Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5047F902BACA932C3B81B997C030811D3F845FB9.cer
File:                     5047F902BACA932C3B81B997C030811D3F845FB9.cer (raw, json)
Hash identifier:          tC6PlOyQYNieEM3YJreBH+7htW4RLTEYfpWpo13SZs8=
Subject key identifier:   50:47:F9:02:BA:CA:93:2C:3B:81:B9:97:C0:30:81:1D:3F:84:5F:B9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       17DF9AA34AFFBA70C60E59F3C7A2A3936CE78CD5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/1/5047F902BACA932C3B81B997C030811D3F845FB9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 00:17:17 +0000
Certificate not after:    Thu 03 Apr 2025 00:22:17 +0000
Subordinate resources:    AS: 52567
                          IP: 177.86.56.0/21
                          IP: 2804:8e54::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:df:9a:a3:4a:ff:ba:70:c6:0e:59:f3:c7:a2:a3:93:6c:e7:8c:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 00:17:17 2024 GMT
            Not After : Apr  3 00:22:17 2025 GMT
        Subject: CN=5047F902BACA932C3B81B997C030811D3F845FB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:24:5c:dd:f8:a9:fb:19:1d:76:c6:85:c3:0a:
                    fd:91:62:ef:52:37:ff:a0:57:95:19:43:f3:5f:15:
                    7b:1f:48:77:39:43:0a:6a:13:01:78:59:0d:63:e9:
                    f0:3d:06:09:32:7e:cc:b3:42:38:63:bb:d6:1e:49:
                    be:15:3d:d0:fa:41:ec:85:a0:00:f5:27:c4:cf:5e:
                    ab:90:e4:3a:47:74:2b:c0:59:b6:71:2e:8e:03:47:
                    1d:71:b6:d2:3c:57:85:56:e9:27:5a:84:d7:9f:19:
                    0c:4c:68:10:69:15:17:c2:7d:23:b6:2f:ba:11:cf:
                    6a:50:e4:f1:fb:9c:89:c6:d6:a7:ec:23:25:ac:79:
                    34:e4:9b:de:1c:ee:66:4e:88:42:89:b1:8e:fd:90:
                    82:d8:37:e2:db:cf:40:d0:c6:54:8c:78:ae:fa:76:
                    68:ba:6b:72:c4:1d:9d:48:0a:ba:9d:e9:ec:b5:76:
                    bb:4f:cc:68:6b:e8:b0:9d:e7:7e:8c:0c:a8:97:b6:
                    68:a1:28:05:a3:6e:f0:4d:b9:24:45:c4:ee:b8:24:
                    a0:ba:a1:a8:7f:e0:fa:3c:fe:48:76:4e:a1:2f:b6:
                    e2:74:ab:c5:65:98:35:20:1b:32:54:cc:17:33:c2:
                    ef:ab:16:1e:78:86:cb:47:18:ed:56:34:71:4f:0d:
                    58:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                50:47:F9:02:BA:CA:93:2C:3B:81:B9:97:C0:30:81:1D:3F:84:5F:B9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/1/5047F902BACA932C3B81B997C030811D3F845FB9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.56.0/21
                IPv6:
                  2804:8e54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52567

    Signature Algorithm: sha256WithRSAEncryption
         53:78:ed:44:3a:bd:a3:f7:de:74:33:1e:de:e0:76:a2:4b:49:
         04:16:e2:5a:11:c2:46:c3:5c:e3:68:bc:95:52:75:b6:b7:17:
         40:d0:31:52:63:fd:a9:44:3a:56:3b:69:dc:f7:5d:b1:02:1c:
         08:56:9f:5a:99:42:30:57:db:3e:40:7a:62:e0:c6:83:7d:81:
         c3:dc:5b:41:c8:a1:f0:69:4d:b3:32:67:89:a2:6c:37:3d:6a:
         30:9c:c0:fa:df:11:a2:27:75:10:fc:6a:7e:72:d0:3e:bf:21:
         c1:24:3a:e1:29:76:37:a5:05:fc:76:ef:ce:c1:36:c1:75:d8:
         6d:65:21:d1:31:f6:5a:85:22:54:34:55:02:b3:85:4c:d4:48:
         67:6f:61:a1:d6:ea:85:8f:34:ea:3d:08:63:c6:01:15:b4:e5:
         48:34:9e:88:c7:3c:9d:79:11:44:2c:45:38:df:77:39:1f:5f:
         68:cd:7d:9a:8e:fe:6e:a0:51:4c:77:f4:f1:44:cd:5b:af:49:
         6f:43:91:dd:a4:c3:0b:42:25:53:0b:c9:52:97:0d:e6:98:5f:
         44:c0:63:98:a3:e6:b5:92:c1:fb:5c:f7:f4:1a:ae:7f:58:35:
         1e:6b:7e:c2:c1:f2:43:ff:8c:5a:50:c7:f7:cc:e9:48:3d:37:
         7c:64:33:ac
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUF9+ao0r/unDGDlnzx6Kjk2znjNUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwMDE3MTdaFw0yNTA0MDMwMDIyMTdaMDMxMTAvBgNV
BAMTKDUwNDdGOTAyQkFDQTkzMkMzQjgxQjk5N0MwMzA4MTFEM0Y4NDVGQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTJFzd+Kn7GR12xoXDCv2RYu9S
N/+gV5UZQ/NfFXsfSHc5QwpqEwF4WQ1j6fA9BgkyfsyzQjhju9YeSb4VPdD6QeyF
oAD1J8TPXquQ5DpHdCvAWbZxLo4DRx1xttI8V4VW6SdahNefGQxMaBBpFRfCfSO2
L7oRz2pQ5PH7nInG1qfsIyWseTTkm94c7mZOiEKJsY79kILYN+Lbz0DQxlSMeK76
dmi6a3LEHZ1ICrqd6ey1drtPzGhr6LCd536MDKiXtmihKAWjbvBNuSRFxO64JKC6
oah/4Po8/kh2TqEvtuJ0q8VlmDUgGzJUzBczwu+rFh54hstHGO1WNHFPDVhdAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRQR/kCusqTLDuB
uZfAMIEdP4RfuTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vODhL
MTdGNjE4ckdKV1BEU3hpalVldk1ybXV2Qm9XN0VuR1d3bllNQjVRUFMvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vODhL
MTdGNjE4ckdKV1BEU3hpalVldk1ybXV2Qm9XN0VuR1d3bllNQjVRUFMvMS81MDQ3
RjkwMkJBQ0E5MzJDM0I4MUI5OTdDMDMwODExRDNGODQ1RkI5Lm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAOxVjgwDQQCAAIwBwMFACgEjlQwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDAM1XMA0GCSqGSIb3DQEBCwUAA4IBAQBTeO1EOr2j9950Mx7e
4HaiS0kEFuJaEcJGw1zjaLyVUnW2txdA0DFSY/2pRDpWO2nc912xAhwIVp9amUIw
V9s+QHpi4MaDfYHD3FtByKHwaU2zMmeJomw3PWownMD63xGiJ3UQ/Gp+ctA+vyHB
JDrhKXY3pQX8du/OwTbBddhtZSHRMfZahSJUNFUCs4VM1Ehnb2Gh1uqFjzTqPQhj
xgEVtOVINJ6IxzydeRFELEU433c5H19ozX2ajv5uoFFMd/TxRM1br0lvQ5HdpMML
QiVTC8lSlw3mmF9EwGOYo+a1ksH7XPf0Gq5/WDUea37CwfJD/4xaUMf3zOlIPTd8
ZDOs
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:06:06 2024 by rpki-client on console-ams.rpki-client.org