Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A1543D440CB90A3A7B43CAC96F39A1606E8E871F.cer
File:                     A1543D440CB90A3A7B43CAC96F39A1606E8E871F.cer (raw, json)
Hash identifier:          tMGE/w35rw8V93UtxbNqYpchiCvRp3mmdEfJKYCQRXw=
Subject key identifier:   A1:54:3D:44:0C:B9:0A:3A:7B:43:CA:C9:6F:39:A1:60:6E:8E:87:1F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3A5D6605B34284F086B89AC6884163D11D8CDAD5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BZUUFvvfzLrNnZnN1MheN2BpzkbYXJ98mbugZjEGjBgR/0/A1543D440CB90A3A7B43CAC96F39A1606E8E871F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BZUUFvvfzLrNnZnN1MheN2BpzkbYXJ98mbugZjEGjBgR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 Apr 2024 23:03:05 +0000
Certificate not after:    Thu 24 Apr 2025 23:08:05 +0000
Subordinate resources:    AS: 273508
                          IP: 2804:8fbc::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Jun 2024 10:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:5d:66:05:b3:42:84:f0:86:b8:9a:c6:88:41:63:d1:1d:8c:da:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 25 23:03:05 2024 GMT
            Not After : Apr 24 23:08:05 2025 GMT
        Subject: CN=A1543D440CB90A3A7B43CAC96F39A1606E8E871F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1e:c7:07:d1:9c:e8:f9:51:1d:4b:e3:66:8c:
                    7c:66:76:2c:87:69:e6:d0:77:aa:b1:16:1f:16:a9:
                    1a:21:59:94:5d:a3:ea:c4:52:45:c3:e1:ec:2c:d0:
                    f9:11:cf:57:ba:fb:fe:98:88:28:c0:1f:cb:a5:67:
                    c1:df:8d:c4:23:eb:0c:ee:2e:6e:99:0f:82:db:99:
                    a5:25:18:ad:59:2b:7a:54:66:10:43:0a:fe:d5:5b:
                    6b:8d:7e:3a:dc:a5:d7:df:ca:ce:87:ae:0c:71:05:
                    0a:e4:ad:30:66:86:c8:2c:24:9b:84:cf:90:3b:79:
                    2f:b5:8d:22:e2:04:97:30:df:47:5d:0e:eb:f3:53:
                    cc:58:2b:54:c5:5a:e9:bc:21:9b:b8:c9:f1:66:9d:
                    06:85:86:97:3f:03:ae:4d:14:1f:2d:f8:33:eb:f1:
                    79:56:af:5c:57:19:d9:58:f3:9b:43:5f:07:50:07:
                    a3:bf:a8:b1:9b:b7:f9:44:cc:80:df:2d:26:46:f8:
                    55:83:ca:8b:8f:f8:ce:c8:2c:a1:cb:5a:d4:8d:3f:
                    bb:46:08:15:e2:1d:18:70:24:24:df:b1:c8:4e:78:
                    d6:0f:80:8e:1f:77:e9:58:01:8e:96:b0:89:5d:3b:
                    d5:9d:0f:9e:8f:8a:22:d4:5d:d8:2a:47:b5:71:43:
                    68:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A1:54:3D:44:0C:B9:0A:3A:7B:43:CA:C9:6F:39:A1:60:6E:8E:87:1F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BZUUFvvfzLrNnZnN1MheN2BpzkbYXJ98mbugZjEGjBgR/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BZUUFvvfzLrNnZnN1MheN2BpzkbYXJ98mbugZjEGjBgR/0/A1543D440CB90A3A7B43CAC96F39A1606E8E871F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8fbc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273508

