Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9BF7B18E5CC2A8BDC7E57C5517B67E08FFD13055.cer
File:                     9BF7B18E5CC2A8BDC7E57C5517B67E08FFD13055.cer (raw, json)
Hash identifier:          CuQSZ6+xSfDVuvL19ScTSmlnPGNP0OAz6jMToAEoSV8=
Subject key identifier:   9B:F7:B1:8E:5C:C2:A8:BD:C7:E5:7C:55:17:B6:7E:08:FF:D1:30:55
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0D6A1E2490DDD5A78D9EFFACAE6DCDA970CA1436
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/0/9BF7B18E5CC2A8BDC7E57C5517B67E08FFD13055.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 19 Jun 2024 13:41:16 +0000
Certificate not after:    Wed 18 Jun 2025 13:46:16 +0000
Subordinate resources:    AS: 266644
                          IP: 128.201.180.0/22
                          IP: 2804:3f2c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 21:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:6a:1e:24:90:dd:d5:a7:8d:9e:ff:ac:ae:6d:cd:a9:70:ca:14:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 19 13:41:16 2024 GMT
            Not After : Jun 18 13:46:16 2025 GMT
        Subject: CN=9BF7B18E5CC2A8BDC7E57C5517B67E08FFD13055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:84:43:f0:19:83:35:d1:f6:b2:db:df:3a:68:
                    07:0b:e0:f2:f1:15:49:b5:ba:fe:35:c6:4a:c3:93:
                    fb:7b:88:3b:b1:ba:5f:24:cc:f7:6b:5b:53:81:46:
                    40:27:3c:dc:d1:68:7c:14:53:71:02:38:0a:d1:1a:
                    3b:4d:6b:b0:98:ff:1e:60:ca:46:12:6d:19:1e:26:
                    03:e3:5d:82:d8:da:5f:e8:8e:5e:1c:06:2e:16:5f:
                    f6:de:0a:7b:9c:08:25:88:ee:c6:b1:b2:ba:5d:73:
                    21:1d:72:77:aa:d8:25:86:b3:cc:13:64:b0:2c:45:
                    c9:9f:e4:3b:53:b2:10:a8:0d:b6:f5:89:28:dc:4c:
                    bd:3d:15:a9:33:98:2a:23:a1:59:cc:8d:d8:90:0f:
                    c8:c2:e7:fd:84:cc:95:31:e9:66:f8:77:4a:fa:2c:
                    ac:92:8f:94:54:87:54:dd:6a:02:94:bb:b8:e8:93:
                    0c:f3:83:e0:e8:dc:95:d9:36:b6:b6:4b:7d:6f:95:
                    95:e7:f8:07:d3:62:f1:16:98:a3:ec:a8:21:c3:23:
                    3d:55:db:9c:9b:18:f0:d4:84:77:c0:ef:65:dd:fa:
                    23:16:de:b7:9f:90:65:18:f8:8e:fe:90:54:69:82:
                    74:93:db:aa:48:84:05:2a:fb:21:51:c4:0a:da:c7:
                    b0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9B:F7:B1:8E:5C:C2:A8:BD:C7:E5:7C:55:17:B6:7E:08:FF:D1:30:55
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/0/9BF7B18E5CC2A8BDC7E57C5517B67E08FFD13055.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.180.0/22
                IPv6:
