Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8F69EC4070CE7658D3059640F9268DDF17E8B1A8.cer
File:                     8F69EC4070CE7658D3059640F9268DDF17E8B1A8.cer (raw, json)
Hash identifier:          8mruZKZwSVgcQVmSqF1opTxQHTbil9171MAnFn2+UQs=
Subject key identifier:   8F:69:EC:40:70:CE:76:58:D3:05:96:40:F9:26:8D:DF:17:E8:B1:A8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       66B68C1AA39880E46AD4843144FA3206FC3E2CA2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6QQgQvBNDWgDFvbzU12VsqXaWeutroNve8xSwTfsjByi/1/8F69EC4070CE7658D3059640F9268DDF17E8B1A8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6QQgQvBNDWgDFvbzU12VsqXaWeutroNve8xSwTfsjByi/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Apr 2024 02:33:15 +0000
Certificate not after:    Fri 04 Apr 2025 02:38:15 +0000
Subordinate resources:    AS: 267147
                          IP: 45.229.100.0/22
                          IP: 2804:48d4::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Jun 2024 18:10:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:b6:8c:1a:a3:98:80:e4:6a:d4:84:31:44:fa:32:06:fc:3e:2c:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  5 02:33:15 2024 GMT
            Not After : Apr  4 02:38:15 2025 GMT
        Subject: CN=8F69EC4070CE7658D3059640F9268DDF17E8B1A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d9:57:fb:52:6c:a5:96:02:d0:8e:c6:f7:fe:
                    e2:ab:11:fe:55:f7:43:27:bd:3c:4f:eb:d1:47:72:
                    0d:dc:33:fe:22:cc:b6:73:8c:72:48:27:ae:ef:5f:
                    76:f8:73:65:04:58:87:57:da:cd:8f:c4:c4:a9:3a:
                    14:53:83:6e:2d:69:65:53:7e:55:79:9f:e3:a0:c9:
                    ef:8f:78:3a:02:ca:b8:b3:34:33:5d:98:e1:47:e9:
                    5f:47:bb:f0:23:c6:52:6d:7f:03:24:25:da:a5:3d:
                    b6:34:3e:6b:a3:a1:ca:6f:a2:aa:43:7b:d8:a2:7a:
                    5e:72:fa:25:e5:28:02:5b:3c:8e:89:bd:68:43:81:
                    36:ea:df:64:8a:69:31:3e:e8:46:2c:fd:18:d6:2f:
                    dc:cf:ce:09:79:f1:ed:83:53:5c:7b:ff:32:54:b0:
                    5a:02:62:fa:5b:b5:80:60:fc:2a:6f:91:7d:12:76:
                    58:ee:8f:a2:0d:3b:48:e7:a7:9a:f5:22:a8:bd:ee:
                    0f:96:00:27:19:34:77:4f:bc:35:43:60:12:59:45:
                    08:85:b0:48:7d:4e:e2:5c:f0:4a:59:2f:7b:e8:ae:
                    b6:d5:5f:b8:e6:9a:58:7b:05:5a:32:2c:72:65:e2:
                    da:b2:00:88:13:46:44:c5:6d:d1:05:14:02:7a:c0:
                    1f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8F:69:EC:40:70:CE:76:58:D3:05:96:40:F9:26:8D:DF:17:E8:B1:A8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6QQgQvBNDWgDFvbzU12VsqXaWeutroNve8xSwTfsjByi/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6QQgQvBNDWgDFvbzU12VsqXaWeutroNve8xSwTfsjByi/1/8F69EC4070CE7658D3059640F9268DDF17E8B1A8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.100.0/22
