Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9954871A58BD1D563C66245B157E43881A74A8D7.cer
File:                     9954871A58BD1D563C66245B157E43881A74A8D7.cer (raw, json)
Hash identifier:          PkIq5U43dXfZPVeLYLni6mDG5XWCTQVwqb9grzocGKI=
Subject key identifier:   99:54:87:1A:58:BD:1D:56:3C:66:24:5B:15:7E:43:88:1A:74:A8:D7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       05CCEFE092614C947C0AB696EB5814AE4ECD9B8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/9954871A58BD1D563C66245B157E43881A74A8D7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 06:07:18 +0000
Certificate not after:    Thu 03 Apr 2025 06:12:18 +0000
Subordinate resources:    AS: 61856
                          IP: 131.0.40.0/22
                          IP: 138.117.208.0/22
                          IP: 143.208.120.0/22
                          IP: 170.245.252.0/22
                          IP: 2804:1a5c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:cc:ef:e0:92:61:4c:94:7c:0a:b6:96:eb:58:14:ae:4e:cd:9b:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 06:07:18 2024 GMT
            Not After : Apr  3 06:12:18 2025 GMT
        Subject: CN=9954871A58BD1D563C66245B157E43881A74A8D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d6:d5:ae:ba:79:40:87:d6:9f:0d:59:c3:b8:
                    0c:d5:f5:bc:7d:2c:c5:47:a6:58:a1:ec:49:10:df:
                    38:6d:0b:cb:94:f6:47:64:c1:58:e3:91:76:98:a5:
                    92:6f:06:7c:b5:fc:c1:49:b1:b3:44:57:66:ee:71:
                    5a:b6:89:09:04:a0:12:11:28:9a:ec:ce:94:21:31:
                    f8:9a:50:e7:3f:d7:96:14:87:50:31:13:bc:ca:7d:
                    9a:0d:10:32:8c:5c:1c:d2:16:70:57:a4:86:74:7f:
                    3c:a3:42:90:d2:49:c4:e9:8d:8d:7b:40:8d:71:8b:
                    f0:6e:16:a2:9f:67:cd:3c:9e:e6:17:0d:fd:37:b3:
                    a4:e4:c3:2c:4f:87:a8:b9:98:6c:a3:63:88:5c:d5:
                    f0:45:13:f0:af:56:d5:73:cb:92:73:c4:ca:cd:44:
                    e5:04:63:b3:f0:cd:03:ac:b0:3c:33:e1:b3:8f:25:
                    3e:13:36:1d:9b:04:ee:16:0a:c4:b1:82:8b:65:6d:
                    19:fb:dc:4b:9f:02:8f:53:51:d3:1b:56:07:18:7b:
                    c8:2a:e1:7e:07:a8:df:e8:20:09:2f:ad:b0:e8:f9:
                    26:cc:27:ca:82:f8:92:36:11:f7:db:e8:9f:ed:41:
                    6f:b2:e1:4a:87:5f:18:bb:7b:12:a3:7f:13:29:f8:
                    1d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                99:54:87:1A:58:BD:1D:56:3C:66:24:5B:15:7E:43:88:1A:74:A8:D7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/9954871A58BD1D563C66245B157E43881A74A8D7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.40.0/22
                  138.117.208.0/22
                  143.208.120.0/22
                  170.245.252.0/22
