Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/89F15BD396CAE94A713E7ACE40899EFCB3FEA71C.cer
File:                     89F15BD396CAE94A713E7ACE40899EFCB3FEA71C.cer (raw, json)
Hash identifier:          c0/XcOywbF4RNQ8y8U/7cS11L8hnpqxh5EPyOnPFQn0=
Subject key identifier:   89:F1:5B:D3:96:CA:E9:4A:71:3E:7A:CE:40:89:9E:FC:B3:FE:A7:1C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0A30849B9D1D3A41B64FF8F957AE52D358DC81AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3bnjwxEVywK7wNTRN1uskBUArwaJpHptFGu6aEtrhmjk/1/89F15BD396CAE94A713E7ACE40899EFCB3FEA71C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3bnjwxEVywK7wNTRN1uskBUArwaJpHptFGu6aEtrhmjk/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 03:27:02 +0000
Certificate not after:    Thu 03 Apr 2025 03:32:02 +0000
Subordinate resources:    AS: 53159
                          IP: 201.49.144.0/21
                          IP: 2801:80:d20::/44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Jun 2024 22:28:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:30:84:9b:9d:1d:3a:41:b6:4f:f8:f9:57:ae:52:d3:58:dc:81:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 03:27:02 2024 GMT
            Not After : Apr  3 03:32:02 2025 GMT
        Subject: CN=89F15BD396CAE94A713E7ACE40899EFCB3FEA71C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:92:27:82:4b:eb:c8:60:51:cf:bb:e4:fe:e6:
                    2b:91:2c:ca:96:5c:29:e9:95:06:ea:9a:aa:cb:08:
                    e5:d8:0e:0d:e9:36:ad:33:ed:69:ce:be:83:29:a0:
                    28:2e:78:29:7b:b7:4c:08:7d:77:d8:8c:ea:b6:ae:
                    98:63:25:a1:e5:4c:c4:49:c0:47:29:cb:9d:9b:19:
                    7c:6f:41:54:f0:25:85:15:53:3d:e2:b3:69:c4:6e:
                    4f:20:52:20:71:5b:67:8f:82:32:a0:64:55:b6:43:
                    76:1e:49:a4:45:54:92:66:4f:f1:21:bf:33:67:25:
                    70:45:6b:2d:ab:d8:49:d9:5a:c1:01:00:97:5e:2b:
                    bb:48:7f:12:fb:f9:48:ae:ee:cb:35:cd:c7:48:5c:
                    2d:3f:c6:7f:31:9b:a5:53:b3:3e:b3:a8:b3:5c:03:
                    c1:5a:fa:dc:de:7a:ca:88:84:ee:7c:3f:4f:36:be:
                    50:2b:83:bc:a9:ee:1e:a6:aa:68:88:4a:b5:67:46:
                    b6:cc:36:df:bd:2f:5c:bc:e5:de:f0:cc:ee:5e:09:
                    b7:9d:3b:ac:68:a1:db:20:b6:24:bd:c8:a3:2a:00:
                    70:27:85:25:e4:3b:5a:82:e0:83:f2:de:66:35:9b:
                    ab:e5:73:3b:e8:46:cf:c0:5e:50:cb:04:40:c3:f9:
                    28:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                89:F1:5B:D3:96:CA:E9:4A:71:3E:7A:CE:40:89:9E:FC:B3:FE:A7:1C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3bnjwxEVywK7wNTRN1uskBUArwaJpHptFGu6aEtrhmjk/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3bnjwxEVywK7wNTRN1uskBUArwaJpHptFGu6aEtrhmjk/1/89F15BD396CAE94A713E7ACE40899EFCB3FEA71C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.144.0/21
