Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9A78086E3FE6E3143EB9A4F9C4F54AD2F171B0B9.cer
File:                     9A78086E3FE6E3143EB9A4F9C4F54AD2F171B0B9.cer (raw, json)
Hash identifier:          oo0OzC7SvPS2PR9xFflOeMezI06Cpnd+P3AJXJsIK9s=
Subject key identifier:   9A:78:08:6E:3F:E6:E3:14:3E:B9:A4:F9:C4:F5:4A:D2:F1:71:B0:B9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       525303FDD914E270E7956ADF09B307B5DD7B0BE4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/9A78086E3FE6E3143EB9A4F9C4F54AD2F171B0B9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 15 Jun 2024 15:42:41 +0000
Certificate not after:    Sat 14 Jun 2025 15:47:41 +0000
Subordinate resources:    AS: 265500
                          IP: 170.78.92.0/22
                          IP: 2804:3518::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:53:03:fd:d9:14:e2:70:e7:95:6a:df:09:b3:07:b5:dd:7b:0b:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 15 15:42:41 2024 GMT
            Not After : Jun 14 15:47:41 2025 GMT
        Subject: CN=9A78086E3FE6E3143EB9A4F9C4F54AD2F171B0B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:85:4e:b6:25:95:4a:3f:7a:6c:5c:0e:5e:6f:
                    67:dd:9e:50:b7:91:2c:3f:73:e0:47:74:34:7c:19:
                    fe:52:cc:d0:9e:cc:52:05:cd:f1:1a:ce:43:4d:3b:
                    6c:06:c0:1f:c9:80:2e:b1:66:4c:41:21:0f:01:48:
                    61:e0:aa:09:90:0e:18:be:02:83:26:b8:56:cb:62:
                    4a:7c:b8:85:29:e6:9d:52:f3:40:b6:18:42:d9:6a:
                    b4:0f:7b:38:83:95:e7:36:a9:79:14:e2:b8:45:01:
                    4a:4d:31:67:78:fb:8d:20:9e:15:6a:41:fc:84:51:
                    80:d9:99:e2:6d:1c:d4:cb:9e:7f:a4:b5:88:f8:bb:
                    e0:87:a8:de:26:03:8c:8d:a3:2e:91:b4:b3:a9:fc:
                    59:1f:87:eb:52:6c:a5:81:10:08:a7:32:11:21:e4:
                    9b:a5:85:23:58:a5:30:a9:4a:f8:0b:03:e3:24:b9:
                    c6:9d:d8:8c:47:d1:19:3c:fd:67:a1:76:28:83:b3:
                    86:6a:fa:c3:e5:ce:fd:15:1f:ae:18:d7:06:aa:2f:
                    00:54:c7:40:74:75:aa:ab:34:c6:73:64:24:d7:1f:
                    6d:ee:2a:40:40:51:28:b0:08:2d:be:33:ab:b6:04:
                    34:e0:06:1b:fa:87:21:f2:1b:67:3c:a5:41:66:7d:
                    30:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9A:78:08:6E:3F:E6:E3:14:3E:B9:A4:F9:C4:F5:4A:D2:F1:71:B0:B9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/9A78086E3FE6E3143EB9A4F9C4F54AD2F171B0B9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.92.0/22
                IPv6:
                  2804:3518::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265500

