Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/57D626EF55C34DCC2CFD920E4CD90D504B1A471C.cer
File:                     57D626EF55C34DCC2CFD920E4CD90D504B1A471C.cer (raw, json)
Hash identifier:          DSXrALS1JVMFstwywvzvKz5TX90a+BpZXzLltYJ7xYs=
Subject key identifier:   57:D6:26:EF:55:C3:4D:CC:2C:FD:92:0E:4C:D9:0D:50:4B:1A:47:1C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       20D6447D7C0256F86465EC5F8F3695EB125D190A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/57D626EF55C34DCC2CFD920E4CD90D504B1A471C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Nov 2024 14:18:18 +0000
Certificate not after:    Mon 03 Nov 2025 14:23:18 +0000
Subordinate resources:    AS: 269523
                          IP: 45.188.68.0/22
                          IP: 2804:65ec::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:d6:44:7d:7c:02:56:f8:64:65:ec:5f:8f:36:95:eb:12:5d:19:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  4 14:18:18 2024 GMT
            Not After : Nov  3 14:23:18 2025 GMT
        Subject: CN=57D626EF55C34DCC2CFD920E4CD90D504B1A471C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:86:0a:2c:21:35:35:78:fe:c4:cf:23:59:fb:
                    09:3c:b9:06:14:c1:89:e8:f8:f8:32:fb:71:b3:c0:
                    f9:9b:77:01:08:ac:7a:8b:49:04:ff:20:51:df:f8:
                    ef:8f:7e:b3:f2:52:e8:05:ff:e8:c1:53:91:5e:85:
                    33:2a:d6:2b:7c:58:28:70:62:07:fd:46:cb:94:61:
                    b7:a8:2f:81:a3:90:fe:d8:39:8e:c1:4f:5e:5a:57:
                    4f:2f:1b:50:92:6e:11:20:b8:7f:08:6f:f7:7d:cc:
                    75:a1:28:e5:8a:aa:8d:12:82:e4:38:03:41:f6:44:
                    f8:d0:14:c1:63:07:7a:e2:a0:c8:f5:12:c0:66:62:
                    ca:c7:e1:b7:d5:3d:40:d3:5a:54:b4:14:14:33:c6:
                    f7:f4:b7:e0:c8:8f:9a:0a:a4:ba:a7:67:d4:e8:94:
                    c8:55:07:f5:8c:fe:d2:09:cf:59:88:c3:96:60:4a:
                    b3:66:64:39:0d:2e:e3:3d:97:86:26:f3:5a:92:c5:
                    33:b1:f4:46:f1:86:74:58:82:7c:fd:64:c3:01:e4:
                    7e:10:df:63:08:b6:77:bc:1f:84:1d:f8:1f:0a:b3:
                    5b:63:92:97:c4:58:a2:cc:d6:2b:5b:50:92:d0:bc:
                    21:70:9d:c7:86:5a:a8:23:39:fd:2c:14:b6:25:01:
                    8f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                57:D6:26:EF:55:C3:4D:CC:2C:FD:92:0E:4C:D9:0D:50:4B:1A:47:1C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/57D626EF55C34DCC2CFD920E4CD90D504B1A471C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.68.0/22
                IPv6:
                  2804:65ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269523

