Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A4F6CF3EA81A06C7671C0EE07506E011FB81992C.cer
File:                     A4F6CF3EA81A06C7671C0EE07506E011FB81992C.cer (raw, json)
Hash identifier:          LpWgKzIJCpeKfTNpkvWxl1Y+l3bFn8ogMtnRKOBxnLc=
Subject key identifier:   A4:F6:CF:3E:A8:1A:06:C7:67:1C:0E:E0:75:06:E0:11:FB:81:99:2C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3B6EC23398993F7C553396476BDA45D70163D448
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/A4F6CF3EA81A06C7671C0EE07506E011FB81992C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 25 Oct 2024 14:55:10 +0000
Certificate not after:    Fri 24 Oct 2025 15:00:10 +0000
Subordinate resources:    AS: 266072
                          IP: 45.4.140.0/22
                          IP: 2804:3a20::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:6e:c2:33:98:99:3f:7c:55:33:96:47:6b:da:45:d7:01:63:d4:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 25 14:55:10 2024 GMT
            Not After : Oct 24 15:00:10 2025 GMT
        Subject: CN=A4F6CF3EA81A06C7671C0EE07506E011FB81992C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:63:bd:41:58:40:d4:67:2e:02:13:13:ec:79:
                    32:0b:ea:dd:d7:f8:7c:0e:15:33:1c:d9:9c:65:c4:
                    60:21:77:98:0d:b1:96:de:6d:b7:aa:5d:31:d2:d3:
                    1d:31:51:6e:37:2b:eb:c6:92:18:4f:49:e0:bc:1b:
                    f8:38:8a:e8:a9:e1:dd:72:e3:3a:0c:49:4b:24:2b:
                    4d:42:52:95:6f:ed:99:5d:85:84:66:5e:dc:fa:c2:
                    e4:e9:69:70:c7:50:02:18:b2:aa:92:66:aa:a2:b7:
                    4c:a2:b0:2b:f9:d8:ef:fa:52:ed:08:ed:42:af:99:
                    d1:5c:1c:d6:ac:cb:40:e8:9d:fa:d7:58:91:00:89:
                    4f:27:63:0d:ac:fe:1b:9d:bb:d2:64:8e:7a:f3:91:
                    93:1f:da:78:e3:82:f7:13:15:1c:13:13:b6:a5:8a:
                    f4:ec:ca:b5:f7:03:30:85:5e:20:00:8a:92:30:0d:
                    b9:1a:56:3c:52:eb:29:e2:0a:12:d3:41:06:7e:b4:
                    f6:2d:87:ff:a5:04:20:77:2a:ff:b7:3c:27:ac:e4:
                    11:f4:e9:38:c5:41:84:3e:63:56:ec:8a:9a:c5:e6:
                    2a:b3:31:f2:38:72:0f:74:ad:88:2b:02:3b:d1:28:
                    94:8e:6a:c9:c9:96:ba:87:9b:72:89:20:d1:3b:71:
                    ee:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A4:F6:CF:3E:A8:1A:06:C7:67:1C:0E:E0:75:06:E0:11:FB:81:99:2C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/A4F6CF3EA81A06C7671C0EE07506E011FB81992C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.140.0/22
                IPv6:
                  2804:3a20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266072