                IPv6:
                  2801:80:d20::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53159

    Signature Algorithm: sha256WithRSAEncryption
         12:2b:f8:46:af:7c:93:b4:2c:f9:65:8d:ba:cd:1f:a4:c2:32:
         7b:74:08:91:14:41:f6:da:e2:90:1e:e8:06:01:9c:24:8c:5a:
         b9:14:8d:3e:3a:10:1e:ab:42:cc:17:63:e6:48:4a:df:2e:f8:
         e1:19:9a:83:84:a2:57:7b:c7:c0:ab:24:5b:45:fc:79:a4:2c:
         cc:44:34:16:fe:a9:c7:2f:d5:a9:ef:3b:8d:e3:86:c5:02:5d:
         0b:1d:e9:4c:25:a5:d0:86:65:c2:3b:f6:65:fc:bd:d6:38:e4:
         7d:57:78:ac:b7:5d:a5:e9:ce:e7:10:54:2d:b5:95:88:b9:ac:
         20:4d:90:82:51:06:a4:6e:0c:0a:1f:5a:25:ea:8e:a4:3d:7b:
         b1:f6:2a:91:5a:a5:24:60:54:22:32:bf:5d:f3:34:83:cb:96:
         31:a5:26:2c:d8:33:9a:63:fc:8c:d3:80:71:9e:2d:48:af:a4:
         e7:73:d6:e7:1a:d2:37:83:81:4c:08:d8:c3:87:8e:05:e7:7c:
         8b:e4:45:92:c4:f1:21:a0:67:b4:19:50:53:52:bf:cd:05:e9:
         8d:84:7c:1a:f1:77:5d:26:ce:a8:63:6f:64:4f:e0:28:55:74:
         a1:fa:52:5b:59:8e:1b:ba:29:d5:d7:1e:bf:f9:d5:53:e9:c5:
         05:db:29:d5
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUCjCEm50dOkG2T/j5V65S01jcga4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwMzI3MDJaFw0yNTA0MDMwMzMyMDJaMDMxMTAvBgNV
BAMTKDg5RjE1QkQzOTZDQUU5NEE3MTNFN0FDRTQwODk5RUZDQjNGRUE3MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtkieCS+vIYFHPu+T+5iuRLMqW
XCnplQbqmqrLCOXYDg3pNq0z7WnOvoMpoCgueCl7t0wIfXfYjOq2rphjJaHlTMRJ
wEcpy52bGXxvQVTwJYUVUz3is2nEbk8gUiBxW2ePgjKgZFW2Q3YeSaRFVJJmT/Eh
vzNnJXBFay2r2EnZWsEBAJdeK7tIfxL7+Uiu7ss1zcdIXC0/xn8xm6VTsz6zqLNc
A8Fa+tzeesqIhO58P082vlArg7yp7h6mqmiISrVnRrbMNt+9L1y85d7wzO5eCbed
O6xoodsgtiS9yKMqAHAnhSXkO1qC4IPy3mY1m6vlczvoRs/AXlDLBEDD+ShBAgMB
AAGjggM7MIIDNzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSJ8VvTlsrpSnE+
es5AiZ78s/6nHDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM2Ju
and4RVZ5d0s3d05UUk4xdXNrQlVBcndhSnBIcHRGR3U2YUV0cmhtamsvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM2Ju
and4RVZ5d0s3d05UUk4xdXNrQlVBcndhSnBIcHRGR3U2YUV0cmhtamsvMS84OUYx
NUJEMzk2Q0FFOTRBNzEzRTdBQ0U0MDg5OUVGQ0IzRkVBNzFDLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcB
Af8EITAfMAwEAgABMAYDBAPJMZAwDwQCAAIwCQMHBCgBAIANIDAaBggrBgEFBQcB
CAEB/wQLMAmgBzAFAgMAz6cwDQYJKoZIhvcNAQELBQADggEBABIr+EavfJO0LPll
jbrNH6TCMnt0CJEUQfba4pAe6AYBnCSMWrkUjT46EB6rQswXY+ZISt8u+OEZmoOE
old7x8CrJFtF/HmkLMxENBb+qccv1anvO43jhsUCXQsd6UwlpdCGZcI79mX8vdY4
5H1XeKy3XaXpzucQVC21lYi5rCBNkIJRBqRuDAofWiXqjqQ9e7H2KpFapSRgVCIy
v13zNIPLljGlJizYM5pj/IzTgHGeLUivpOdz1uca0jeDgUwI2MOHjgXnfIvkRZLE
8SGgZ7QZUFNSv80F6Y2EfBrxd10mzqhjb2RP4ChVdKH6UltZjhu6KdXXHr/51VPp
xQXbKdU=
-----END CERTIFICATE-----
Generated at Mon Jun 17 20:32:19 2024 by rpki-client on console-fra.rpki-client.org