Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer
File:                     633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer (raw, json)
Hash identifier:          u6OtBq5l3fQlIhssvf1/s+fSwekNJTsMSutpR9olz/8=
Subject key identifier:   63:3B:DD:34:75:47:5D:9C:8D:62:32:CB:1F:D9:0F:D5:2C:D8:CF:D0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       11FDA4113D143BE6A187238A34E60DD13AD28D09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 05 Aug 2024 10:44:26 +0000
Certificate not after:    Mon 04 Aug 2025 10:49:26 +0000
Subordinate resources:    AS: 269053
                          IP: 45.179.52.0/23
                          IP: 2804:5ebc::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:fd:a4:11:3d:14:3b:e6:a1:87:23:8a:34:e6:0d:d1:3a:d2:8d:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  5 10:44:26 2024 GMT
            Not After : Aug  4 10:49:26 2025 GMT
        Subject: CN=633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:08:ff:e1:d9:0c:b2:af:9b:36:a2:84:37:fd:
                    fd:fd:39:e2:fa:62:08:ee:3a:f5:6d:fb:57:0b:e4:
                    6a:99:2a:88:12:78:1a:ab:70:1a:16:5f:a6:c5:58:
                    9c:44:93:17:5b:4a:d3:f4:da:9d:b7:26:49:3c:35:
                    88:fc:fd:75:73:05:ed:94:71:70:e0:c2:aa:02:0c:
                    9b:99:87:c2:fb:03:bf:d2:7e:58:5d:cd:cc:46:59:
                    2e:db:74:fa:b3:7f:cc:16:7f:96:a4:11:90:b0:62:
                    75:d3:09:63:43:fb:fb:f6:2a:4a:7d:51:60:56:f4:
                    a9:c0:57:58:6c:22:d7:3e:0e:1f:f3:b5:1b:70:c5:
                    9c:17:c1:45:f8:70:de:ef:81:83:b4:13:73:32:f4:
                    7e:80:12:ed:98:78:90:4a:82:16:7a:15:31:9e:17:
                    17:64:15:f2:75:fa:a9:f9:4b:ef:c8:06:71:db:97:
                    1e:5c:91:99:35:e0:71:68:cf:8f:b5:3c:84:a1:a7:
                    98:a9:60:72:88:7c:24:65:80:f0:ae:b2:a6:95:50:
                    87:bf:c1:2b:96:17:ca:33:b0:30:e9:89:4d:a1:0a:
                    8f:57:5d:a6:32:99:53:7b:bf:cb:2e:8d:90:a0:01:
                    6b:f6:f6:c8:2d:c5:c7:39:b9:a6:e9:5a:44:ca:c3:
                    1a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                63:3B:DD:34:75:47:5D:9C:8D:62:32:CB:1F:D9:0F:D5:2C:D8:CF:D0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.52.0/23
                IPv6:
                  2804:5ebc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269053

    Signature Algorithm: sha256WithRSAEncryption
         9a:8d:8c:f6:f1:db:d2:ce:2c:b3:08:91:00:78:c0:7d:89:85:
         ec:8a:9f:07:35:53:5f:bc:b4:2b:be:fb:ce:ce:52:53:41:7f:
         e2:c5:d7:42:e0:77:cc:8e:94:91:9f:06:3f:d4:2d:90:7b:73:
         2b:ab:6b:c9:43:ca:97:37:fa:d2:56:f5:b4:1c:6d:23:36:27:
         32:e6:94:59:3a:b1:d9:36:d4:ce:3f:9b:71:89:87:82:7b:39:
         84:2a:06:de:ac:75:f1:47:d3:86:7c:82:27:3b:b2:eb:f5:3d:
         8a:d2:ff:26:02:c7:37:71:06:b2:37:81:fb:14:b9:a7:1b:ee:
         d9:26:f9:ed:4f:03:04:10:54:3f:db:a3:a4:fc:8d:1d:50:3c:
         1e:de:ea:0c:19:04:80:15:5e:5f:b3:48:fa:7a:ee:e6:67:81:
         28:64:3c:04:39:f1:a3:64:8e:8e:1a:f7:aa:ce:a9:a4:94:0d:
         31:ac:ae:90:ac:f4:5f:08:ac:c3:cb:3d:d1:fe:55:35:21:24:
         35:9e:47:65:96:a2:96:d3:cb:cf:04:dd:dd:7d:dc:08:98:e0:
         11:f8:dd:f9:e6:0b:83:b4:b4:66:b2:6e:ec:9c:6b:95:e9:fc:
         1f:fe:96:4e:c1:5c:83:c6:b7:b9:46:db:99:c5:3e:34:86:34:
         4e:2b:a2:3e
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUEf2kET0UO+ahhyOKNOYN0TrSjQkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA4MDUxMDQ0MjZaFw0yNTA4MDQxMDQ5MjZaMDMxMTAvBgNV
BAMTKDYzM0JERDM0NzU0NzVEOUM4RDYyMzJDQjFGRDkwRkQ1MkNEOENGRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3CP/h2Qyyr5s2ooQ3/f39OeL6
YgjuOvVt+1cL5GqZKogSeBqrcBoWX6bFWJxEkxdbStP02p23Jkk8NYj8/XVzBe2U
cXDgwqoCDJuZh8L7A7/SflhdzcxGWS7bdPqzf8wWf5akEZCwYnXTCWND+/v2Kkp9
UWBW9KnAV1hsItc+Dh/ztRtwxZwXwUX4cN7vgYO0E3My9H6AEu2YeJBKghZ6FTGe
FxdkFfJ1+qn5S+/IBnHblx5ckZk14HFoz4+1PIShp5ipYHKIfCRlgPCusqaVUIe/
wSuWF8ozsDDpiU2hCo9XXaYymVN7v8sujZCgAWv29sgtxcc5uabpWkTKwxpXAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRjO900dUddnI1i
Mssf2Q/VLNjP0DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSGR3
aFZRZ2NEUDZ5TDZMdnF0V0oxdmExczlSS1JLMllYTU14Z1RVRnp4Mk4vMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hk
d2hWUWdjRFA2eUw2THZxdFdKMXZhMXM5UktSSzJZWE1NeGdUVUZ6eDJOLzAvNjMz
QkREMzQ3NTQ3NUQ5QzhENjIzMkNCMUZEOTBGRDUyQ0Q4Q0ZEMC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQBLbM0MA0EAgACMAcDBQAoBF68MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQa/TANBgkqhkiG9w0BAQsFAAOCAQEAmo2M9vHb0s4sswiR
AHjAfYmF7IqfBzVTX7y0K777zs5SU0F/4sXXQuB3zI6UkZ8GP9QtkHtzK6tryUPK
lzf60lb1tBxtIzYnMuaUWTqx2TbUzj+bcYmHgns5hCoG3qx18UfThnyCJzuy6/U9
itL/JgLHN3EGsjeB+xS5pxvu2Sb57U8DBBBUP9ujpPyNHVA8Ht7qDBkEgBVeX7NI
+nru5meBKGQ8BDnxo2SOjhr3qs6ppJQNMayukKz0Xwisw8s90f5VNSEkNZ5HZZai
ltPLzwTd3X3cCJjgEfjd+eYLg7S0ZrJu7Jxrlen8H/6WTsFcg8a3uUbbmcU+NIY0
TiuiPg==
-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:40 2024 by rpki-client on console-fra.rpki-client.org