Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7DC5BFF6988E9D9A24F06792B0B71CBDB53685CC.cer
File:                     7DC5BFF6988E9D9A24F06792B0B71CBDB53685CC.cer (raw, json)
Hash identifier:          TSPspj6iom/D5+2RLmt8i1qe4pECDxK4UGSlsqQGDPs=
Subject key identifier:   7D:C5:BF:F6:98:8E:9D:9A:24:F0:67:92:B0:B7:1C:BD:B5:36:85:CC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1109B802FDEB95AC0ADD0DA8A7E670F5707B1303
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/7DC5BFF6988E9D9A24F06792B0B71CBDB53685CC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 13:16:43 +0000
Certificate not after:    Thu 03 Apr 2025 13:21:43 +0000
Subordinate resources:    AS: 262458
                          IP: 177.53.48.0/21
                          IP: 200.9.220.0/22
                          IP: 2804:4ac::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 23:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:09:b8:02:fd:eb:95:ac:0a:dd:0d:a8:a7:e6:70:f5:70:7b:13:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 13:16:43 2024 GMT
            Not After : Apr  3 13:21:43 2025 GMT
        Subject: CN=7DC5BFF6988E9D9A24F06792B0B71CBDB53685CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:61:2e:fa:32:fd:b6:b0:64:5c:9e:a7:b9:f7:
                    59:42:06:67:fd:5b:61:40:75:b9:ba:cc:b2:1a:9e:
                    af:7c:a1:a8:50:58:4c:50:5f:4f:00:a4:b8:e5:6b:
                    b1:9f:9b:d0:92:85:d0:07:52:dd:62:32:bf:7f:f3:
                    98:e0:a7:cb:e5:65:17:31:37:df:86:4c:45:5b:cb:
                    e7:0d:48:8e:d9:ff:2a:9f:58:75:9b:1a:55:a4:d0:
                    9a:d9:ba:82:31:ee:af:f9:86:11:98:62:f8:22:51:
                    b4:49:86:e2:21:2c:98:79:0f:a4:d6:de:80:2c:4f:
                    ac:58:94:c7:ee:09:48:ec:1a:a4:e2:a9:2e:5e:a5:
                    42:27:42:32:83:f4:56:5b:f2:3d:3f:65:61:67:55:
                    dc:e8:34:0d:db:5e:60:70:6f:b0:bf:04:46:2b:0c:
                    24:fd:1a:57:17:da:a0:fe:17:b2:6d:93:15:18:93:
                    06:88:72:31:e7:38:aa:d5:09:2f:3a:6b:93:67:a0:
                    7e:66:02:fd:86:3f:ba:99:1f:c2:75:1e:4a:2c:cc:
                    0c:af:0b:b8:c2:a8:70:9d:60:3b:64:53:ab:75:63:
                    19:51:1f:be:0c:bf:0b:d0:a8:5f:e6:a6:d2:18:75:
                    43:9b:89:2d:82:9f:63:58:82:3d:d0:b9:10:e9:7c:
                    e4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7D:C5:BF:F6:98:8E:9D:9A:24:F0:67:92:B0:B7:1C:BD:B5:36:85:CC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/7DC5BFF6988E9D9A24F06792B0B71CBDB53685CC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.48.0/21
                  200.9.220.0/22
                IPv6:
                  2804:4ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262458

    Signature Algorithm: sha256WithRSAEncryption
         68:5d:ff:a1:6e:cf:e9:b9:de:05:04:22:c1:80:1d:5c:0f:84:
         c9:24:69:39:70:e4:58:24:73:f4:48:80:14:dd:22:73:1f:0f:
         46:fd:02:c5:68:57:94:4c:13:77:f2:64:2c:24:8d:0c:bb:23:
         41:56:b9:38:ff:69:aa:68:8c:05:30:7b:f4:d3:8c:59:ee:d8:
         56:0b:82:27:9f:da:2e:ab:40:59:67:3e:0b:df:ed:60:71:54:
         67:a6:10:fb:43:2f:ea:2f:43:1f:71:b0:b8:bc:94:06:24:44:
         11:f5:99:05:fb:e2:b9:1f:56:90:2d:4e:7f:51:9b:66:3f:50:
         1b:b3:20:2e:59:fd:30:36:72:6c:ea:71:0a:17:2d:c9:8b:9e:
         0c:8a:c0:e3:21:7e:31:cb:68:0b:99:2b:ae:66:2a:0e:d8:a9:
         f3:42:99:b7:61:d3:18:fa:31:24:d8:00:59:d6:12:84:64:92:
         65:cf:ba:3c:ce:f7:01:04:82:24:83:01:61:34:a9:1f:fb:4a:
         3f:51:15:88:80:e1:e0:f5:31:9a:b4:2b:75:db:7e:7e:d3:ac:
         a4:8a:08:f3:8a:df:40:ba:a3:c4:0c:59:1a:c1:5c:e9:eb:31:
         5f:1b:9f:43:33:4f:33:1c:eb:1b:77:18:c6:35:80:72:bd:2c:
         7c:62:e9:b2
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUEQm4Av3rlawK3Q2op+Zw9XB7EwMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQxMzE2NDNaFw0yNTA0MDMxMzIxNDNaMDMxMTAvBgNV
BAMTKDdEQzVCRkY2OTg4RTlEOUEyNEYwNjc5MkIwQjcxQ0JEQjUzNjg1Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5YS76Mv22sGRcnqe591lCBmf9
W2FAdbm6zLIanq98oahQWExQX08ApLjla7Gfm9CShdAHUt1iMr9/85jgp8vlZRcx
N9+GTEVby+cNSI7Z/yqfWHWbGlWk0JrZuoIx7q/5hhGYYvgiUbRJhuIhLJh5D6TW
3oAsT6xYlMfuCUjsGqTiqS5epUInQjKD9FZb8j0/ZWFnVdzoNA3bXmBwb7C/BEYr
DCT9GlcX2qD+F7JtkxUYkwaIcjHnOKrVCS86a5NnoH5mAv2GP7qZH8J1HkoszAyv
C7jCqHCdYDtkU6t1YxlRH74MvwvQqF/mptIYdUObiS2Cn2NYgj3QuRDpfOQXAgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR9xb/2mI6dmiTw
Z5Kwtxy9tTaFzDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQWpy
a0ozd1dSMko3ZXRlN0U3VjV2NTQ0eXVkR3h0U3U0VTNDS3J1QXJ2UHUvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Fq
cmtKM3dXUjJKN2V0ZTdFN1Y1djU0NHl1ZEd4dFN1NFUzQ0tydUFydlB1LzAvN0RD
NUJGRjY5ODhFOUQ5QTI0RjA2NzkyQjBCNzFDQkRCNTM2ODVDQy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQDsTUwAwQCyAncMA0EAgACMAcDBQAoBASsMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwQBOjANBgkqhkiG9w0BAQsFAAOCAQEAaF3/oW7P
6bneBQQiwYAdXA+EySRpOXDkWCRz9EiAFN0icx8PRv0CxWhXlEwTd/JkLCSNDLsj
QVa5OP9pqmiMBTB79NOMWe7YVguCJ5/aLqtAWWc+C9/tYHFUZ6YQ+0Mv6i9DH3Gw
uLyUBiREEfWZBfviuR9WkC1Of1GbZj9QG7MgLln9MDZybOpxChctyYueDIrA4yF+
MctoC5krrmYqDtip80KZt2HTGPoxJNgAWdYShGSSZc+6PM73AQSCJIMBYTSpH/tK
P1EViIDh4PUxmrQrddt+ftOspIoI84rfQLqjxAxZGsFc6esxXxufQzNPMxzrG3cY
xjWAcr0sfGLpsg==
-----END CERTIFICATE-----
Generated at Sat Jun 1 23:43:31 2024 by rpki-client on console-fra.rpki-client.org