                IPv6:
                  2804:1a5c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61856

    Signature Algorithm: sha256WithRSAEncryption
         14:4f:55:3d:d8:63:b8:2c:87:e6:d0:41:7a:3e:c6:51:7e:c2:
         c9:ca:41:6e:aa:bb:02:c5:7f:d0:7a:33:08:7c:e9:e6:ca:e6:
         43:fb:77:eb:10:b8:c9:b6:21:01:1a:c3:67:c2:0a:28:b4:5d:
         78:45:df:5b:73:50:7f:6f:79:85:ed:4d:90:02:1d:e4:fa:aa:
         f9:bf:b1:c8:b7:94:50:47:ed:61:91:fc:55:cb:f6:1c:b8:12:
         f3:b9:4b:26:9c:ea:ad:ea:1e:0a:b9:ee:6e:16:0d:83:07:2a:
         6f:bd:a5:01:7b:20:38:14:b5:40:4f:90:ce:ea:28:b7:ea:ea:
         a1:9f:39:d8:55:00:c5:37:ca:8a:61:81:ea:1e:cf:fc:fd:65:
         fa:8a:17:ba:90:25:d5:6e:12:57:ed:42:af:02:6e:4f:42:a6:
         1c:1f:f6:25:58:53:68:b2:64:65:ba:41:4e:87:5d:45:72:23:
         3a:f3:6f:83:fa:4f:59:b7:64:2c:f5:2c:44:d9:2c:f4:a6:ea:
         65:59:9c:cc:de:c8:d9:4f:b0:bf:c5:96:42:83:fa:1f:b8:e7:
         92:b3:dd:d6:ac:1f:6c:c3:95:37:f0:7f:f8:8b:74:16:83:32:
         7c:73:c0:e0:40:62:60:e5:29:36:c9:31:c3:4c:09:10:de:65:
         4c:34:8f:9e
-----BEGIN CERTIFICATE-----
MIIGQTCCBSmgAwIBAgIUBczv4JJhTJR8CraW61gUrk7Nm4wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwNjA3MThaFw0yNTA0MDMwNjEyMThaMDMxMTAvBgNV
BAMTKDk5NTQ4NzFBNThCRDFENTYzQzY2MjQ1QjE1N0U0Mzg4MUE3NEE4RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC11tWuunlAh9afDVnDuAzV9bx9
LMVHplih7EkQ3zhtC8uU9kdkwVjjkXaYpZJvBny1/MFJsbNEV2bucVq2iQkEoBIR
KJrszpQhMfiaUOc/15YUh1AxE7zKfZoNEDKMXBzSFnBXpIZ0fzyjQpDSScTpjY17
QI1xi/BuFqKfZ808nuYXDf03s6TkwyxPh6i5mGyjY4hc1fBFE/CvVtVzy5JzxMrN
ROUEY7PwzQOssDwz4bOPJT4TNh2bBO4WCsSxgotlbRn73EufAo9TUdMbVgcYe8gq
4X4HqN/oIAkvrbDo+SbMJ8qC+JI2Effb6J/tQW+y4UqHXxi7exKjfxMp+B3TAgMB
AAGjggNLMIIDRzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSZVIcaWL0dVjxm
JFsVfkOIGnSo1zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQXNq
N2M4NVVuZ3VmWldVVzFBTHV2dXpqZXB2TndRcEI3SmJiZnlqUXU1a3EvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQXNq
N2M4NVVuZ3VmWldVVzFBTHV2dXpqZXB2TndRcEI3SmJiZnlqUXU1a3EvMS85OTU0
ODcxQTU4QkQxRDU2M0M2NjI0NUIxNTdFNDM4ODFBNzRBOEQ3Lm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUHAQcB
Af8EMTAvMB4EAgABMBgDBAKDACgDBAKKddADBAKP0HgDBAKq9fwwDQQCAAIwBwMF
ACgEGlwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPGgMA0GCSqGSIb3DQEBCwUA
A4IBAQAUT1U92GO4LIfm0EF6PsZRfsLJykFuqrsCxX/QejMIfOnmyuZD+3frELjJ
tiEBGsNnwgootF14Rd9bc1B/b3mF7U2QAh3k+qr5v7HIt5RQR+1hkfxVy/YcuBLz
uUsmnOqt6h4Kue5uFg2DBypvvaUBeyA4FLVAT5DO6ii36uqhnznYVQDFN8qKYYHq
Hs/8/WX6ihe6kCXVbhJX7UKvAm5PQqYcH/YlWFNosmRlukFOh11FciM682+D+k9Z
t2Qs9SxE2Sz0puplWZzM3sjZT7C/xZZCg/ofuOeSs93WrB9sw5U38H/4i3QWgzJ8
c8DgQGJg5Sk2yTHDTAkQ3mVMNI+e
-----END CERTIFICATE-----
Generated at Sat Nov 23 07:44:15 2024 by rpki-client on console-ams.rpki-client.org