Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/91CF2C28848523B526C03E87C0083EF41A98971D.cer
File:                     91CF2C28848523B526C03E87C0083EF41A98971D.cer (raw, json)
Hash identifier:          EAEJNmxrsBYiPOIX22uRfPOLgpFljK5Jwt1Pu7TwsjQ=
Subject key identifier:   91:CF:2C:28:84:85:23:B5:26:C0:3E:87:C0:08:3E:F4:1A:98:97:1D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0EDB72CE57B8E4D6730FABA1A652D063F8545B51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CrsfgiFyWgRDD9YUMzAFbpPJgsjX2CDxKfXBeTvkezm2/1/91CF2C28848523B526C03E87C0083EF41A98971D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CrsfgiFyWgRDD9YUMzAFbpPJgsjX2CDxKfXBeTvkezm2/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:25:22 +0000
Certificate not after:    Wed 02 Apr 2025 18:30:22 +0000
Subordinate resources:    AS: 270490
                          IP: 24.152.96.0/22
                          IP: 2804:6cc4::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 01:38:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:db:72:ce:57:b8:e4:d6:73:0f:ab:a1:a6:52:d0:63:f8:54:5b:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:25:22 2024 GMT
            Not After : Apr  2 18:30:22 2025 GMT
        Subject: CN=91CF2C28848523B526C03E87C0083EF41A98971D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:1c:73:c9:fa:7e:56:22:ae:61:ef:66:7e:cb:
                    6d:0c:f6:7e:b4:bd:3b:70:bb:7a:5f:e0:59:dd:f5:
                    50:c9:00:34:4c:47:1c:27:13:97:ed:0b:05:41:56:
                    87:b8:f6:9a:d4:52:06:b9:20:90:82:6d:6b:1a:c2:
                    75:87:68:84:c7:d7:18:47:11:f3:c6:c7:7e:80:69:
                    0e:0d:32:53:39:35:5c:4e:5e:04:2b:8d:50:ac:e1:
                    4f:2a:66:3c:4b:c4:c3:18:89:2a:59:4b:f5:e2:0e:
                    75:48:38:10:f0:61:6e:f1:c2:1e:21:08:64:27:a3:
                    7e:0a:f0:80:d5:16:39:55:6e:c8:6c:ff:09:86:b7:
                    65:87:7b:0b:1a:76:69:4f:bc:bb:22:e3:73:12:66:
                    0d:1e:a7:bd:38:d4:d4:7e:74:3e:3e:34:8e:e2:b7:
                    7d:00:62:ac:76:82:d2:9f:8f:bc:25:8b:1d:59:53:
                    60:ae:2a:73:ac:df:87:78:4c:a6:d5:e9:d4:5d:3f:
                    ae:5f:62:a1:95:ca:db:ea:47:42:0a:30:12:0f:08:
                    b9:d5:40:85:73:b0:03:06:c1:02:41:36:12:3e:e7:
                    d5:82:bf:df:13:38:08:c9:65:14:f0:b8:53:a5:94:
                    c2:cf:a0:6c:57:eb:1b:a0:8e:14:2a:51:21:ee:37:
                    ee:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                91:CF:2C:28:84:85:23:B5:26:C0:3E:87:C0:08:3E:F4:1A:98:97:1D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CrsfgiFyWgRDD9YUMzAFbpPJgsjX2CDxKfXBeTvkezm2/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CrsfgiFyWgRDD9YUMzAFbpPJgsjX2CDxKfXBeTvkezm2/1/91CF2C28848523B526C03E87C0083EF41A98971D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.96.0/22
