Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5F52636F24AE680A3F696ED6FDCFB30574D5A7FC.cer
File:                     5F52636F24AE680A3F696ED6FDCFB30574D5A7FC.cer (raw, json)
Hash identifier:          XHcHpKkwRz6dxj1upX8unn6/8YDKt3x1mrWmIaDU0gQ=
Subject key identifier:   5F:52:63:6F:24:AE:68:0A:3F:69:6E:D6:FD:CF:B3:05:74:D5:A7:FC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       705EB6ABAACC4CAB0C2E56BF4AF443A959091575
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/5F52636F24AE680A3F696ED6FDCFB30574D5A7FC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Nov 2024 21:32:36 +0000
Certificate not after:    Thu 20 Nov 2025 21:37:36 +0000
Subordinate resources:    AS: 268841
                          IP: 45.174.0.0/22
                          IP: 2804:5b68::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 00:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:5e:b6:ab:aa:cc:4c:ab:0c:2e:56:bf:4a:f4:43:a9:59:09:15:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 21 21:32:36 2024 GMT
            Not After : Nov 20 21:37:36 2025 GMT
        Subject: CN=5F52636F24AE680A3F696ED6FDCFB30574D5A7FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9e:e9:bd:e4:3d:39:88:c6:12:3f:f2:d4:1f:
                    37:92:b9:97:26:02:1c:6b:aa:f3:32:fb:78:4e:4d:
                    3b:04:92:ae:32:0a:8f:a4:63:d0:69:49:7b:d5:08:
                    12:08:f2:d3:68:45:d1:ec:b8:fc:9b:56:0a:f5:ef:
                    37:ac:d9:73:f6:33:13:48:07:58:1b:4f:2b:37:f6:
                    36:dc:30:98:45:e1:df:24:1b:ea:0e:8a:62:a7:7d:
                    f3:bc:73:dd:b2:4d:2c:35:a6:6b:44:a6:52:33:22:
                    96:cf:a5:3c:db:f9:eb:fd:7e:59:69:61:ff:73:6b:
                    b5:16:7e:b7:83:16:fa:ba:f7:78:b7:ac:36:28:fe:
                    b7:b0:e1:7e:e5:ac:ae:5f:d8:49:c0:a1:5f:d1:27:
                    03:9c:06:6e:93:38:0a:45:97:6c:9f:0e:88:fe:d5:
                    33:81:42:3c:4c:29:83:b1:45:e9:67:1d:f7:db:8c:
                    ab:38:38:92:36:39:20:10:91:9c:26:d1:eb:be:1f:
                    d6:7b:90:9b:5a:09:65:1b:55:24:53:70:90:ef:bc:
                    44:70:d9:92:5a:c4:cf:73:16:6b:a7:5d:37:55:0c:
                    c7:d1:8c:d6:55:da:1f:b2:df:82:f8:80:74:66:c2:
                    8f:f9:02:c0:b9:06:22:c9:2e:d3:07:52:f7:38:18:
                    3b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5F:52:63:6F:24:AE:68:0A:3F:69:6E:D6:FD:CF:B3:05:74:D5:A7:FC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/5F52636F24AE680A3F696ED6FDCFB30574D5A7FC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.0.0/22
                IPv6:
                  2804:5b68::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268841

