Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/52F3DD15F1E61F19A918213318E706B1EA13C48B.cer
File:                     52F3DD15F1E61F19A918213318E706B1EA13C48B.cer (raw, json)
Hash identifier:          ayo0/a8GGjyFkvvdQX7QvAJj/Px2On5TQTk2UZIGL5s=
Subject key identifier:   52:F3:DD:15:F1:E6:1F:19:A9:18:21:33:18:E7:06:B1:EA:13:C4:8B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       231D66666201D114699202B037C6C8003D79884D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/1/52F3DD15F1E61F19A918213318E706B1EA13C48B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 22:49:04 +0000
Certificate not after:    Thu 03 Apr 2025 22:54:04 +0000
Subordinate resources:    AS: 266022
                          IP: 170.245.124.0/22
                          IP: 2804:3944::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 05:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:1d:66:66:62:01:d1:14:69:92:02:b0:37:c6:c8:00:3d:79:88:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 22:49:04 2024 GMT
            Not After : Apr  3 22:54:04 2025 GMT
        Subject: CN=52F3DD15F1E61F19A918213318E706B1EA13C48B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ec:fb:4e:59:9c:04:f1:e8:b9:fa:5b:34:45:
                    5c:eb:29:6a:48:eb:d5:5a:e3:1c:eb:c2:27:65:ae:
                    f2:58:22:fb:07:b7:1e:cb:75:e5:15:38:ac:3c:04:
                    c2:bb:2a:0c:5c:dd:5e:f9:b9:6f:6e:5b:f2:d1:32:
                    2a:3c:0f:7f:64:db:3d:24:40:f9:39:ea:cb:37:c6:
                    a8:50:b9:ed:d7:e0:db:e4:77:10:b6:14:79:4e:44:
                    fb:03:03:5a:7b:b4:63:2d:64:b7:2a:e0:43:93:a0:
                    33:62:81:3a:6c:16:01:b0:00:bb:05:5d:aa:8b:ff:
                    1d:79:f3:db:18:09:d3:2f:51:50:c5:3a:5c:7a:38:
                    91:b7:71:74:e9:e7:af:58:ef:13:55:62:98:ec:48:
                    65:21:0b:4b:2b:92:4c:55:86:b5:65:6f:fb:d8:14:
                    9b:ec:f2:8f:50:2d:f7:cd:dd:5f:10:c3:d2:ca:39:
                    78:68:b3:8e:b7:0f:d9:ab:a5:c0:ac:90:f7:19:be:
                    77:8f:fd:c4:d1:31:d0:a3:1e:1c:e4:5b:03:e2:dd:
                    d3:36:a2:d0:7b:06:1a:3d:14:80:71:3b:99:75:96:
                    d5:aa:3b:96:a4:0e:f4:ff:62:ae:20:1d:ec:bd:99:
                    b5:fb:ff:8f:12:7b:1e:a3:97:89:17:18:a8:81:25:
                    3f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                52:F3:DD:15:F1:E6:1F:19:A9:18:21:33:18:E7:06:B1:EA:13:C4:8B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/1/52F3DD15F1E61F19A918213318E706B1EA13C48B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.124.0/22
                IPv6:
                  2804:3944::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266022

    Signature Algorithm: sha256WithRSAEncryption
         c5:7e:9c:d0:85:17:69:4a:1e:65:a8:00:40:c6:23:89:ca:88:
         5a:74:58:e9:a0:8d:f8:ef:19:cd:e6:41:5f:af:d7:28:63:fb:
         6a:7f:24:cd:fe:1e:5e:84:5a:58:58:4d:fa:db:9f:42:79:9b:
         a9:3d:3c:56:f4:3f:4b:49:08:ed:e4:9f:65:86:68:52:75:40:
         7b:cf:c6:65:69:03:be:27:c8:16:2d:47:c3:56:2a:e4:6a:cb:
         9e:fd:47:e7:f6:68:d7:a4:57:07:cd:a0:56:4b:c4:8a:d8:6e:
         b1:5a:9c:61:f8:78:2a:76:17:34:21:02:11:b2:78:0a:21:5c:
         e1:27:1e:28:49:9b:be:fa:68:89:8f:c8:e5:c6:83:09:fa:d9:
         a8:8d:4e:10:3e:45:f4:9d:07:de:75:a1:fd:bc:76:f5:39:b8:
         d8:16:7a:51:69:90:f4:e6:af:4f:23:0b:48:e8:bc:6b:55:c9:
         6b:8b:4c:08:31:5a:1b:67:18:6f:32:7c:6a:99:70:a9:da:c1:
         6d:a2:c5:82:b7:76:54:2c:d7:68:5d:37:d8:36:d1:d5:6b:6d:
         15:74:05:75:ff:33:c2:a7:66:3c:09:d4:dd:fb:bd:65:88:7f:
         4a:fe:89:e8:45:92:ef:62:5c:b1:87:57:df:fe:2b:7a:5a:8d:
         04:2d:eb:6f
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUIx1mZmIB0RRpkgKwN8bIAD15iE0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQyMjQ5MDRaFw0yNTA0MDMyMjU0MDRaMDMxMTAvBgNV
BAMTKDUyRjNERDE1RjFFNjFGMTlBOTE4MjEzMzE4RTcwNkIxRUExM0M0OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE7PtOWZwE8ei5+ls0RVzrKWpI
69Va4xzrwidlrvJYIvsHtx7LdeUVOKw8BMK7Kgxc3V75uW9uW/LRMio8D39k2z0k
QPk56ss3xqhQue3X4NvkdxC2FHlORPsDA1p7tGMtZLcq4EOToDNigTpsFgGwALsF
XaqL/x1589sYCdMvUVDFOlx6OJG3cXTp569Y7xNVYpjsSGUhC0srkkxVhrVlb/vY
FJvs8o9QLffN3V8Qw9LKOXhos463D9mrpcCskPcZvneP/cTRMdCjHhzkWwPi3dM2
otB7Bho9FIBxO5l1ltWqO5akDvT/Yq4gHey9mbX7/48Sex6jl4kXGKiBJT+zAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRS890V8eYfGakY
ITMY5wax6hPEizAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQnc4
RjVFb2Nkc0NrY040WWZLQlBrWUp0Tno0VUZEcEZMcnl0elZpN2dldW4vMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0J3
OEY1RW9jZHNDa2NONFlmS0JQa1lKdE56NFVGRHBGTHJ5dHpWaTdnZXVuLzEvNTJG
M0REMTVGMUU2MUYxOUE5MTgyMTMzMThFNzA2QjFFQTEzQzQ4Qi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCqvV8MA0EAgACMAcDBQAoBDlEMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQPJjANBgkqhkiG9w0BAQsFAAOCAQEAxX6c0IUXaUoeZagA
QMYjicqIWnRY6aCN+O8ZzeZBX6/XKGP7an8kzf4eXoRaWFhN+tufQnmbqT08VvQ/
S0kI7eSfZYZoUnVAe8/GZWkDvifIFi1Hw1Yq5GrLnv1H5/Zo16RXB82gVkvEithu
sVqcYfh4KnYXNCECEbJ4CiFc4SceKEmbvvpoiY/I5caDCfrZqI1OED5F9J0H3nWh
/bx29Tm42BZ6UWmQ9OavTyMLSOi8a1XJa4tMCDFaG2cYbzJ8aplwqdrBbaLFgrd2
VCzXaF032DbR1WttFXQFdf8zwqdmPAnU3fu9ZYh/Sv6J6EWS72JcsYdX3/4relqN
BC3rbw==
-----END CERTIFICATE-----
Generated at Tue Jun 18 06:20:09 2024 by rpki-client on console-fra.rpki-client.org