Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/915ECA06E18624E9B2A7BDE729503B7ACD819F05.cer
File:                     915ECA06E18624E9B2A7BDE729503B7ACD819F05.cer (raw, json)
Hash identifier:          zspAun/h96WKwUo/fTiByKN+BIK4lPlRElqz5z8liWY=
Subject key identifier:   91:5E:CA:06:E1:86:24:E9:B2:A7:BD:E7:29:50:3B:7A:CD:81:9F:05
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0316E4A1A925D125AEC9EE28C1651292442A5F9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ASqXDW4ngc6P5toqAzrnt63GRDbuhcDVPZn1yP1eSVXF/1/915ECA06E18624E9B2A7BDE729503B7ACD819F05.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ASqXDW4ngc6P5toqAzrnt63GRDbuhcDVPZn1yP1eSVXF/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 03:43:35 +0000
Certificate not after:    Thu 03 Apr 2025 03:48:35 +0000
Subordinate resources:    AS: 270708
                          IP: 189.127.160.0/22
                          IP: 2804:7024::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 23:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:16:e4:a1:a9:25:d1:25:ae:c9:ee:28:c1:65:12:92:44:2a:5f:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 03:43:35 2024 GMT
            Not After : Apr  3 03:48:35 2025 GMT
        Subject: CN=915ECA06E18624E9B2A7BDE729503B7ACD819F05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:18:46:4b:f6:fa:00:3a:45:26:61:5a:55:df:
                    de:0b:c7:24:67:f8:53:8e:b4:cd:fa:7d:31:03:47:
                    78:70:9a:d0:7a:4b:12:9c:c5:a6:77:8b:a6:b9:e6:
                    94:83:36:b1:1f:09:99:10:3e:74:73:33:25:8b:ef:
                    65:7f:fe:1c:66:cd:1a:1b:3b:e6:5b:e2:8b:c5:67:
                    34:aa:f5:b8:20:e5:68:5f:91:e2:a9:9d:96:6e:e3:
                    cd:4a:a6:26:27:57:40:d4:07:02:73:d9:90:91:90:
                    97:8b:b1:90:a6:19:72:0c:c2:cc:4f:5c:64:56:e0:
                    b8:27:a4:c9:e4:db:6a:3c:59:8a:75:84:cc:56:2b:
                    33:94:98:bd:9f:fd:30:3b:3b:95:79:55:8c:d9:4a:
                    54:61:d2:10:00:a8:84:ba:6b:fe:a8:0e:1a:c0:9f:
                    06:7b:f0:fc:52:be:8c:09:01:e0:2b:60:f5:20:c9:
                    ed:af:04:a0:72:5d:10:c0:00:61:83:89:ba:f5:6e:
                    6f:81:7c:67:87:48:a5:80:42:87:89:56:77:6e:b8:
                    75:b4:cc:43:78:51:f1:29:95:0d:2f:dd:f6:fa:dc:
                    7a:df:3e:89:60:e8:0e:f3:83:db:a1:c0:a1:3b:b4:
                    82:a7:97:cf:18:fd:03:a3:36:89:f1:67:88:44:c9:
                    50:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                91:5E:CA:06:E1:86:24:E9:B2:A7:BD:E7:29:50:3B:7A:CD:81:9F:05
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ASqXDW4ngc6P5toqAzrnt63GRDbuhcDVPZn1yP1eSVXF/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ASqXDW4ngc6P5toqAzrnt63GRDbuhcDVPZn1yP1eSVXF/1/915ECA06E18624E9B2A7BDE729503B7ACD819F05.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.160.0/22
