Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6E00496EB796F8397F171C543AFB886D5E9BB93E.cer
File:                     6E00496EB796F8397F171C543AFB886D5E9BB93E.cer (raw, json)
Hash identifier:          jtzQ9oXVN2IpZtr2rR9lEujA+7N1bzpT1S2jyvEx468=
Subject key identifier:   6E:00:49:6E:B7:96:F8:39:7F:17:1C:54:3A:FB:88:6D:5E:9B:B9:3E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2013B0B4FA40B4B3BDC9C1B00FC9484C4462D317
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E1mrVL7Yq9TLA7hHviYbD8UL3tfA7dnkTceDK4cbHFbA/0/6E00496EB796F8397F171C543AFB886D5E9BB93E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E1mrVL7Yq9TLA7hHviYbD8UL3tfA7dnkTceDK4cbHFbA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Nov 2024 14:33:53 +0000
Certificate not after:    Thu 20 Nov 2025 14:38:53 +0000
Subordinate resources:    AS: 269538
                          IP: 45.188.200.0/22
                          IP: 2804:6628::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:13:b0:b4:fa:40:b4:b3:bd:c9:c1:b0:0f:c9:48:4c:44:62:d3:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 21 14:33:53 2024 GMT
            Not After : Nov 20 14:38:53 2025 GMT
        Subject: CN=6E00496EB796F8397F171C543AFB886D5E9BB93E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a6:cf:83:4e:8b:02:e7:70:e2:ef:51:22:28:
                    b4:cd:6d:9a:c9:4a:4d:08:f9:7a:c2:05:f4:9b:ee:
                    ee:78:8c:64:26:6d:c7:13:32:f6:9f:b9:53:b8:e4:
                    b2:17:29:6f:e3:2e:22:fb:13:09:f0:06:43:26:50:
                    9f:4b:d4:af:25:39:b9:87:3f:60:ea:e2:2b:77:07:
                    ab:0d:cc:06:e3:58:d8:6e:d9:f3:4f:2d:33:5d:2a:
                    9e:9b:40:cf:72:ef:02:97:89:46:f7:4f:3f:44:5d:
                    67:f3:c8:59:17:3a:91:26:48:af:41:22:c5:a3:79:
                    da:78:19:3f:dd:89:25:2c:28:d5:da:2e:33:67:da:
                    ea:90:79:6d:4f:13:ae:76:d7:32:1f:b5:c2:dd:c4:
                    6d:5c:c5:37:75:45:af:a3:da:09:b8:ca:38:c8:f4:
                    aa:c5:f3:e7:d1:3c:06:4f:34:fd:ba:3d:96:99:7c:
                    09:44:61:57:97:72:78:56:60:57:cf:b7:a9:6a:d9:
                    c5:36:0f:51:6a:54:28:c6:e5:be:61:b1:1b:5b:30:
                    16:ca:bd:f6:af:e7:43:dd:5c:55:0f:a5:69:33:65:
                    bd:6a:3f:78:cb:20:f1:42:b6:b3:f1:60:6e:2a:e3:
                    19:cc:51:66:90:b1:88:74:bc:0d:bb:6b:01:4d:0f:
                    fe:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6E:00:49:6E:B7:96:F8:39:7F:17:1C:54:3A:FB:88:6D:5E:9B:B9:3E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E1mrVL7Yq9TLA7hHviYbD8UL3tfA7dnkTceDK4cbHFbA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E1mrVL7Yq9TLA7hHviYbD8UL3tfA7dnkTceDK4cbHFbA/0/6E00496EB796F8397F171C543AFB886D5E9BB93E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.200.0/22
