Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.cer
File:                     647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.cer (raw, json)
Hash identifier:          8yv/Dp6+WLtFot45vSuIg5KF+5IXgI7YESldK7LR6oc=
Subject key identifier:   64:7D:C3:04:6F:93:D7:F3:6A:7F:25:E5:37:9F:9A:5E:8E:54:2D:AE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4B5378EB5791BD1483A68528F68BBB60671F609D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 02:31:14 +0000
Certificate not after:    Thu 03 Apr 2025 02:36:14 +0000
Subordinate resources:    AS: 265393
                          IP: 168.194.164.0/22
                          IP: 2804:3364::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 23:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:53:78:eb:57:91:bd:14:83:a6:85:28:f6:8b:bb:60:67:1f:60:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 02:31:14 2024 GMT
            Not After : Apr  3 02:36:14 2025 GMT
        Subject: CN=647DC3046F93D7F36A7F25E5379F9A5E8E542DAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ed:7a:33:97:a2:03:e0:19:3e:29:d6:ec:69:
                    a1:50:bf:ef:51:78:fe:b9:a7:07:e7:55:9a:1f:77:
                    7a:82:1e:b9:14:88:3a:78:92:2d:3e:c1:68:7b:ce:
                    5b:4d:a2:8e:e2:a3:e7:5b:74:88:12:a7:d9:2b:3a:
                    83:1b:57:60:ed:cb:ba:13:ac:f9:28:4b:6a:35:e9:
                    7e:0d:02:04:06:d8:2c:21:70:52:97:90:b3:35:e2:
                    e4:e8:d5:e8:34:22:a9:2e:9f:f0:25:3e:bd:3c:f5:
                    25:b0:e7:d1:d7:75:e8:1c:c9:2b:57:da:27:00:d6:
                    fa:6b:e3:9c:7b:bd:7d:af:73:6a:68:62:59:f0:03:
                    49:33:96:73:5f:16:87:d3:8d:92:a3:b3:f0:61:b8:
                    20:63:58:c1:ee:35:00:b9:42:ae:aa:c5:c9:e6:3a:
                    4b:af:6d:91:6c:7e:80:70:67:c1:84:c1:75:fd:7c:
                    1b:06:8c:52:4b:d2:11:76:f4:4c:01:65:61:6e:31:
                    8f:13:5b:bb:11:cb:c9:df:a7:45:b2:01:36:48:44:
                    ee:53:11:ae:54:85:d6:ab:88:90:80:a9:c3:a6:41:
                    79:ff:95:a1:76:0e:d2:05:ca:2e:bb:7e:05:f9:e5:
                    e0:97:36:d5:6b:0e:bc:18:97:52:dd:39:fd:82:dd:
                    25:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                64:7D:C3:04:6F:93:D7:F3:6A:7F:25:E5:37:9F:9A:5E:8E:54:2D:AE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.164.0/22
                IPv6:
                  2804:3364::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265393

    Signature Algorithm: sha256WithRSAEncryption
         9f:3b:24:3a:ba:69:b7:8a:fd:b6:7d:2b:94:30:96:56:05:9e:
         69:e8:84:b4:d3:41:99:aa:b2:5d:f9:0b:a4:5f:a0:6f:58:74:
         7d:a9:b3:de:16:f7:36:d2:0b:bd:36:29:6e:86:43:ae:48:13:
         71:d8:0b:5e:d2:31:d9:d8:c7:e4:9d:ce:09:e0:e6:83:ea:c8:
         e5:ea:c5:29:bf:a0:82:76:d4:ce:af:01:b6:ac:42:e3:76:cb:
         58:6e:45:d6:f6:36:71:d7:db:15:5b:5e:cb:90:7b:9f:e3:ba:
         a8:d7:5f:60:c7:36:69:7c:a0:4b:66:c1:e4:91:bb:8d:5e:5b:
         7e:ac:e9:c5:e2:32:ff:9c:c4:93:20:3a:10:2e:52:b3:2b:2d:
         3b:6e:f5:57:e6:6b:5f:19:9b:7c:2d:6e:f3:4e:83:80:24:30:
         23:1e:24:5b:93:20:dc:af:1c:3b:50:e9:65:75:e1:a2:22:8a:
         20:9a:f5:c6:2c:66:43:bd:fe:79:e0:7c:31:a9:50:85:d9:a3:
         35:ab:e8:3f:5f:ea:06:3d:b7:d8:0a:2c:e6:5f:da:aa:fd:e3:
         f4:f4:e7:0d:c9:c4:3b:bf:17:96:91:a6:6b:d2:1e:13:31:2f:
         59:a4:0f:4a:23:ea:c4:6e:5f:73:79:ca:d6:f6:65:03:ce:9e:
         9b:1f:20:61
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUS1N461eRvRSDpoUo9ou7YGcfYJ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwMjMxMTRaFw0yNTA0MDMwMjM2MTRaMDMxMTAvBgNV
BAMTKDY0N0RDMzA0NkY5M0Q3RjM2QTdGMjVFNTM3OUY5QTVFOEU1NDJEQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh7Xozl6ID4Bk+KdbsaaFQv+9R
eP65pwfnVZofd3qCHrkUiDp4ki0+wWh7zltNoo7io+dbdIgSp9krOoMbV2Dty7oT
rPkoS2o16X4NAgQG2CwhcFKXkLM14uTo1eg0Iqkun/AlPr089SWw59HXdegcyStX
2icA1vpr45x7vX2vc2poYlnwA0kzlnNfFofTjZKjs/BhuCBjWMHuNQC5Qq6qxcnm
OkuvbZFsfoBwZ8GEwXX9fBsGjFJL0hF29EwBZWFuMY8TW7sRy8nfp0WyATZIRO5T
Ea5UhdariJCAqcOmQXn/laF2DtIFyi67fgX55eCXNtVrDrwYl1LdOf2C3SWjAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRkfcMEb5PX82p/
JeU3n5pejlQtrjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN1Zo
djVjNFpFaGFmOEFMWkFOdVJ0cEdqcmpZNW4zZEU0VDJ4dms2Z3ZxckwvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdW
aHY1YzRaRWhhZjhBTFpBTnVSdHBHanJqWTVuM2RFNFQyeHZrNmd2cXJMLzEvNjQ3
REMzMDQ2RjkzRDdGMzZBN0YyNUU1Mzc5RjlBNUU4RTU0MkRBRS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCqMKkMA0EAgACMAcDBQAoBDNkMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQMsTANBgkqhkiG9w0BAQsFAAOCAQEAnzskOrppt4r9tn0r
lDCWVgWeaeiEtNNBmaqyXfkLpF+gb1h0famz3hb3NtILvTYpboZDrkgTcdgLXtIx
2djH5J3OCeDmg+rI5erFKb+ggnbUzq8BtqxC43bLWG5F1vY2cdfbFVtey5B7n+O6
qNdfYMc2aXygS2bB5JG7jV5bfqzpxeIy/5zEkyA6EC5SsystO271V+ZrXxmbfC1u
806DgCQwIx4kW5Mg3K8cO1DpZXXhoiKKIJr1xixmQ73+eeB8MalQhdmjNavoP1/q
Bj232Aos5l/aqv3j9PTnDcnEO78XlpGma9IeEzEvWaQPSiPqxG5fc3nK1vZlA86e
mx8gYQ==
-----END CERTIFICATE-----
Generated at Sat Jun 1 23:43:30 2024 by rpki-client on console-fra.rpki-client.org