                IPv6:
                  2804:7024::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270708

    Signature Algorithm: sha256WithRSAEncryption
         47:29:21:63:29:91:fd:99:7c:74:b2:1b:36:73:6b:3c:69:16:
         92:a3:6b:ff:61:09:63:e3:4b:dc:4c:3b:1c:a7:47:66:14:a8:
         5f:42:f8:fd:bd:94:06:b0:ff:12:9b:dc:e2:12:7a:39:56:fe:
         0f:57:5d:ba:59:23:23:50:54:70:5e:4e:aa:6a:93:34:26:98:
         51:44:c2:ac:80:fd:ac:dd:74:42:3c:eb:6f:8c:34:6f:13:8f:
         4c:cc:15:d1:c5:47:85:c1:6a:21:71:b9:52:1c:ec:ff:52:1d:
         8b:d9:e1:f4:6d:37:9b:55:85:47:57:59:b6:06:1c:8e:7a:33:
         9d:12:6a:df:b7:eb:bf:4a:90:6e:4d:cc:bf:c3:1e:f9:f6:42:
         40:7e:3c:e2:7e:83:f0:48:73:fa:09:3e:65:d4:ee:2c:76:72:
         9e:f1:72:f4:d3:21:c7:a6:40:bd:bd:e4:1d:7d:e8:68:c0:79:
         21:53:0d:6d:aa:46:4c:56:ff:05:19:68:9a:cb:36:ac:64:ca:
         20:f6:ad:20:7b:f2:a2:22:bf:84:47:d8:18:31:9c:a1:ce:03:
         37:d8:ea:93:7b:fe:1b:f0:de:03:2d:46:4d:d9:75:55:21:94:
         d6:34:ca:60:69:4e:ad:62:da:3f:9e:b2:8f:78:f1:cb:98:c7:
         e6:f3:6c:1d
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUAxbkoakl0SWuye4owWUSkkQqX54wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwMzQzMzVaFw0yNTA0MDMwMzQ4MzVaMDMxMTAvBgNV
BAMTKDkxNUVDQTA2RTE4NjI0RTlCMkE3QkRFNzI5NTAzQjdBQ0Q4MTlGMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkGEZL9voAOkUmYVpV394LxyRn
+FOOtM36fTEDR3hwmtB6SxKcxaZ3i6a55pSDNrEfCZkQPnRzMyWL72V//hxmzRob
O+Zb4ovFZzSq9bgg5WhfkeKpnZZu481KpiYnV0DUBwJz2ZCRkJeLsZCmGXIMwsxP
XGRW4LgnpMnk22o8WYp1hMxWKzOUmL2f/TA7O5V5VYzZSlRh0hAAqIS6a/6oDhrA
nwZ78PxSvowJAeArYPUgye2vBKByXRDAAGGDibr1bm+BfGeHSKWAQoeJVnduuHW0
zEN4UfEplQ0v3fb63HrfPolg6A7zg9uhwKE7tIKnl88Y/QOjNonxZ4hEyVDnAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSRXsoG4YYk6bKn
vecpUDt6zYGfBTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQVNx
WERXNG5nYzZQNXRvcUF6cm50NjNHUkRidWhjRFZQWm4xeVAxZVNWWEYvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQVNx
WERXNG5nYzZQNXRvcUF6cm50NjNHUkRidWhjRFZQWm4xeVAxZVNWWEYvMS85MTVF
Q0EwNkUxODYyNEU5QjJBN0JERTcyOTUwM0I3QUNEODE5RjA1Lm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAK9f6AwDQQCAAIwBwMFACgEcCQwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBCF0MA0GCSqGSIb3DQEBCwUAA4IBAQBHKSFjKZH9mXx0shs2
c2s8aRaSo2v/YQlj40vcTDscp0dmFKhfQvj9vZQGsP8Sm9ziEno5Vv4PV126WSMj
UFRwXk6qapM0JphRRMKsgP2s3XRCPOtvjDRvE49MzBXRxUeFwWohcblSHOz/Uh2L
2eH0bTebVYVHV1m2BhyOejOdEmrft+u/SpBuTcy/wx759kJAfjzifoPwSHP6CT5l
1O4sdnKe8XL00yHHpkC9veQdfehowHkhUw1tqkZMVv8FGWiayzasZMog9q0ge/Ki
Ir+ER9gYMZyhzgM32OqTe/4b8N4DLUZN2XVVIZTWNMpgaU6tYto/nrKPePHLmMfm
82wd
-----END CERTIFICATE-----
Generated at Sat Jun 1 23:43:32 2024 by rpki-client on console-fra.rpki-client.org