                IPv6:
                  2804:48d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267147

    Signature Algorithm: sha256WithRSAEncryption
         11:6c:31:bc:22:48:bb:13:85:d0:e3:13:5d:ce:0e:c4:6f:f0:
         5d:69:fd:d9:8e:47:56:e2:a7:f2:69:77:38:4e:97:39:b7:81:
         ac:ac:61:b4:4b:b7:0d:0a:ef:c2:bd:e7:11:29:8c:67:13:7c:
         85:98:e3:90:c2:e9:0f:40:26:7a:4c:04:11:4c:4c:d4:07:fd:
         2e:82:04:e3:79:6e:33:32:7e:22:17:d5:d1:f4:87:b9:10:f4:
         83:d2:d7:69:56:98:2f:ea:84:56:21:69:26:d2:b7:39:b7:fd:
         7f:f0:09:80:41:86:5e:26:c4:78:de:71:9e:c1:34:20:e7:65:
         e2:78:4f:d4:e1:fc:12:7d:c6:78:d6:8b:cf:f3:4d:f2:25:0b:
         52:78:f1:63:d5:26:59:5f:58:1b:d9:e6:f0:45:e4:31:dd:e4:
         b0:1e:cf:97:96:cd:b4:62:f8:2b:ad:b1:5e:ad:8f:f9:38:a0:
         6d:7d:83:44:a5:7f:68:96:1a:d1:ed:e1:a0:bb:22:6e:bf:79:
         5e:03:22:46:28:51:40:c5:53:cd:ae:6f:30:9e:a2:93:e8:41:
         b0:99:0a:d8:7d:a7:41:4c:bf:04:fa:d8:c2:cb:ab:96:30:38:
         92:6f:d5:8e:06:c8:d4:f8:17:9f:e1:a8:e1:4f:fa:a9:6d:4b:
         79:3b:ee:b1
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUZraMGqOYgORq1IQxRPoyBvw+LKIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDUwMjMzMTVaFw0yNTA0MDQwMjM4MTVaMDMxMTAvBgNV
BAMTKDhGNjlFQzQwNzBDRTc2NThEMzA1OTY0MEY5MjY4RERGMTdFOEIxQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq2Vf7UmyllgLQjsb3/uKrEf5V
90MnvTxP69FHcg3cM/4izLZzjHJIJ67vX3b4c2UEWIdX2s2PxMSpOhRTg24taWVT
flV5n+Ogye+PeDoCyrizNDNdmOFH6V9Hu/AjxlJtfwMkJdqlPbY0PmujocpvoqpD
e9iiel5y+iXlKAJbPI6JvWhDgTbq32SKaTE+6EYs/RjWL9zPzgl58e2DU1x7/zJU
sFoCYvpbtYBg/CpvkX0Sdljuj6INO0jnp5r1Iqi97g+WACcZNHdPvDVDYBJZRQiF
sEh9TuJc8EpZL3vorrbVX7jmmlh7BVoyLHJl4tqyAIgTRkTFbdEFFAJ6wB/lAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSPaexAcM52WNMF
lkD5Jo3fF+ixqDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNlFR
Z1F2Qk5EV2dERnZielUxMlZzcVhhV2V1dHJvTnZlOHhTd1Rmc2pCeWkvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZR
UWdRdkJORFdnREZ2YnpVMTJWc3FYYVdldXRyb052ZTh4U3dUZnNqQnlpLzEvOEY2
OUVDNDA3MENFNzY1OEQzMDU5NjQwRjkyNjhEREYxN0U4QjFBOC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLeVkMA0EAgACMAcDBQAoBEjUMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQTizANBgkqhkiG9w0BAQsFAAOCAQEAEWwxvCJIuxOF0OMT
Xc4OxG/wXWn92Y5HVuKn8ml3OE6XObeBrKxhtEu3DQrvwr3nESmMZxN8hZjjkMLp
D0AmekwEEUxM1Af9LoIE43luMzJ+IhfV0fSHuRD0g9LXaVaYL+qEViFpJtK3Obf9
f/AJgEGGXibEeN5xnsE0IOdl4nhP1OH8En3GeNaLz/NN8iULUnjxY9UmWV9YG9nm
8EXkMd3ksB7Pl5bNtGL4K62xXq2P+TigbX2DRKV/aJYa0e3hoLsibr95XgMiRihR
QMVTza5vMJ6ik+hBsJkK2H2nQUy/BPrYwsurljA4km/VjgbI1PgXn+Go4U/6qW1L
eTvusQ==
-----END CERTIFICATE-----
Generated at Mon Jun 17 15:56:17 2024 by rpki-client on console-fra.rpki-client.org