    Signature Algorithm: sha256WithRSAEncryption
         67:07:1a:95:d3:88:bf:a3:ba:34:8d:44:6e:0d:a9:e0:23:75:
         b7:97:88:c5:f1:1a:d3:44:04:1d:26:db:5c:87:31:45:dc:c9:
         2e:b3:57:a8:e8:be:e4:ea:fa:c2:ba:0a:81:bc:61:c3:18:22:
         cf:1c:7a:7a:d7:2d:f1:c3:75:bd:f0:be:78:e2:d8:09:1d:e7:
         c8:2f:ae:7d:a3:76:75:ae:6e:87:f3:05:ae:d4:65:9d:c9:8f:
         88:e1:0a:f5:55:f5:26:62:52:48:b0:b7:71:85:13:b1:f6:17:
         48:c4:ca:e9:4d:42:08:ce:ab:ec:81:79:c4:0f:44:00:3f:dc:
         62:83:4a:40:0e:d8:ef:67:ad:d4:7e:82:c9:c1:ab:a1:12:28:
         a7:0d:40:20:b0:9c:05:24:16:a5:82:8c:84:26:e0:aa:16:5b:
         f5:b6:db:69:23:0c:83:0a:4e:0c:8e:f7:3a:5d:e9:f2:0f:c4:
         81:5c:06:0a:bf:d9:19:fb:a0:7c:6f:7f:ab:45:00:8e:1a:6d:
         ef:66:f5:5f:b1:62:3e:39:bb:7b:98:f6:f0:7d:70:72:64:18:
         23:8d:7a:88:2e:99:6d:66:66:51:c8:22:ed:ae:62:99:55:ba:
         27:9c:e0:b7:dd:ae:c7:31:dd:cf:ea:ef:d3:fb:c1:0e:b6:34:
         d7:6d:e8:cb
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUO27CM5iZP3xVM5ZHa9pF1wFj1EgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDEwMjUxNDU1MTBaFw0yNTEwMjQxNTAwMTBaMDMxMTAvBgNV
BAMTKEE0RjZDRjNFQTgxQTA2Qzc2NzFDMEVFMDc1MDZFMDExRkI4MTk5MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxY71BWEDUZy4CExPseTIL6t3X
+HwOFTMc2ZxlxGAhd5gNsZbebbeqXTHS0x0xUW43K+vGkhhPSeC8G/g4iuip4d1y
4zoMSUskK01CUpVv7ZldhYRmXtz6wuTpaXDHUAIYsqqSZqqit0yisCv52O/6Uu0I
7UKvmdFcHNasy0DonfrXWJEAiU8nYw2s/hudu9JkjnrzkZMf2njjgvcTFRwTE7al
ivTsyrX3AzCFXiAAipIwDbkaVjxS6yniChLTQQZ+tPYth/+lBCB3Kv+3PCes5BH0
6TjFQYQ+Y1bsiprF5iqzMfI4cg90rYgrAjvRKJSOasnJlrqHm3KJINE7ce57AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSk9s8+qBoGx2cc
DuB1BuAR+4GZLDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMm1R
aUZoaWhqVEJFcFpxM0VMb1k1bnh3aGROQmNMWkJYUlNuaFprQW1XU2kvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJt
UWlGaGloalRCRXBacTNFTG9ZNW54d2hkTkJjTFpCWFJTbmhaa0FtV1NpLzAvQTRG
NkNGM0VBODFBMDZDNzY3MUMwRUUwNzUwNkUwMTFGQjgxOTkyQy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLQSMMA0EAgACMAcDBQAoBDogMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQPWDANBgkqhkiG9w0BAQsFAAOCAQEAZwcaldOIv6O6NI1E
bg2p4CN1t5eIxfEa00QEHSbbXIcxRdzJLrNXqOi+5Or6wroKgbxhwxgizxx6etct
8cN1vfC+eOLYCR3nyC+ufaN2da5uh/MFrtRlncmPiOEK9VX1JmJSSLC3cYUTsfYX
SMTK6U1CCM6r7IF5xA9EAD/cYoNKQA7Y72et1H6CycGroRIopw1AILCcBSQWpYKM
hCbgqhZb9bbbaSMMgwpODI73Ol3p8g/EgVwGCr/ZGfugfG9/q0UAjhpt72b1X7Fi
Pjm7e5j28H1wcmQYI416iC6ZbWZmUcgi7a5imVW6J5zgt92uxzHdz+rv0/vBDrY0
123oyw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:06 2024 by rpki-client on console-fra.rpki-client.org