Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4BB72199A694618FCF018DF5F87E174F59B764D8.cer
File:                     4BB72199A694618FCF018DF5F87E174F59B764D8.cer (raw, json)
Hash identifier:          AOGbcgWvJGm8PDWdHZsyfel7tiUOIAQazV0tcHphKtA=
Subject key identifier:   4B:B7:21:99:A6:94:61:8F:CF:01:8D:F5:F8:7E:17:4F:59:B7:64:D8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3FCAA06C34A5C7C24C96B31792A6B4988F925D15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2rE5XM5FCkYEzYy8ipKM4i8NiiL4uJGy8s8CKHyqiPkP/1/4BB72199A694618FCF018DF5F87E174F59B764D8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2rE5XM5FCkYEzYy8ipKM4i8NiiL4uJGy8s8CKHyqiPkP/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 18:51:49 +0000
Certificate not after:    Thu 03 Apr 2025 18:56:49 +0000
Subordinate resources:    AS: 271658
                          IP: 131.255.131.0/24
                          IP: 2804:7ef8::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jul 2024 07:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ca:a0:6c:34:a5:c7:c2:4c:96:b3:17:92:a6:b4:98:8f:92:5d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 18:51:49 2024 GMT
            Not After : Apr  3 18:56:49 2025 GMT
        Subject: CN=4BB72199A694618FCF018DF5F87E174F59B764D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2b:3b:c4:b9:fd:6b:a3:49:bf:d1:42:e4:63:
                    c0:85:f7:66:cf:87:ea:ca:18:98:e7:c5:86:18:92:
                    7a:26:25:d6:f6:b6:cc:6f:92:af:f9:b1:80:a7:78:
                    48:0d:c2:d4:89:ec:6f:6a:71:37:0e:bd:e1:2e:ec:
                    13:79:91:0f:cd:ab:34:bc:3d:da:1c:c2:09:5e:2b:
                    0e:27:ae:41:f5:1a:59:91:5e:a3:2b:51:3d:fe:40:
                    8c:1b:ce:c6:19:94:92:fc:d2:6e:99:64:0b:73:e6:
                    77:0c:24:b9:fc:8a:a8:ce:8b:eb:c6:6d:0c:d8:eb:
                    03:b6:68:f4:4b:df:a8:a2:35:4b:d5:6e:f2:d4:4b:
                    99:ba:66:d2:30:a3:2b:5a:dd:07:1f:45:a4:79:ef:
                    53:85:23:b9:94:bc:24:30:7c:f2:16:5c:65:50:d5:
                    65:fc:b7:ed:1f:cd:26:4e:be:2b:cd:bf:22:d6:c8:
                    da:33:44:51:fc:d5:92:66:fe:d7:89:40:32:aa:ad:
                    af:fa:4b:7a:10:99:a0:b6:63:aa:1a:54:95:4a:aa:
                    08:27:b3:99:f8:b3:98:64:74:bb:5c:8c:f9:1f:3e:
                    cf:99:89:50:44:d3:e8:f9:5c:a7:de:c7:6f:7a:59:
                    f4:13:6a:19:7c:d2:ac:da:5e:a6:85:8b:0f:73:99:
                    91:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4B:B7:21:99:A6:94:61:8F:CF:01:8D:F5:F8:7E:17:4F:59:B7:64:D8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2rE5XM5FCkYEzYy8ipKM4i8NiiL4uJGy8s8CKHyqiPkP/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2rE5XM5FCkYEzYy8ipKM4i8NiiL4uJGy8s8CKHyqiPkP/1/4BB72199A694618FCF018DF5F87E174F59B764D8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.131.0/24