                IPv6:
                  2804:6628::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269538

    Signature Algorithm: sha256WithRSAEncryption
         38:ae:a0:4c:d3:5d:aa:af:44:47:55:76:74:71:0a:a1:9f:08:
         79:1e:09:a4:ad:fb:1e:ea:f8:a0:28:13:80:f8:a9:e2:9b:e4:
         14:ed:a4:4b:09:5c:67:d5:4c:b2:4c:2a:7a:ed:cc:f8:11:71:
         2e:d3:36:34:4a:37:e6:d6:93:fe:03:68:ad:eb:b5:80:de:c8:
         dd:42:3a:83:9f:9a:6f:59:5f:07:17:f1:47:e8:6b:b4:75:bc:
         93:cb:b0:52:e2:c7:83:e0:fd:86:4f:1a:cd:87:be:c3:1b:1e:
         c9:9f:ad:08:23:91:36:a7:a7:b1:d5:de:58:a5:ec:c0:32:66:
         1a:00:a2:5e:62:24:4e:c0:61:38:1e:fb:2b:96:f5:ee:55:7f:
         01:9a:38:18:99:f9:69:79:2c:9e:b6:e3:6d:0e:36:6a:17:c4:
         d7:36:43:8c:c8:10:27:8f:13:ce:ac:bf:b3:d2:b3:3a:11:6a:
         36:ee:ff:92:6e:be:5f:70:08:5f:2b:c0:21:ef:b0:da:93:a0:
         f7:9d:a0:a1:fe:d3:54:11:b4:4b:da:c5:0c:27:d2:a9:f9:22:
         73:55:52:46:25:c3:a2:e4:5c:5d:bb:59:c8:b5:6a:e1:1e:49:
         8e:07:50:39:fe:05:05:4a:b1:14:98:f8:be:61:3c:f8:42:03:
         b5:cd:29:6c
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUIBOwtPpAtLO9ycGwD8lITERi0xcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDExMjExNDMzNTNaFw0yNTExMjAxNDM4NTNaMDMxMTAvBgNV
BAMTKDZFMDA0OTZFQjc5NkY4Mzk3RjE3MUM1NDNBRkI4ODZENUU5QkI5M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ps+DTosC53Di71EiKLTNbZrJ
Sk0I+XrCBfSb7u54jGQmbccTMvafuVO45LIXKW/jLiL7EwnwBkMmUJ9L1K8lObmH
P2Dq4it3B6sNzAbjWNhu2fNPLTNdKp6bQM9y7wKXiUb3Tz9EXWfzyFkXOpEmSK9B
IsWjedp4GT/diSUsKNXaLjNn2uqQeW1PE6521zIftcLdxG1cxTd1Ra+j2gm4yjjI
9KrF8+fRPAZPNP26PZaZfAlEYVeXcnhWYFfPt6lq2cU2D1FqVCjG5b5hsRtbMBbK
vfav50PdXFUPpWkzZb1qP3jLIPFCtrPxYG4q4xnMUWaQsYh0vA27awFND/59AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRuAElut5b4OX8X
HFQ6+4htXpu5PjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRTFt
clZMN1lxOVRMQTdoSHZpWWJEOFVMM3RmQTdkbmtUY2VESzRjYkhGYkEvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Ux
bXJWTDdZcTlUTEE3aEh2aVliRDhVTDN0ZkE3ZG5rVGNlREs0Y2JIRmJBLzAvNkUw
MDQ5NkVCNzk2RjgzOTdGMTcxQzU0M0FGQjg4NkQ1RTlCQjkzRS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLbzIMA0EAgACMAcDBQAoBGYoMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQc4jANBgkqhkiG9w0BAQsFAAOCAQEAOK6gTNNdqq9ER1V2
dHEKoZ8IeR4JpK37Hur4oCgTgPip4pvkFO2kSwlcZ9VMskwqeu3M+BFxLtM2NEo3
5taT/gNoreu1gN7I3UI6g5+ab1lfBxfxR+hrtHW8k8uwUuLHg+D9hk8azYe+wxse
yZ+tCCORNqensdXeWKXswDJmGgCiXmIkTsBhOB77K5b17lV/AZo4GJn5aXksnrbj
bQ42ahfE1zZDjMgQJ48Tzqy/s9KzOhFqNu7/km6+X3AIXyvAIe+w2pOg952gof7T
VBG0S9rFDCfSqfkic1VSRiXDouRcXbtZyLVq4R5JjgdQOf4FBUqxFJj4vmE8+EID
tc0pbA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:33 2024 by rpki-client on console-fra.rpki-client.org