    Signature Algorithm: sha256WithRSAEncryption
         03:67:3b:d6:e3:ca:ea:a1:b7:e8:ae:f1:89:2b:5a:c7:d2:58:
         bf:ef:aa:17:7c:6b:07:f3:39:e6:cd:2a:ac:5e:85:df:a3:21:
         c6:30:d0:73:9c:fe:51:88:37:6f:b8:0d:8f:a5:f5:30:70:6e:
         73:b3:28:1f:1b:57:1f:f9:c3:cd:04:ad:43:7f:99:d5:66:9c:
         91:07:34:7f:03:b9:eb:28:0f:6a:76:86:82:41:96:3c:78:05:
         5f:4b:d7:7e:89:e3:4a:98:7d:ef:6d:33:1d:e3:2d:ba:21:1a:
         f3:8b:a0:1a:17:3b:19:c2:97:c4:df:64:f8:4a:a6:02:c3:37:
         8b:a3:a8:2d:bd:f2:f5:28:98:0b:60:dd:e0:4a:b2:6f:df:4b:
         42:fc:39:fd:9d:1f:af:10:60:49:05:df:09:60:f1:e6:8b:9a:
         a8:4a:ee:01:4b:e3:38:f8:98:c5:fc:d5:e4:0c:cf:fe:8b:bd:
         70:f5:3b:52:a3:df:8e:88:9f:49:91:59:19:4c:56:17:2b:4d:
         2f:96:b9:22:30:18:9f:1c:6c:c8:ba:8d:a2:f4:74:91:bb:4b:
         21:a3:65:e2:48:fc:af:56:d6:83:a6:95:11:3a:91:9a:8f:b4:
         58:ec:45:6a:62:93:9c:33:3a:2e:c5:c2:88:51:e7:31:48:5f:
         a2:ac:f6:65
-----BEGIN CERTIFICATE-----
MIIGLjCCBRagAwIBAgIUcF62q6rMTKsMLla/SvRDqVkJFXUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDExMjEyMTMyMzZaFw0yNTExMjAyMTM3MzZaMDMxMTAvBgNV
BAMTKDVGNTI2MzZGMjRBRTY4MEEzRjY5NkVENkZEQ0ZCMzA1NzRENUE3RkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjnum95D05iMYSP/LUHzeSuZcm
AhxrqvMy+3hOTTsEkq4yCo+kY9BpSXvVCBII8tNoRdHsuPybVgr17zes2XP2MxNI
B1gbTys39jbcMJhF4d8kG+oOimKnffO8c92yTSw1pmtEplIzIpbPpTzb+ev9fllp
Yf9za7UWfreDFvq693i3rDYo/rew4X7lrK5f2EnAoV/RJwOcBm6TOApFl2yfDoj+
1TOBQjxMKYOxRelnHffbjKs4OJI2OSAQkZwm0eu+H9Z7kJtaCWUbVSRTcJDvvERw
2ZJaxM9zFmunXTdVDMfRjNZV2h+y34L4gHRmwo/5AsC5BiLJLtMHUvc4GDtpAgMB
AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRfUmNvJK5oCj9p
btb9z7MFdNWn/DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vTVE3
YVhnb2tOQ2dzeFVqNVNkamhWZ0NXaG1WOEdzOWZBbTYzTEtDOEpHRi8wLzCBiQYI
KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vTVE3
YVhnb2tOQ2dzeFVqNVNkamhWZ0NXaG1WOEdzOWZBbTYzTEtDOEpHRi8wLzVGNTI2
MzZGMjRBRTY4MEEzRjY5NkVENkZEQ0ZCMzA1NzRENUE3RkMubWZ0MD8GCCsGAQUF
BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh
dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB
/wQfMB0wDAQCAAEwBgMEAi2uADANBAIAAjAHAwUAKARbaDAaBggrBgEFBQcBCAEB
/wQLMAmgBzAFAgMEGikwDQYJKoZIhvcNAQELBQADggEBAANnO9bjyuqht+iu8Ykr
WsfSWL/vqhd8awfzOebNKqxehd+jIcYw0HOc/lGIN2+4DY+l9TBwbnOzKB8bVx/5
w80ErUN/mdVmnJEHNH8DuesoD2p2hoJBljx4BV9L136J40qYfe9tMx3jLbohGvOL
oBoXOxnCl8TfZPhKpgLDN4ujqC298vUomAtg3eBKsm/fS0L8Of2dH68QYEkF3wlg
8eaLmqhK7gFL4zj4mMX81eQMz/6LvXD1O1Kj346In0mRWRlMVhcrTS+WuSIwGJ8c
bMi6jaL0dJG7SyGjZeJI/K9W1oOmlRE6kZqPtFjsRWpik5wzOi7FwohR5zFIX6Ks
9mU=
-----END CERTIFICATE-----
Generated at Wed Nov 27 02:00:04 2024 by rpki-client on console-ams.rpki-client.org