Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.cer
File:                     7E09C85B0E5ACF758DAA966E4C1E2328D0322164.cer (raw, json)
Hash identifier:          D/nrMFNHh+uYJR95W+ALxjcZ1iVP3UzAGgs/PWmToNQ=
Subject key identifier:   7E:09:C8:5B:0E:5A:CF:75:8D:AA:96:6E:4C:1E:23:28:D0:32:21:64
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0F5155DED7BDB1A3E062DF40D8B68AF7550F6A00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 31 May 2024 13:36:00 +0000
Certificate not after:    Fri 30 May 2025 13:41:00 +0000
Subordinate resources:    AS: 268303
                          IP: 45.237.212.0/22
                          IP: 2804:4f18::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 03:07:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:51:55:de:d7:bd:b1:a3:e0:62:df:40:d8:b6:8a:f7:55:0f:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 31 13:36:00 2024 GMT
            Not After : May 30 13:41:00 2025 GMT
        Subject: CN=7E09C85B0E5ACF758DAA966E4C1E2328D0322164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e7:82:2d:4a:e1:33:35:ae:19:03:09:a6:e1:
                    f9:a0:b9:10:5d:49:1b:e7:3b:96:c9:92:7f:15:c1:
                    02:b4:02:c5:30:78:23:df:d3:2e:10:a1:24:a2:87:
                    ac:8e:08:1b:34:2e:c4:51:e0:55:8e:c0:b1:8a:b5:
                    9e:74:32:a2:d8:3f:83:70:84:dd:07:99:ae:ff:e5:
                    7f:aa:02:7e:f4:cf:c8:c1:35:c0:17:9a:da:56:62:
                    ff:28:61:d9:c2:d2:a5:24:b6:dc:44:3b:79:b0:66:
                    da:22:8c:47:7a:9e:44:71:c3:37:6c:dd:f2:dd:80:
                    d1:9f:15:db:4a:c9:04:25:93:bb:b5:c1:98:d5:1f:
                    98:de:a4:1b:53:c4:d4:47:b6:a6:94:90:2c:e6:6b:
                    b3:fa:0c:d4:7a:d9:fa:51:71:ec:41:53:43:32:0f:
                    33:f5:5c:4d:d5:f2:1d:4a:4b:17:bb:b7:17:c3:e0:
                    91:d7:14:ac:ce:dc:49:43:eb:b3:09:f7:d2:b5:7a:
                    e5:54:ed:0c:4b:0e:a7:fd:bd:0f:79:2e:48:96:6e:
                    59:f4:94:43:a6:16:d0:54:32:15:85:af:1e:72:c4:
                    5d:d7:b8:c1:b5:ae:cb:83:30:9d:8f:b9:54:1f:3a:
                    d5:51:f0:aa:8b:9a:61:8d:00:fc:10:c8:fc:ad:ac:
                    3b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7E:09:C8:5B:0E:5A:CF:75:8D:AA:96:6E:4C:1E:23:28:D0:32:21:64
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.212.0/22
                IPv6:
                  2804:4f18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268303

    Signature Algorithm: sha256WithRSAEncryption
         db:8e:b1:bc:ad:d0:14:c6:b9:f3:67:cc:a7:3c:47:d9:a8:3e:
         fe:68:84:7e:05:ed:7f:57:94:3c:9e:d5:b0:e5:77:7e:e6:f6:
         30:57:b5:a2:fb:a6:63:9c:6b:2d:0a:5a:37:eb:97:4b:e5:38:
         20:f0:ec:45:90:b0:30:6b:88:43:c0:06:b3:b9:c7:ba:de:96:
         5f:7c:72:82:b0:71:c5:96:de:d0:0a:fa:aa:49:38:56:61:fa:
         42:fa:e5:26:f9:eb:70:e4:8e:4a:95:41:36:c8:70:44:d2:bb:
         dc:9f:7a:8e:e4:5c:36:7b:5b:fd:66:15:c8:3a:5b:19:56:30:
         44:cb:8f:86:8a:18:2c:26:ce:63:76:88:9d:e3:10:9d:de:dc:
         45:05:2e:f1:7c:5f:00:06:16:cd:8a:79:d2:7b:fb:ae:2d:08:
         e0:7e:e4:e4:ef:0c:1d:78:ce:cb:68:6f:d1:60:ef:5b:de:fc:
         d8:5a:ee:16:29:9d:f5:81:11:a5:79:2b:d7:30:cf:db:31:2a:
         d0:a4:a5:86:6f:65:30:ac:1f:2f:d0:80:cf:63:a9:2f:f2:90:
         36:8b:cf:cd:48:61:0a:63:3e:7e:4c:0f:5d:80:8a:87:7b:44:
         0b:57:85:57:f8:8f:d0:a1:95:21:89:47:a0:43:c0:10:48:6b:
         31:8a:c7:be
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUD1FV3te9saPgYt9A2LaK91UPagAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA1MzExMzM2MDBaFw0yNTA1MzAxMzQxMDBaMDMxMTAvBgNV
BAMTKDdFMDlDODVCMEU1QUNGNzU4REFBOTY2RTRDMUUyMzI4RDAzMjIxNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO54ItSuEzNa4ZAwmm4fmguRBd
SRvnO5bJkn8VwQK0AsUweCPf0y4QoSSih6yOCBs0LsRR4FWOwLGKtZ50MqLYP4Nw
hN0Hma7/5X+qAn70z8jBNcAXmtpWYv8oYdnC0qUkttxEO3mwZtoijEd6nkRxwzds
3fLdgNGfFdtKyQQlk7u1wZjVH5jepBtTxNRHtqaUkCzma7P6DNR62fpRcexBU0My
DzP1XE3V8h1KSxe7txfD4JHXFKzO3ElD67MJ99K1euVU7QxLDqf9vQ95LkiWbln0
lEOmFtBUMhWFrx5yxF3XuMG1rsuDMJ2PuVQfOtVR8KqLmmGNAPwQyPytrDsbAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR+CchbDlrPdY2q
lm5MHiMo0DIhZDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOUhH
NU5laFNBV1F5a1NDc2Z0THpqaEdlY24xbXdrMUJqa3VFSnJqWmdQa2IvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlI
RzVOZWhTQVdReWtTQ3NmdEx6amhHZWNuMW13azFCamt1RUpyalpnUGtiLzAvN0Uw
OUM4NUIwRTVBQ0Y3NThEQUE5NjZFNEMxRTIzMjhEMDMyMjE2NC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLe3UMA0EAgACMAcDBQAoBE8YMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQYDzANBgkqhkiG9w0BAQsFAAOCAQEA246xvK3QFMa582fM
pzxH2ag+/miEfgXtf1eUPJ7VsOV3fub2MFe1ovumY5xrLQpaN+uXS+U4IPDsRZCw
MGuIQ8AGs7nHut6WX3xygrBxxZbe0Ar6qkk4VmH6QvrlJvnrcOSOSpVBNshwRNK7
3J96juRcNntb/WYVyDpbGVYwRMuPhooYLCbOY3aIneMQnd7cRQUu8XxfAAYWzYp5
0nv7ri0I4H7k5O8MHXjOy2hv0WDvW9782FruFimd9YERpXkr1zDP2zEq0KSlhm9l
MKwfL9CAz2OpL/KQNovPzUhhCmM+fkwPXYCKh3tEC1eFV/iP0KGVIYlHoEPAEEhr
MYrHvg==
-----END CERTIFICATE-----
Generated at Wed Jun 26 02:43:41 2024 by rpki-client on console-fra.rpki-client.org