Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/62595ED971A5BB40662FB52F1C40BDD69B1CD1BB.cer
File:                     62595ED971A5BB40662FB52F1C40BDD69B1CD1BB.cer (raw, json)
Hash identifier:          o+/KzgNRNoJTR3wSnaXwyxeaCtA6mQGqLfqpLhmtv2w=
Subject key identifier:   62:59:5E:D9:71:A5:BB:40:66:2F:B5:2F:1C:40:BD:D6:9B:1C:D1:BB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       445E1737F13D75C110DC4E19CA21F95F9256F909
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/1/62595ED971A5BB40662FB52F1C40BDD69B1CD1BB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:26:18 +0000
Certificate not after:    Wed 02 Apr 2025 18:31:18 +0000
Subordinate resources:    AS: 267039
                          IP: 45.228.4.0/22
                          IP: 2804:4738::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 23:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:5e:17:37:f1:3d:75:c1:10:dc:4e:19:ca:21:f9:5f:92:56:f9:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:26:18 2024 GMT
            Not After : Apr  2 18:31:18 2025 GMT
        Subject: CN=62595ED971A5BB40662FB52F1C40BDD69B1CD1BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:99:58:08:a7:11:3c:1e:88:24:ec:57:39:89:
                    be:fe:28:9e:f1:ce:2d:a2:96:eb:cb:09:8d:7d:46:
                    17:0b:c5:1a:1b:d8:30:af:99:0d:1b:aa:8a:54:0e:
                    98:97:66:42:b1:18:42:65:1e:33:c3:b9:74:e0:0a:
                    cd:17:ef:5d:14:e7:76:cd:03:61:a2:4b:07:77:a2:
                    ce:73:e2:55:13:4f:e6:45:fb:2d:5e:f3:c8:54:c0:
                    d8:df:4d:28:70:21:00:45:28:d3:fe:ba:8e:f2:ae:
                    e0:0b:52:3c:b7:34:08:9d:eb:53:64:5e:ef:fe:23:
                    20:ee:01:d4:49:ed:20:c0:17:6e:ed:28:ec:eb:1b:
                    96:79:98:ef:a8:1e:31:4e:d3:41:e6:fa:9a:24:90:
                    de:a4:e0:96:4b:06:f3:44:5f:74:34:9e:a8:e7:03:
                    1d:26:1b:35:20:a3:ec:ac:f3:88:d2:be:40:01:db:
                    c9:48:73:6d:aa:fd:1a:0b:68:0b:93:7f:de:c2:1b:
                    f0:19:0b:0b:aa:f5:9a:c8:34:e4:d5:8d:23:17:de:
                    8c:c6:35:27:6f:ea:19:e2:88:cf:c8:ca:26:d2:75:
                    47:b7:2e:54:a3:a0:9b:b7:e9:25:38:15:81:ed:00:
                    09:7d:81:e0:b5:76:5e:7e:3f:5e:b7:a3:07:97:c8:
                    ea:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                62:59:5E:D9:71:A5:BB:40:66:2F:B5:2F:1C:40:BD:D6:9B:1C:D1:BB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/1/62595ED971A5BB40662FB52F1C40BDD69B1CD1BB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.4.0/22
                IPv6:
