:f6:8a:0a:cf:d2:b9:d7:2e:0c:b7:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  3 16:41:27 2024 GMT
            Not After : Jun  2 16:46:27 2025 GMT
        Subject: CN=42614C68B5B97437E1FC1379B17F977D9E72CCB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9e:8f:ae:48:e9:82:1b:74:c2:b6:cc:4e:ce:
                    3f:e0:b6:c0:6c:67:5e:64:a6:aa:aa:91:b2:d6:34:
                    1c:47:d4:2e:6c:c3:1b:29:08:ce:1a:88:30:91:af:
                    a9:4e:5c:3b:dc:03:2f:67:4f:c4:e0:35:7a:41:6b:
                    79:e0:d4:29:6f:25:86:2b:e9:de:8b:29:a0:ce:d2:
                    a5:31:55:54:26:d7:72:90:62:db:fe:f2:97:2b:20:
                    4c:a4:3f:f2:c7:e4:80:86:e8:b7:50:11:20:f3:73:
                    7f:2c:55:86:f4:69:9d:02:43:5e:f1:af:46:48:78:
                    1d:b2:35:5b:d9:a8:a6:fb:56:d2:d7:88:e9:6a:4d:
                    74:ef:dd:9e:19:ff:2e:08:5b:9f:7d:78:90:73:3c:
                    52:90:73:58:e9:76:35:c4:94:3c:d0:5d:99:8d:d7:
                    82:70:58:17:47:8e:d2:b7:fc:cf:05:6f:f3:c9:6f:
                    f8:a3:3b:38:47:ce:d3:bd:5c:37:82:27:11:cd:13:
                    6b:79:31:b1:c2:66:4d:cd:f9:ec:02:c6:31:d7:99:
                    9b:61:3f:ca:f9:f3:e8:c2:67:c1:50:67:a0:cc:22:
                    64:1a:cd:93:42:ae:f8:04:e9:c9:96:ac:1f:44:44:
                    c4:9c:1b:ea:0e:49:46:67:e7:e4:db:12:ea:d8:a2:
                    8e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                42:61:4C:68:B5:B9:74:37:E1:FC:13:79:B1:7F:97:7D:9E:72:CC:B3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/42614C68B5B97437E1FC1379B17F977D9E72CCB3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.108.0/22
                IPv6:
                  2804:5674::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267999

    Signature Algorithm: sha256WithRSAEncryption
         c7:f6:cd:69:3b:d3:c5:86:71:c5:5b:a5:11:b4:63:fd:d4:02:
         bf:39:13:2a:80:8f:c5:84:26:1f:a5:0e:ac:93:c5:0f:df:29:
         0a:a7:df:9a:c5:10:60:8a:32:17:75:e6:b7:da:6c:54:0f:07:
         ef:40:47:74:82:cc:af:01:55:3f:3f:99:a4:31:99:ad:4b:b1:
         6f:f9:07:5d:68:8d:db:56:a7:34:c3:66:73:2d:ab:47:63:86:
         1d:ea:39:6a:4a:8d:0c:d5:ca:5f:da:e6:dc:08:5e:98:34:fb:
         07:78:10:34:50:c4:39:c3:12:24:63:d1:f2:3a:c9:ce:f7:23:
         fd:8c:d1:1b:7b:99:2e:37:e6:86:ca:da:9d:98:36:6d:02:63:
         50:ab:43:ce:a1:f1:44:3a:c1:46:55:78:b8:9a:23:5f:51:b1:
         c4:23:15:16:c4:08:a7:e9:64:2e:cb:74:db:7d:6c:d4:f3:5b:
         f7:ef:a7:26:92:26:b1:0a:9f:75:a9:96:43:76:11:f4:77:6b:
         eb:e4:bf:90:ac:fd:1e:20:f1:3b:06:62:5e:a0:64:f1:23:8f:
         64:ef:29:a4:39:83:9e:9e:0c:69:42:10:4e:14:63:20:8a:a5:
         48:0f:e4:11:2f:51:ac:15:72:79:39:51:fe:7e:49:0b:da:7a:
         cd:1d:12:ed
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUDL+QyA+mCQrg9ooKz9K51y4Mt70wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA2MDMxNjQxMjdaFw0yNTA2MDIxNjQ2MjdaMDMxMTAvBgNV
BAMTKDQyNjE0QzY4QjVCOTc0MzdFMUZDMTM3OUIxN0Y5NzdEOUU3MkNDQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpno+uSOmCG3TCtsxOzj/gtsBs
Z15kpqqqkbLWNBxH1C5swxspCM4aiDCRr6lOXDvcAy9nT8TgNXpBa3ng1ClvJYYr
6d6LKaDO0qUxVVQm13KQYtv+8pcrIEykP/LH5ICG6LdQESDzc38sVYb0aZ0CQ17x
r0ZIeB2yNVvZqKb7VtLXiOlqTXTv3Z4Z/y4IW599eJBzPFKQc1jpdjXElDzQXZmN
14JwWBdHjtK3/M8Fb/PJb/ijOzhHztO9XDeCJxHNE2t5MbHCZk3N+ewCxjHXmZth
P8r58+jCZ8FQZ6DMImQazZNCrvgE6cmWrB9ERMScG+oOSUZn5+TbEurYoo67AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRCYUxotbl0N+H8
E3mxf5d9nnLMszAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQW1Q
akVHZUN5bnQyYlNUdTh4MTRHVnVkV2ZwV2trZkFkV3ZnZnVGWldyS2QvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Ft
UGpFR2VDeW50MmJTVHU4eDE0R1Z1ZFdmcFdra2ZBZFd2Z2Z1RlpXcktkLzAvNDI2
MTRDNjhCNUI5NzQzN0UxRkMxMzc5QjE3Rjk3N0Q5RTcyQ0NCMy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLadsMA0EAgACMAcDBQAoBFZ0MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQW3zANBgkqhkiG9w0BAQsFAAOCAQEAx/bNaTvTxYZxxVul
EbRj/dQCvzkTKoCPxYQmH6UOrJPFD98pCqffmsUQYIoyF3Xmt9psVA8H70BHdILM
rwFVPz+ZpDGZrUuxb/kHXWiN21anNMNmcy2rR2OGHeo5akqNDNXKX9rm3AhemDT7
B3gQNFDEOcMSJGPR8jrJzvcj/YzRG3uZLjfmhsranZg2bQJjUKtDzqHxRDrBRlV4
uJojX1GxxCMVFsQIp+lkLst0231s1PNb9++nJpImsQqfdamWQ3YR9Hdr6+S/kKz9
HiDxOwZiXqBk8SOPZO8ppDmDnp4MaUIQThRjIIqlSA/kES9RrBVyeTlR/n5JC9p6
zR0S7Q==
-----END CERTIFICATE-----
Generated at Mon Jul 1 02:59:25 2024 by rpki-client on console-fra.rpki-client.org