    Signature Algorithm: sha256WithRSAEncryption
         8f:e0:e4:45:8b:6c:7c:2c:83:58:07:5d:c1:5f:2b:b5:57:6d:
         5a:c3:af:a5:e3:14:87:aa:63:df:05:a3:08:57:81:05:42:e4:
         a8:52:30:a9:6d:54:27:69:d8:9c:82:75:c4:c6:dd:1f:80:ec:
         f2:5b:f8:a5:19:ee:99:0d:77:f0:cc:5b:67:2d:6a:32:75:16:
         ea:3b:b4:6e:f3:e1:39:b2:31:b7:ae:f8:90:98:39:a3:8e:1b:
         60:73:a3:49:c9:fe:26:d6:93:3d:8d:38:a6:d8:e0:70:1c:42:
         2a:18:5a:5c:54:1c:b8:48:df:7b:05:78:5f:40:f3:ca:b3:fa:
         d3:cb:22:0a:b0:3f:e6:86:17:60:05:0b:48:13:0f:34:ba:cd:
         67:ee:7a:42:c7:07:b5:b5:ae:5e:a3:01:a5:d7:bc:9b:e5:59:
         22:93:f0:a3:74:a1:41:7a:61:bd:7d:0b:25:75:f9:03:b1:5f:
         1e:d7:94:f3:4e:05:03:a9:c2:f7:a9:67:c2:e0:ef:29:76:be:
         4a:84:1d:33:99:4e:02:b6:e8:69:dc:02:e2:66:02:cd:85:04:
         71:9d:4f:7c:d5:e5:59:1e:91:2a:9b:a3:68:e9:1d:fb:10:92:
         3c:fa:c2:0e:f0:b8:80:35:c9:bb:d0:ff:3e:4c:ac:a5:8d:7b:
         1e:e3:55:7d
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUUlMD/dkU4nDnlWrfCbMHtd17C+QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA2MTUxNTQyNDFaFw0yNTA2MTQxNTQ3NDFaMDMxMTAvBgNV
BAMTKDlBNzgwODZFM0ZFNkUzMTQzRUI5QTRGOUM0RjU0QUQyRjE3MUIwQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdhU62JZVKP3psXA5eb2fdnlC3
kSw/c+BHdDR8Gf5SzNCezFIFzfEazkNNO2wGwB/JgC6xZkxBIQ8BSGHgqgmQDhi+
AoMmuFbLYkp8uIUp5p1S80C2GELZarQPeziDlec2qXkU4rhFAUpNMWd4+40gnhVq
QfyEUYDZmeJtHNTLnn+ktYj4u+CHqN4mA4yNoy6RtLOp/Fkfh+tSbKWBEAinMhEh
5JulhSNYpTCpSvgLA+Mkucad2IxH0Rk8/WehdiiDs4Zq+sPlzv0VH64Y1waqLwBU
x0B0daqrNMZzZCTXH23uKkBAUSiwCC2+M6u2BDTgBhv6hyHyG2c8pUFmfTD1AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSaeAhuP+bjFD65
pPnE9UrS8XGwuTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ1FB
ZGs3ZnplMWM3amgzZ29CNlZvcENTOHRqUVZOMUpmTlhCWmFoWFZjeGovMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NR
QWRrN2Z6ZTFjN2poM2dvQjZWb3BDUzh0alFWTjFKZk5YQlphaFhWY3hqLzAvOUE3
ODA4NkUzRkU2RTMxNDNFQjlBNEY5QzRGNTRBRDJGMTcxQjBCOS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCqk5cMA0EAgACMAcDBQAoBDUYMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQNHDANBgkqhkiG9w0BAQsFAAOCAQEAj+DkRYtsfCyDWAdd
wV8rtVdtWsOvpeMUh6pj3wWjCFeBBULkqFIwqW1UJ2nYnIJ1xMbdH4Ds8lv4pRnu
mQ138MxbZy1qMnUW6ju0bvPhObIxt674kJg5o44bYHOjScn+JtaTPY04ptjgcBxC
KhhaXFQcuEjfewV4X0DzyrP608siCrA/5oYXYAULSBMPNLrNZ+56QscHtbWuXqMB
pde8m+VZIpPwo3ShQXphvX0LJXX5A7FfHteU804FA6nC96lnwuDvKXa+SoQdM5lO
ArboadwC4mYCzYUEcZ1PfNXlWR6RKpujaOkd+xCSPPrCDvC4gDXJu9D/PkyspY17
HuNVfQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 21:03:18 2024 by rpki-client on console-fra.rpki-client.org