Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9115D16733589A392CF57AE845CBFB93A02A8835.cer
File:                     9115D16733589A392CF57AE845CBFB93A02A8835.cer (raw, json)
Hash identifier:          5dXOw2No/PnMNmcJo+wdnLQXL+EUojnDSNRJ8hZv8g0=
Subject key identifier:   91:15:D1:67:33:58:9A:39:2C:F5:7A:E8:45:CB:FB:93:A0:2A:88:35
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2D87450583E3197439C75BB976141FD8E4492A7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/0/9115D16733589A392CF57AE845CBFB93A02A8835.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Nov 2024 17:57:39 +0000
Certificate not after:    Thu 20 Nov 2025 18:02:39 +0000
Subordinate resources:    AS: 265257
                          IP: 168.0.168.0/22
                          IP: 2804:2d04::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:87:45:05:83:e3:19:74:39:c7:5b:b9:76:14:1f:d8:e4:49:2a:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 21 17:57:39 2024 GMT
            Not After : Nov 20 18:02:39 2025 GMT
        Subject: CN=9115D16733589A392CF57AE845CBFB93A02A8835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:eb:d0:ba:a4:b0:b5:12:28:f3:be:68:68:c9:
                    c2:aa:ab:b7:cb:b5:a7:c3:0a:21:6f:24:11:6b:0c:
                    94:66:83:17:13:47:da:da:34:70:5f:e1:5f:15:4d:
                    09:2e:30:3c:63:8b:7f:ad:ad:d8:6a:e6:c1:95:d9:
                    82:bf:e0:3c:4b:65:c2:fd:3a:c9:0a:9c:f7:6f:0a:
                    0e:f3:5f:bc:97:ac:67:3a:ef:f2:f8:8c:82:16:30:
                    7b:73:13:7a:cd:6e:a9:3e:c7:b7:a1:10:e0:ac:81:
                    cd:85:27:32:21:8f:ba:ea:27:ef:b7:cf:7f:3d:42:
                    3a:66:0c:f8:1c:57:60:b3:6f:17:e4:82:22:13:1a:
                    39:d9:13:6f:4d:a0:6c:78:68:c6:04:fa:99:bd:40:
                    df:86:38:a7:c9:95:8c:bd:50:48:4d:98:40:0d:b5:
                    08:1f:61:73:08:82:4a:23:ca:f3:fa:ee:15:ce:66:
                    00:82:99:93:e3:a6:eb:74:1e:39:56:12:a5:52:59:
                    48:5d:af:45:9e:71:a1:74:7a:76:8a:71:1e:06:e4:
                    ce:58:50:18:b8:de:e8:ff:7a:4f:e4:92:a4:b0:d8:
                    a5:e3:cc:44:39:8e:28:b5:df:9e:70:00:2a:ab:5c:
                    21:3f:58:75:1f:65:e2:71:9a:fe:95:e5:6b:50:b6:
                    69:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                91:15:D1:67:33:58:9A:39:2C:F5:7A:E8:45:CB:FB:93:A0:2A:88:35
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/0/9115D16733589A392CF57AE845CBFB93A02A8835.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.168.0/22
                IPv6:
                  2804:2d04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265257

    Signature Algorithm: sha256WithRSAEncryption
         91:43:6b:e9:0e:51:1e:dc:7a:e9:5a:f7:95:27:8c:81:e1:f0:
         85:c1:6c:39:0a:d0:b9:91:df:e4:fc:d4:9b:99:63:c1:d8:a9:
         09:c7:8f:81:03:ee:0c:40:e8:52:4f:00:07:9a:69:84:a1:9a:
         da:da:71:d2:ce:94:19:66:eb:2b:a6:90:41:77:23:db:b2:14:
         ad:03:1b:d5:d6:cc:be:25:a4:a5:78:06:b3:31:05:59:03:8f:
         15:3d:59:d0:c1:7d:7e:e7:2e:db:27:77:98:26:cc:64:8e:47:
         bc:d3:b1:eb:8e:c1:f5:a0:4d:45:2e:45:f7:76:39:9a:b3:b9:
         4e:d7:8c:0a:20:a9:d9:db:90:8c:e0:dc:02:1a:b2:11:cf:ee:
         7a:24:a1:6b:38:32:0d:db:c2:b1:73:ae:43:06:e4:6a:32:65:
         85:fb:ab:f9:4d:c8:c2:2b:92:a2:a3:a5:7d:83:71:90:2c:ee:
         32:1f:27:65:f9:1e:59:8f:58:aa:45:9c:4d:40:4c:4a:47:62:
         6b:b7:1c:22:e0:02:f2:de:49:e4:54:a7:f7:06:ec:5c:dc:9c:
         42:4a:de:98:df:fd:20:87:df:8d:4b:65:06:ce:31:3e:26:30:
         f5:9c:26:31:cb:fd:ee:89:31:8e:1f:36:4e:8f:f9:bf:89:85:
         2a:0d:2f:3b
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIULYdFBYPjGXQ5x1u5dhQf2ORJKnowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDExMjExNzU3MzlaFw0yNTExMjAxODAyMzlaMDMxMTAvBgNV
BAMTKDkxMTVEMTY3MzM1ODlBMzkyQ0Y1N0FFODQ1Q0JGQjkzQTAyQTg4MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk69C6pLC1EijzvmhoycKqq7fL
tafDCiFvJBFrDJRmgxcTR9raNHBf4V8VTQkuMDxji3+trdhq5sGV2YK/4DxLZcL9
OskKnPdvCg7zX7yXrGc67/L4jIIWMHtzE3rNbqk+x7ehEOCsgc2FJzIhj7rqJ++3
z389QjpmDPgcV2CzbxfkgiITGjnZE29NoGx4aMYE+pm9QN+GOKfJlYy9UEhNmEAN
tQgfYXMIgkojyvP67hXOZgCCmZPjput0HjlWEqVSWUhdr0WecaF0enaKcR4G5M5Y
UBi43uj/ek/kkqSw2KXjzEQ5jii1355wACqrXCE/WHUfZeJxmv6V5WtQtmkxAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSRFdFnM1iaOSz1
euhFy/uToCqINTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRGJ6
Zk1hdlhSV25yQjRKR1VvOVdyNEVONDRUY2dRNlZvV1cxUmZmdENON2svMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Ri
emZNYXZYUlduckI0SkdVbzlXcjRFTjQ0VGNnUTZWb1dXMVJmZnRDTjdrLzAvOTEx
NUQxNjczMzU4OUEzOTJDRjU3QUU4NDVDQkZCOTNBMDJBODgzNS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCqACoMA0EAgACMAcDBQAoBC0EMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQMKTANBgkqhkiG9w0BAQsFAAOCAQEAkUNr6Q5RHtx66Vr3
lSeMgeHwhcFsOQrQuZHf5PzUm5ljwdipCcePgQPuDEDoUk8AB5pphKGa2tpx0s6U
GWbrK6aQQXcj27IUrQMb1dbMviWkpXgGszEFWQOPFT1Z0MF9fucu2yd3mCbMZI5H
vNOx647B9aBNRS5F93Y5mrO5TteMCiCp2duQjODcAhqyEc/ueiShazgyDdvCsXOu
QwbkajJlhfur+U3IwiuSoqOlfYNxkCzuMh8nZfkeWY9YqkWcTUBMSkdia7ccIuAC
8t5J5FSn9wbsXNycQkremN/9IIffjUtlBs4xPiYw9ZwmMcv97okxjh82To/5v4mF
Kg0vOw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:46 2024 by rpki-client on console-fra.rpki-client.org