                  2804:4738::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267039

    Signature Algorithm: sha256WithRSAEncryption
         28:77:ba:46:5b:02:d4:9a:36:6c:e7:a5:44:fa:50:38:31:64:
         08:73:50:bb:55:56:e8:fb:ac:1c:a4:6d:c0:0c:41:a1:5d:76:
         34:d1:34:4a:f9:d7:df:62:cf:fc:22:69:cb:f5:c3:23:0f:e1:
         d1:5a:70:45:3a:91:21:b8:bc:52:ff:db:5b:99:61:69:5f:45:
         d1:b9:3b:06:5f:f5:74:3b:07:56:e9:b0:ac:d1:91:20:30:87:
         f6:55:80:09:39:5f:5e:7b:0a:ec:20:01:f5:27:d0:7f:8e:ab:
         8f:23:a5:25:65:29:20:72:60:3f:15:89:79:02:67:1d:03:68:
         c6:4f:a5:b0:1f:21:ac:24:db:d7:df:34:7a:ec:1e:a0:2f:0a:
         ce:6c:da:bb:93:19:05:84:1e:9e:60:0b:75:5a:0d:b7:9a:24:
         61:61:b2:a4:cb:5f:8d:d6:a3:cd:75:28:7d:2f:44:c7:d2:28:
         25:d3:d6:85:96:c1:72:36:ee:99:7e:2e:5f:dd:e7:fb:a0:87:
         86:dd:f1:86:66:af:02:45:52:bf:95:b2:eb:c9:2e:c4:5b:60:
         1a:aa:90:55:cd:24:01:09:4e:d3:ec:0a:3c:b0:82:22:5a:65:
         b0:39:22:1c:11:02:fd:9b:46:ac:b7:fa:24:a9:28:14:bc:3a:
         3d:36:c3:40
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIURF4XN/E9dcEQ3E4ZyiH5X5JW+QkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMxODI2MThaFw0yNTA0MDIxODMxMThaMDMxMTAvBgNV
BAMTKDYyNTk1RUQ5NzFBNUJCNDA2NjJGQjUyRjFDNDBCREQ2OUIxQ0QxQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpmVgIpxE8Hogk7Fc5ib7+KJ7x
zi2iluvLCY19RhcLxRob2DCvmQ0bqopUDpiXZkKxGEJlHjPDuXTgCs0X710U53bN
A2GiSwd3os5z4lUTT+ZF+y1e88hUwNjfTShwIQBFKNP+uo7yruALUjy3NAid61Nk
Xu/+IyDuAdRJ7SDAF27tKOzrG5Z5mO+oHjFO00Hm+pokkN6k4JZLBvNEX3Q0nqjn
Ax0mGzUgo+ys84jSvkAB28lIc22q/RoLaAuTf97CG/AZCwuq9ZrINOTVjSMX3ozG
NSdv6hniiM/IyibSdUe3LlSjoJu36SU4FYHtAAl9geC1dl5+P163oweXyOojAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRiWV7ZcaW7QGYv
tS8cQL3WmxzRuzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNXdW
WlJqZ3dzaDVvWGVGeDhieXJzZzdRSkw3YzZRa284WFFmUVVlb0pvOTQvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNXdW
WlJqZ3dzaDVvWGVGeDhieXJzZzdRSkw3YzZRa284WFFmUVVlb0pvOTQvMS82MjU5
NUVEOTcxQTVCQjQwNjYyRkI1MkYxQzQwQkRENjlCMUNEMUJCLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAIt5AQwDQQCAAIwBwMFACgERzgwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBBMfMA0GCSqGSIb3DQEBCwUAA4IBAQAod7pGWwLUmjZs56VE
+lA4MWQIc1C7VVbo+6wcpG3ADEGhXXY00TRK+dffYs/8ImnL9cMjD+HRWnBFOpEh
uLxS/9tbmWFpX0XRuTsGX/V0OwdW6bCs0ZEgMIf2VYAJOV9eewrsIAH1J9B/jquP
I6UlZSkgcmA/FYl5AmcdA2jGT6WwHyGsJNvX3zR67B6gLwrObNq7kxkFhB6eYAt1
Wg23miRhYbKky1+N1qPNdSh9L0TH0igl09aFlsFyNu6Zfi5f3ef7oIeG3fGGZq8C
RVK/lbLryS7EW2AaqpBVzSQBCU7T7Ao8sIIiWmWwOSIcEQL9m0ast/okqSgUvDo9
NsNA
-----END CERTIFICATE-----
Generated at Sat Jun 1 23:43:30 2024 by rpki-client on console-fra.rpki-client.org