                IPv6:
                  2804:7ef8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271658

    Signature Algorithm: sha256WithRSAEncryption
         a4:e2:06:4d:00:c7:3d:19:96:c6:7c:a5:77:ae:5e:e9:96:0f:
         7e:fc:a7:50:bb:5b:ce:1a:ff:a8:62:a9:4c:ce:51:eb:35:2f:
         43:5d:b3:c1:76:2c:91:e3:3c:8d:9c:ac:c6:5a:52:18:7c:7c:
         f3:2c:a8:5a:69:61:4d:69:79:2b:99:b3:93:3f:21:d7:5c:e0:
         b5:af:c0:fa:7b:f0:36:90:fb:69:3e:93:91:a6:82:89:cc:e0:
         d0:a7:74:62:d7:21:9c:f5:3c:aa:20:13:3c:d2:1d:fc:fa:c6:
         f1:5d:3d:32:65:15:2d:71:09:da:b2:29:78:bc:53:bb:68:01:
         9d:92:ac:65:9d:16:9d:b5:85:14:66:4c:10:5c:fe:b5:82:7f:
         c9:9a:7b:c0:3a:7d:4b:1b:04:a9:da:cf:96:c1:8d:66:41:27:
         60:80:e3:37:bb:65:72:77:4d:00:f3:92:6b:b4:74:d7:11:f7:
         6b:ee:06:1d:5f:8d:ec:bd:6b:00:67:54:c2:80:17:de:cd:06:
         57:0a:49:84:e3:a4:8b:4c:91:94:e5:cb:dc:39:94:02:cd:eb:
         42:13:01:07:39:92:fc:a6:82:8b:d0:b5:fc:05:7b:1f:10:9f:
         6d:9e:cb:9d:9f:57:20:a3:62:dd:5e:79:37:ba:43:8a:ac:c5:
         fa:4f:8c:b1
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUP8qgbDSlx8JMlrMXkqa0mI+SXRUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQxODUxNDlaFw0yNTA0MDMxODU2NDlaMDMxMTAvBgNV
BAMTKDRCQjcyMTk5QTY5NDYxOEZDRjAxOERGNUY4N0UxNzRGNTlCNzY0RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGKzvEuf1ro0m/0ULkY8CF92bP
h+rKGJjnxYYYknomJdb2tsxvkq/5sYCneEgNwtSJ7G9qcTcOveEu7BN5kQ/NqzS8
PdocwgleKw4nrkH1GlmRXqMrUT3+QIwbzsYZlJL80m6ZZAtz5ncMJLn8iqjOi+vG
bQzY6wO2aPRL36iiNUvVbvLUS5m6ZtIwoyta3QcfRaR571OFI7mUvCQwfPIWXGVQ
1WX8t+0fzSZOvivNvyLWyNozRFH81ZJm/teJQDKqra/6S3oQmaC2Y6oaVJVKqggn
s5n4s5hkdLtcjPkfPs+ZiVBE0+j5XKfex296WfQTahl80qzaXqaFiw9zmZFhAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRLtyGZppRhj88B
jfX4fhdPWbdk2DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMnJF
NVhNNUZDa1lFell5OGlwS000aThOaWlMNHVKR3k4czhDS0h5cWlQa1AvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJy
RTVYTTVGQ2tZRXpZeThpcEtNNGk4TmlpTDR1Skd5OHM4Q0tIeXFpUGtQLzEvNEJC
NzIxOTlBNjk0NjE4RkNGMDE4REY1Rjg3RTE3NEY1OUI3NjREOC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQAg/+DMA0EAgACMAcDBQAoBH74MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQlKjANBgkqhkiG9w0BAQsFAAOCAQEApOIGTQDHPRmWxnyl
d65e6ZYPfvynULtbzhr/qGKpTM5R6zUvQ12zwXYskeM8jZysxlpSGHx88yyoWmlh
TWl5K5mzkz8h11zgta/A+nvwNpD7aT6TkaaCiczg0Kd0YtchnPU8qiATPNId/PrG
8V09MmUVLXEJ2rIpeLxTu2gBnZKsZZ0WnbWFFGZMEFz+tYJ/yZp7wDp9SxsEqdrP
lsGNZkEnYIDjN7tlcndNAPOSa7R01xH3a+4GHV+N7L1rAGdUwoAX3s0GVwpJhOOk
i0yRlOXL3DmUAs3rQhMBBzmS/KaCi9C1/AV7HxCfbZ7LnZ9XIKNi3V55N7pDiqzF
+k+MsQ==
-----END CERTIFICATE-----
Generated at Mon Jul 1 06:09:49 2024 by rpki-client on console-ams.rpki-client.org