Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9E13BFCE913E86C0DF4141935694A0B193DE9C56.cer
File:                     9E13BFCE913E86C0DF4141935694A0B193DE9C56.cer (raw, json)
Hash identifier:          XFpAZljVdN6oCV5LZklF3dMEG+/+dYZAgiTO7/OPMPg=
Subject key identifier:   9E:13:BF:CE:91:3E:86:C0:DF:41:41:93:56:94:A0:B1:93:DE:9C:56
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7D4B15314625D3E449B64A29B9C0CC322977C61F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/9E13BFCE913E86C0DF4141935694A0B193DE9C56.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 Apr 2024 18:08:51 +0000
Certificate not after:    Thu 24 Apr 2025 18:13:51 +0000
Subordinate resources:    AS: 266921
                          IP: 45.225.36.0/22
                          IP: 2804:455c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 03:32:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:4b:15:31:46:25:d3:e4:49:b6:4a:29:b9:c0:cc:32:29:77:c6:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 25 18:08:51 2024 GMT
            Not After : Apr 24 18:13:51 2025 GMT
        Subject: CN=9E13BFCE913E86C0DF4141935694A0B193DE9C56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3c:c6:78:4d:9d:c2:7e:d3:84:75:f1:b7:2c:
                    14:6e:eb:d7:9b:e6:e1:7b:7a:b5:53:6e:b2:49:53:
                    00:10:ed:99:06:33:52:3a:51:82:07:80:ff:de:fa:
                    f1:5b:7e:e3:aa:41:81:e8:7b:82:88:5f:b7:ef:db:
                    7c:e1:6d:67:2b:39:f4:84:8d:89:1e:c2:1d:9d:44:
                    a6:35:8c:1c:2c:c2:09:08:49:3f:af:37:12:79:99:
                    ca:15:c0:5d:3d:e9:79:5b:99:1a:e0:bb:4a:e9:a9:
                    ab:e3:ef:50:e8:4d:57:b2:ff:7d:e3:95:11:cc:42:
                    9b:9d:a5:aa:04:7a:b9:7b:f7:d4:e8:e7:aa:86:c2:
                    e6:7c:18:df:51:94:7b:67:af:fc:11:82:c3:9a:59:
                    26:24:59:d9:25:5b:4d:55:a2:eb:a8:63:ca:0d:34:
                    b3:79:e7:35:90:4f:96:02:da:32:e8:47:b4:c3:ff:
                    a6:21:cc:d3:7e:a7:a3:2f:fe:2c:71:71:2e:f8:d4:
                    b4:64:33:86:ac:98:d7:17:b8:6c:a0:34:23:fb:cd:
                    46:f4:ac:eb:0f:dc:47:96:b2:29:28:66:c5:f2:f6:
                    96:ef:3c:aa:28:e9:61:42:91:d9:e7:52:c7:12:54:
                    7b:e2:55:5c:78:33:03:55:21:ff:6c:dc:45:12:6e:
                    32:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9E:13:BF:CE:91:3E:86:C0:DF:41:41:93:56:94:A0:B1:93:DE:9C:56
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/9E13BFCE913E86C0DF4141935694A0B193DE9C56.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.36.0/22
                IPv6:
                  2804:455c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266921

    Signature Algorithm: sha256WithRSAEncryption
         48:df:21:03:45:fb:35:ca:1f:bb:55:a2:b6:e5:12:56:ac:09:
         68:65:a9:a9:d2:16:3f:7c:fd:9c:be:11:ff:1a:b7:7d:78:29:
         ac:5a:88:89:4a:87:e2:d6:65:b7:63:8f:cb:ce:54:ff:70:45:
         b3:96:cc:0e:6e:43:8f:59:11:97:ee:dd:d2:59:50:72:bf:8f:
         22:73:96:3b:5b:1d:8c:e1:7e:fa:f3:22:4f:75:39:32:42:f4:
         c5:78:f3:ae:d6:6b:24:30:7d:0e:93:46:db:7c:b0:54:90:b1:
         a4:92:8e:0a:f5:72:28:64:61:57:4f:25:3e:85:e4:a6:31:6c:
         ff:44:b8:ff:5d:73:10:29:93:ac:5a:ad:1b:54:49:66:9a:7a:
         0b:ed:d8:b8:97:4f:24:24:b1:e0:26:f8:87:a9:f9:a4:d6:4e:
         88:45:6e:97:76:92:2e:71:3f:3b:92:1a:ed:7b:00:13:71:77:
         5b:97:dc:fa:b9:43:84:6b:83:0a:2e:ce:e5:ab:95:a4:ee:a7:
         52:fe:12:0a:7e:1d:1f:07:4e:d4:fb:0f:f5:81:47:f2:10:5d:
         29:7e:64:be:6b:a1:96:ee:ce:92:8d:47:48:9d:a6:1b:66:ca:
         21:37:a9:f8:f5:59:4e:1e:08:49:4e:75:08:70:63:a0:b5:25:
         2d:5a:29:e5
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUfUsVMUYl0+RJtkopucDMMil3xh8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MjUxODA4NTFaFw0yNTA0MjQxODEzNTFaMDMxMTAvBgNV
BAMTKDlFMTNCRkNFOTEzRTg2QzBERjQxNDE5MzU2OTRBMEIxOTNERTlDNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4PMZ4TZ3CftOEdfG3LBRu69eb
5uF7erVTbrJJUwAQ7ZkGM1I6UYIHgP/e+vFbfuOqQYHoe4KIX7fv23zhbWcrOfSE
jYkewh2dRKY1jBwswgkIST+vNxJ5mcoVwF096XlbmRrgu0rpqavj71DoTVey/33j
lRHMQpudpaoEerl799To56qGwuZ8GN9RlHtnr/wRgsOaWSYkWdklW01VouuoY8oN
NLN55zWQT5YC2jLoR7TD/6YhzNN+p6Mv/ixxcS741LRkM4asmNcXuGygNCP7zUb0
rOsP3EeWsikoZsXy9pbvPKoo6WFCkdnnUscSVHviVVx4MwNVIf9s3EUSbjKLAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSeE7/OkT6GwN9B
QZNWlKCxk96cVjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRTZY
dGhrcUtkZ3BuSnJBRUVRVUFiOXpnYU1iZnJoZGpydFBEajV2cFNMNWcvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0U2
WHRoa3FLZGdwbkpyQUVFUVVBYjl6Z2FNYmZyaGRqcnRQRGo1dnBTTDVnLzAvOUUx
M0JGQ0U5MTNFODZDMERGNDE0MTkzNTY5NEEwQjE5M0RFOUM1Ni5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLeEkMA0EAgACMAcDBQAoBEVcMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQSqTANBgkqhkiG9w0BAQsFAAOCAQEASN8hA0X7Ncofu1Wi
tuUSVqwJaGWpqdIWP3z9nL4R/xq3fXgprFqIiUqH4tZlt2OPy85U/3BFs5bMDm5D
j1kRl+7d0llQcr+PInOWO1sdjOF++vMiT3U5MkL0xXjzrtZrJDB9DpNG23ywVJCx
pJKOCvVyKGRhV08lPoXkpjFs/0S4/11zECmTrFqtG1RJZpp6C+3YuJdPJCSx4Cb4
h6n5pNZOiEVul3aSLnE/O5Ia7XsAE3F3W5fc+rlDhGuDCi7O5auVpO6nUv4SCn4d
HwdO1PsP9YFH8hBdKX5kvmuhlu7Oko1HSJ2mG2bKITep+PVZTh4ISU51CHBjoLUl
LVop5Q==
-----END CERTIFICATE-----
Generated at Sun Jun 2 03:39:09 2024 by rpki-client on console-ams.rpki-client.org