Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer
File:                     85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer (raw, json)
Hash identifier:          Y4gf+QCnd7IPDI0N/wqfDranh8J2Dxtwzl3UGcnIPgY=
Subject key identifier:   85:EE:0C:D6:61:88:7C:C8:8F:64:F6:B4:BE:9D:42:04:26:E2:00:DB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       457F09F495E4CA13C4C6D3C985A63448EA5F258D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 02:56:11 +0000
Certificate not after:    Thu 03 Apr 2025 03:01:11 +0000
Subordinate resources:    AS: 272559
                          IP: 2804:8520::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Jul 2024 20:04:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:7f:09:f4:95:e4:ca:13:c4:c6:d3:c9:85:a6:34:48:ea:5f:25:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 02:56:11 2024 GMT
            Not After : Apr  3 03:01:11 2025 GMT
        Subject: CN=85EE0CD661887CC88F64F6B4BE9D420426E200DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:59:b5:76:66:2f:4c:7d:f8:d3:ea:15:3a:2f:
                    e0:e5:0f:14:80:5f:12:3d:a3:aa:c5:04:1b:2b:0c:
                    73:1b:85:dc:a8:3c:8b:a2:b6:c3:61:09:21:a7:4a:
                    f9:eb:bd:13:01:15:e9:58:02:eb:84:00:df:31:13:
                    0f:bd:a2:5e:86:40:c4:2c:c9:27:c5:a3:b6:12:30:
                    a7:40:86:a9:a4:15:c5:29:24:2b:31:c6:b4:c8:0d:
                    71:29:87:2a:2b:3d:da:1a:b9:92:c6:23:41:2e:bb:
                    4d:67:a6:09:1f:43:b3:e4:51:6d:08:f4:f0:f9:13:
                    0e:99:0b:e4:55:b3:0b:bc:f6:19:3e:c0:50:5b:3e:
                    3c:f5:8a:d8:d5:24:0b:fc:ed:77:8a:06:5f:47:9b:
                    88:36:bb:8a:0d:3b:cb:3f:74:7b:00:67:64:29:04:
                    60:e3:0f:be:7b:14:bd:cd:e8:77:75:e5:5b:da:39:
                    be:fd:87:37:f9:79:b5:ad:76:68:dc:0c:ba:f8:fd:
                    53:76:08:02:0c:23:06:24:d0:dc:9a:81:eb:9e:67:
                    bd:b2:b5:c1:21:45:16:31:ec:57:c2:01:70:b4:ff:
                    13:a2:59:14:b2:2c:0b:1c:f1:c4:88:5d:ce:1e:7f:
                    16:89:54:34:fe:0f:80:a6:ea:ec:68:64:20:71:94:
                    41:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                85:EE:0C:D6:61:88:7C:C8:8F:64:F6:B4:BE:9D:42:04:26:E2:00:DB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8520::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272559

    Signature Algorithm: sha256WithRSAEncryption
         3f:65:d2:7b:59:ff:13:48:73:3d:c8:14:cd:16:d3:11:fa:a4:
         88:41:9e:3b:2f:a7:69:5b:dc:ce:de:8f:aa:dc:91:04:af:28:
         bb:54:e0:04:c6:22:dc:c7:db:42:f6:38:c5:7b:de:59:d1:6c:
         06:63:3f:f9:88:06:24:15:33:6c:70:1e:bc:b2:cb:cf:3c:fd:
         2b:4a:f3:51:68:61:7e:9a:2c:2d:20:b8:ec:ef:94:c2:1d:73:
         f7:f1:55:2c:b9:e8:9f:05:7c:ca:7f:0d:a7:2e:41:97:3e:e6:
         ab:65:25:b2:79:9b:c5:7d:6c:30:1e:a3:69:1c:51:ae:0e:90:
         e1:87:91:52:a8:e6:ed:ba:91:fc:61:ab:c3:a4:b8:d6:86:42:
         e2:28:cb:ba:7e:ae:a2:a0:7f:d9:54:bf:cc:fc:5a:90:f2:5b:
         5d:a3:2e:5b:0c:c5:62:7f:00:ac:2d:5b:80:73:9c:b8:59:8e:
         92:2e:f8:d2:f7:1b:32:6b:d9:18:7d:cf:5d:3f:3a:56:c1:d8:
         c9:76:8f:f0:98:14:c1:4b:7d:a8:4c:b2:b1:89:c9:c3:bb:89:
         67:f1:35:a3:cb:40:7a:9f:e0:7a:48:42:b3:cf:19:de:38:0b:
         05:8c:37:71:69:9e:f7:19:fb:10:a5:39:b6:09:80:f3:97:95:
         3b:bf:4f:b0
-----BEGIN CERTIFICATE-----
MIIGITCCBQmgAwIBAgIURX8J9JXkyhPExtPJhaY0SOpfJY0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwMjU2MTFaFw0yNTA0MDMwMzAxMTFaMDMxMTAvBgNV
BAMTKDg1RUUwQ0Q2NjE4ODdDQzg4RjY0RjZCNEJFOUQ0MjA0MjZFMjAwREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4WbV2Zi9MffjT6hU6L+DlDxSA
XxI9o6rFBBsrDHMbhdyoPIuitsNhCSGnSvnrvRMBFelYAuuEAN8xEw+9ol6GQMQs
ySfFo7YSMKdAhqmkFcUpJCsxxrTIDXEphyorPdoauZLGI0Euu01npgkfQ7PkUW0I
9PD5Ew6ZC+RVswu89hk+wFBbPjz1itjVJAv87XeKBl9Hm4g2u4oNO8s/dHsAZ2Qp
BGDjD757FL3N6Hd15VvaOb79hzf5ebWtdmjcDLr4/VN2CAIMIwYk0NyageueZ72y
tcEhRRYx7FfCAXC0/xOiWRSyLAsc8cSIXc4efxaJVDT+D4Cm6uxoZCBxlEFzAgMB
AAGjggMrMIIDJzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSF7gzWYYh8yI9k
9rS+nUIEJuIA2zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOTdz
d2gzOHBUQ3pTZzh4NWJMcHM3WUI2QUF4eUhyNW93YVZIRnNSYjJMRHAvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOTdz
d2gzOHBUQ3pTZzh4NWJMcHM3WUI2QUF4eUhyNW93YVZIRnNSYjJMRHAvMS84NUVF
MENENjYxODg3Q0M4OEY2NEY2QjRCRTlENDIwNDI2RTIwMERCLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB
Af8EETAPMA0EAgACMAcDBQAoBIUgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQo
rzANBgkqhkiG9w0BAQsFAAOCAQEAP2XSe1n/E0hzPcgUzRbTEfqkiEGeOy+naVvc
zt6PqtyRBK8ou1TgBMYi3MfbQvY4xXveWdFsBmM/+YgGJBUzbHAevLLLzzz9K0rz
UWhhfposLSC47O+Uwh1z9/FVLLnonwV8yn8Npy5Blz7mq2UlsnmbxX1sMB6jaRxR
rg6Q4YeRUqjm7bqR/GGrw6S41oZC4ijLun6uoqB/2VS/zPxakPJbXaMuWwzFYn8A
rC1bgHOcuFmOki740vcbMmvZGH3PXT86VsHYyXaP8JgUwUt9qEyysYnJw7uJZ/E1
o8tAep/gekhCs88Z3jgLBYw3cWme9xn7EKU5tgmA85eVO79PsA==
-----END CERTIFICATE-----
Generated at Sun Jun 30 19:52:44 2024 by rpki-client on console-ams.rpki-client.org