    Signature Algorithm: sha256WithRSAEncryption
         31:5d:89:07:4e:75:f1:dd:57:e9:6a:d9:53:27:d5:f7:e6:70:
         b8:66:8f:69:ef:b6:d1:ad:13:8f:6a:6e:65:86:31:21:20:d0:
         fd:d8:0f:64:b0:83:a0:00:21:c6:46:06:d0:59:89:24:c6:2f:
         0d:26:f8:56:98:ee:56:b3:5f:91:55:94:95:d6:39:36:02:8b:
         04:70:2b:ee:f6:ba:6c:7c:03:b0:a0:d6:54:93:72:83:3a:bf:
         51:f2:f9:25:45:f9:cd:6b:75:04:db:bc:34:63:74:63:4a:eb:
         3e:75:44:69:25:94:69:2e:6a:af:01:69:0a:8a:1a:ed:ae:f7:
         e4:ee:9e:36:37:58:f0:e4:96:e6:fb:57:c0:82:8c:c5:7b:36:
         d2:87:3e:3b:8d:1f:b4:e4:04:59:66:19:fc:75:83:73:6b:38:
         e1:5f:c8:e8:0a:bb:bf:96:1c:db:87:8e:fb:f3:f8:59:17:96:
         01:b0:cf:b4:dc:7f:01:d3:4a:4d:77:3d:f9:53:de:e8:9f:16:
         c0:3a:87:19:b6:8b:96:ef:89:60:d5:49:a8:90:b3:dd:39:c2:
         56:80:6a:c0:e5:91:53:ec:7e:0f:a3:2b:1e:a9:9e:f7:77:4b:
         38:ff:13:65:da:bd:65:11:a6:10:71:31:c5:61:36:06:72:95:
         63:df:a7:f3
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUINZEfXwCVvhkZexfjzaV6xJdGQowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDExMDQxNDE4MThaFw0yNTExMDMxNDIzMThaMDMxMTAvBgNV
BAMTKDU3RDYyNkVGNTVDMzREQ0MyQ0ZEOTIwRTRDRDkwRDUwNEIxQTQ3MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0hgosITU1eP7EzyNZ+wk8uQYU
wYno+Pgy+3GzwPmbdwEIrHqLSQT/IFHf+O+PfrPyUugF/+jBU5FehTMq1it8WChw
Ygf9RsuUYbeoL4GjkP7YOY7BT15aV08vG1CSbhEguH8Ib/d9zHWhKOWKqo0SguQ4
A0H2RPjQFMFjB3rioMj1EsBmYsrH4bfVPUDTWlS0FBQzxvf0t+DIj5oKpLqnZ9To
lMhVB/WM/tIJz1mIw5ZgSrNmZDkNLuM9l4Ym81qSxTOx9EbxhnRYgnz9ZMMB5H4Q
32MItne8H4Qd+B8Ks1tjkpfEWKLM1itbUJLQvCFwnceGWqgjOf0sFLYlAY/hAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRX1ibvVcNNzCz9
kg5M2Q1QSxpHHDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQkF0
SHk5NFBaeGV1SDk4Sk54RHpydHV3cDdMNEhXSnBQMUM0NGduZnVFUXQvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JB
dEh5OTRQWnhldUg5OEpOeER6cnR1d3A3TDRIV0pwUDFDNDRnbmZ1RVF0LzAvNTdE
NjI2RUY1NUMzNERDQzJDRkQ5MjBFNENEOTBENTA0QjFBNDcxQy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLbxEMA0EAgACMAcDBQAoBGXsMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQc0zANBgkqhkiG9w0BAQsFAAOCAQEAMV2JB0518d1X6WrZ
UyfV9+ZwuGaPae+20a0Tj2puZYYxISDQ/dgPZLCDoAAhxkYG0FmJJMYvDSb4Vpju
VrNfkVWUldY5NgKLBHAr7va6bHwDsKDWVJNygzq/UfL5JUX5zWt1BNu8NGN0Y0rr
PnVEaSWUaS5qrwFpCooa7a735O6eNjdY8OSW5vtXwIKMxXs20oc+O40ftOQEWWYZ
/HWDc2s44V/I6Aq7v5Yc24eO+/P4WReWAbDPtNx/AdNKTXc9+VPe6J8WwDqHGbaL
lu+JYNVJqJCz3TnCVoBqwOWRU+x+D6MrHqme93dLOP8TZdq9ZRGmEHExxWE2BnKV
Y9+n8w==
-----END CERTIFICATE-----
Generated at Fri Nov 22 21:03:01 2024 by rpki-client on console-fra.rpki-client.org