                  2804:3f2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266644

    Signature Algorithm: sha256WithRSAEncryption
         56:cb:68:41:17:c6:7e:9f:cb:2d:91:da:98:76:bf:4e:f6:1c:
         37:40:b7:9f:65:ef:5d:48:72:e7:ff:60:e7:1a:0b:a6:68:9f:
         13:dc:f2:f3:09:95:cc:a1:ce:b8:14:b9:1a:90:92:bd:92:a0:
         21:13:3b:de:7d:fd:69:a0:76:79:19:40:0e:3c:0e:05:26:44:
         81:95:0a:52:ad:4f:1d:3a:82:8d:29:e6:59:39:b2:82:63:af:
         f0:91:35:37:6e:e1:b6:b0:1d:ff:e5:df:20:bd:66:cc:cc:f7:
         8f:21:54:4f:3f:4e:13:ed:8e:4a:76:0b:a3:74:83:c8:b3:b5:
         0a:88:d9:d6:f9:eb:b6:ad:22:c3:0e:62:0e:57:fc:dd:88:9c:
         7c:cd:29:11:90:c8:b9:bf:4b:a0:08:d1:a2:28:0c:29:59:76:
         a3:f1:a5:02:74:d2:05:65:4e:42:82:6e:db:0a:a8:fc:16:ed:
         05:65:6f:61:c9:96:c1:ac:31:17:f9:cd:6a:a6:9b:9e:aa:18:
         e9:04:55:d8:25:72:a8:11:17:09:bc:49:84:82:23:18:93:22:
         f5:26:91:de:c0:7a:18:2b:d8:78:d6:83:12:a4:5a:80:cc:18:
         40:b0:f0:23:4b:ae:b0:70:47:e7:f3:6d:85:3a:3b:a3:44:df:
         94:7d:2f:c8
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUDWoeJJDd1aeNnv+srm3NqXDKFDYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA2MTkxMzQxMTZaFw0yNTA2MTgxMzQ2MTZaMDMxMTAvBgNV
BAMTKDlCRjdCMThFNUNDMkE4QkRDN0U1N0M1NTE3QjY3RTA4RkZEMTMwNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAhEPwGYM10fay2986aAcL4PLx
FUm1uv41xkrDk/t7iDuxul8kzPdrW1OBRkAnPNzRaHwUU3ECOArRGjtNa7CY/x5g
ykYSbRkeJgPjXYLY2l/ojl4cBi4WX/beCnucCCWI7saxsrpdcyEdcneq2CWGs8wT
ZLAsRcmf5DtTshCoDbb1iSjcTL09FakzmCojoVnMjdiQD8jC5/2EzJUx6Wb4d0r6
LKySj5RUh1TdagKUu7jokwzzg+Do3JXZNra2S31vlZXn+AfTYvEWmKPsqCHDIz1V
25ybGPDUhHfA72Xd+iMW3refkGUY+I7+kFRpgnST26pIhAUq+yFRxArax7BnAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSb97GOXMKovcfl
fFUXtn4I/9EwVTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQWoy
WDJDYXJGcGU5eUtkSm53TjU5cHhkZE5hWnBkelI5NmJ0MUw3WmdTdEcvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Fq
MlgyQ2FyRnBlOXlLZEpud041OXB4ZGROYVpwZHpSOTZidDFMN1pnU3RHLzAvOUJG
N0IxOEU1Q0MyQThCREM3RTU3QzU1MTdCNjdFMDhGRkQxMzA1NS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCgMm0MA0EAgACMAcDBQAoBD8sMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQRlDANBgkqhkiG9w0BAQsFAAOCAQEAVstoQRfGfp/LLZHa
mHa/TvYcN0C3n2XvXUhy5/9g5xoLpmifE9zy8wmVzKHOuBS5GpCSvZKgIRM73n39
aaB2eRlADjwOBSZEgZUKUq1PHTqCjSnmWTmygmOv8JE1N27htrAd/+XfIL1mzMz3
jyFUTz9OE+2OSnYLo3SDyLO1CojZ1vnrtq0iww5iDlf83YicfM0pEZDIub9LoAjR
oigMKVl2o/GlAnTSBWVOQoJu2wqo/BbtBWVvYcmWwawxF/nNaqabnqoY6QRV2CVy
qBEXCbxJhIIjGJMi9SaR3sB6GCvYeNaDEqRagMwYQLDwI0uusHBH5/NthTo7o0Tf
lH0vyA==
-----END CERTIFICATE-----
Generated at Sat Sep 28 20:53:50 2024 by rpki-client on console-ams.rpki-client.org