    Signature Algorithm: sha256WithRSAEncryption
         69:fd:96:b6:4c:08:c6:5d:44:e3:dd:c0:06:ec:e3:63:f1:88:
         41:26:6a:0d:d8:22:dd:32:eb:08:27:f2:ab:63:da:08:44:01:
         ef:29:79:c7:9b:10:72:fd:7d:c3:fa:7c:2b:ce:65:af:02:2b:
         ca:d6:9c:bb:e1:27:f8:37:a3:04:c5:a8:4d:fd:86:07:f3:37:
         f3:23:8c:f8:23:99:ea:9b:d1:bb:fd:b9:dc:e5:4b:7e:bd:0a:
         03:3b:a2:5d:19:1b:76:79:28:cf:1a:37:4b:df:c5:72:e2:ab:
         e3:93:fc:13:eb:62:fd:ed:9f:60:76:8d:0c:47:01:90:f2:c5:
         c3:e1:ee:12:ff:c3:4c:78:ee:40:b0:57:d2:5f:31:c5:36:5b:
         32:75:40:32:71:fd:d0:5e:f4:a0:ce:bf:2b:86:47:9a:06:fe:
         1f:1d:40:23:04:23:bd:17:ee:ed:49:05:01:7e:ef:f1:30:b0:
         c4:29:9c:05:00:77:44:62:93:0e:a4:d8:0f:5b:32:a7:2b:49:
         f9:65:e6:94:af:57:ee:46:60:22:cb:96:00:49:85:ed:9a:e3:
         ea:1c:ad:6c:2b:df:e1:79:1b:7a:ba:f7:0b:e8:bc:d1:a8:06:
         0c:05:09:bc:be:c1:b7:bc:b9:ef:0d:8e:8f:81:dd:71:d1:37:
         87:3a:c2:19
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgIUOl1mBbNChPCGuJrGiEFj0R2M2tUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MjUyMzAzMDVaFw0yNTA0MjQyMzA4MDVaMDMxMTAvBgNV
BAMTKEExNTQzRDQ0MENCOTBBM0E3QjQzQ0FDOTZGMzlBMTYwNkU4RTg3MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnHscH0Zzo+VEdS+NmjHxmdiyH
aebQd6qxFh8WqRohWZRdo+rEUkXD4ews0PkRz1e6+/6YiCjAH8ulZ8HfjcQj6wzu
Lm6ZD4LbmaUlGK1ZK3pUZhBDCv7VW2uNfjrcpdffys6HrgxxBQrkrTBmhsgsJJuE
z5A7eS+1jSLiBJcw30ddDuvzU8xYK1TFWum8IZu4yfFmnQaFhpc/A65NFB8t+DPr
8XlWr1xXGdlY85tDXwdQB6O/qLGbt/lEzIDfLSZG+FWDyouP+M7ILKHLWtSNP7tG
CBXiHRhwJCTfschOeNYPgI4fd+lYAY6WsIldO9WdD56PiiLUXdgqR7VxQ2jDAgMB
AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBShVD1EDLkKOntD
yslvOaFgbo6HHzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQlpV
VUZ2dmZ6THJOblpuTjFNaGVOMkJwemtiWVhKOThtYnVnWmpFR2pCZ1IvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Ja
VVVGdnZmekxyTm5abk4xTWhlTjJCcHprYllYSjk4bWJ1Z1pqRUdqQmdSLzAvQTE1
NDNENDQwQ0I5MEEzQTdCNDNDQUM5NkYzOUExNjA2RThFODcxRi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASPvDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME
LGQwDQYJKoZIhvcNAQELBQADggEBAGn9lrZMCMZdROPdwAbs42PxiEEmag3YIt0y
6wgn8qtj2ghEAe8pecebEHL9fcP6fCvOZa8CK8rWnLvhJ/g3owTFqE39hgfzN/Mj
jPgjmeqb0bv9udzlS369CgM7ol0ZG3Z5KM8aN0vfxXLiq+OT/BPrYv3tn2B2jQxH
AZDyxcPh7hL/w0x47kCwV9JfMcU2WzJ1QDJx/dBe9KDOvyuGR5oG/h8dQCMEI70X
7u1JBQF+7/EwsMQpnAUAd0Rikw6k2A9bMqcrSfll5pSvV+5GYCLLlgBJhe2a4+oc
rWwr3+F5G3q69wvovNGoBgwFCby+wbe8ue8Njo+B3XHRN4c6whk=
-----END CERTIFICATE-----
Generated at Thu Jun 13 08:00:34 2024 by rpki-client on console-ams.rpki-client.org