                IPv6:
                  2804:6cc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270490

    Signature Algorithm: sha256WithRSAEncryption
         9d:dc:3b:36:ca:f2:52:96:dd:51:d3:04:e6:10:19:52:cc:48:
         6e:06:b5:00:91:19:c3:20:39:60:3d:cd:c1:d0:07:a4:4b:e2:
         98:2e:c0:81:c7:3f:e1:10:96:f7:b0:06:23:cb:43:95:c4:69:
         06:87:d6:de:76:fc:30:4b:0f:fe:1f:2a:53:08:1c:d8:45:72:
         e6:70:53:5c:50:ba:c9:01:df:27:01:2f:a4:14:5e:5c:65:cf:
         8d:8d:af:bc:3d:31:42:49:6b:b5:e8:6a:fb:7e:ee:74:6b:a8:
         fe:87:4c:de:6d:ff:6d:ec:4d:20:ee:16:ba:d0:0e:13:c5:6a:
         7e:26:24:68:6f:0c:a8:fc:06:da:e8:dd:f0:5d:2f:59:2f:d0:
         75:52:4d:ad:db:86:09:d9:a8:5f:b8:02:f9:cc:03:1c:cc:72:
         d2:4f:fa:b9:86:3e:2e:4f:60:69:a1:7c:97:6c:39:51:74:44:
         7a:b7:1a:0f:7e:d0:07:05:4a:6e:78:bd:31:03:18:9a:87:19:
         20:99:46:19:88:24:aa:7a:81:7c:db:1c:33:02:e4:40:f6:d7:
         69:4c:f3:1f:3d:a4:78:8e:d8:1b:76:1d:4c:e4:4a:78:87:6a:
         39:83:7b:27:57:a9:32:89:08:b3:81:35:c9:81:76:86:73:55:
         92:e7:1a:9e
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUDttyzle45NZzD6uhplLQY/hUW1EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMxODI1MjJaFw0yNTA0MDIxODMwMjJaMDMxMTAvBgNV
BAMTKDkxQ0YyQzI4ODQ4NTIzQjUyNkMwM0U4N0MwMDgzRUY0MUE5ODk3MUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsHHPJ+n5WIq5h72Z+y20M9n60
vTtwu3pf4Fnd9VDJADRMRxwnE5ftCwVBVoe49prUUga5IJCCbWsawnWHaITH1xhH
EfPGx36AaQ4NMlM5NVxOXgQrjVCs4U8qZjxLxMMYiSpZS/XiDnVIOBDwYW7xwh4h
CGQno34K8IDVFjlVbshs/wmGt2WHewsadmlPvLsi43MSZg0ep7041NR+dD4+NI7i
t30AYqx2gtKfj7wlix1ZU2CuKnOs34d4TKbV6dRdP65fYqGVytvqR0IKMBIPCLnV
QIVzsAMGwQJBNhI+59WCv98TOAjJZRTwuFOllMLPoGxX6xugjhQqUSHuN+5vAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSRzywohIUjtSbA
PofACD70GpiXHTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ3Jz
ZmdpRnlXZ1JERDlZVU16QUZicFBKZ3NqWDJDRHhLZlhCZVR2a2V6bTIvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ3Jz
ZmdpRnlXZ1JERDlZVU16QUZicFBKZ3NqWDJDRHhLZlhCZVR2a2V6bTIvMS85MUNG
MkMyODg0ODUyM0I1MjZDMDNFODdDMDA4M0VGNDFBOTg5NzFELm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAIYmGAwDQQCAAIwBwMFACgEbMQwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBCCaMA0GCSqGSIb3DQEBCwUAA4IBAQCd3Ds2yvJSlt1R0wTm
EBlSzEhuBrUAkRnDIDlgPc3B0AekS+KYLsCBxz/hEJb3sAYjy0OVxGkGh9bedvww
Sw/+HypTCBzYRXLmcFNcULrJAd8nAS+kFF5cZc+Nja+8PTFCSWu16Gr7fu50a6j+
h0zebf9t7E0g7ha60A4TxWp+JiRobwyo/Aba6N3wXS9ZL9B1Uk2t24YJ2ahfuAL5
zAMczHLST/q5hj4uT2BpoXyXbDlRdER6txoPftAHBUpueL0xAxiahxkgmUYZiCSq
eoF82xwzAuRA9tdpTPMfPaR4jtgbdh1M5Ep4h2o5g3snV6kyiQizgTXJgXaGc1WS
5xqe
-----END CERTIFICATE-----
Generated at Sat Jun 1 22:59:52 2024 by rpki-client on console-fra.rpki-client.org