Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A58717AA812972E28B6CC3B85ADD1610222992E2.cer
File:                     A58717AA812972E28B6CC3B85ADD1610222992E2.cer (raw, json)
Hash identifier:          P0FkxRQj5BhqSRj2wjenuoxXtrBwt/SR+JAp+eT3uDo=
Subject key identifier:   A5:87:17:AA:81:29:72:E2:8B:6C:C3:B8:5A:DD:16:10:22:29:92:E2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3B7A5FCB01D55B119968A95789C37EE3B37C96AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/1/A58717AA812972E28B6CC3B85ADD1610222992E2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 00:04:42 +0000
Certificate not after:    Thu 03 Apr 2025 00:09:42 +0000
Subordinate resources:    AS: 268929
                          IP: 45.176.40.0/22
                          IP: 2804:5cc4::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 21:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:7a:5f:cb:01:d5:5b:11:99:68:a9:57:89:c3:7e:e3:b3:7c:96:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 00:04:42 2024 GMT
            Not After : Apr  3 00:09:42 2025 GMT
        Subject: CN=A58717AA812972E28B6CC3B85ADD1610222992E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c2:e7:d5:84:a1:89:3e:6e:b6:6b:d3:8f:26:
                    46:bc:4f:3a:b6:72:4a:cf:c5:f1:02:2b:ee:a5:f7:
                    8a:b7:9e:09:e4:82:69:db:d3:7d:71:cb:94:a2:4f:
                    39:ef:43:64:0e:b9:89:d4:5d:55:a3:49:32:92:5c:
                    20:3d:8d:0f:21:39:e4:07:26:b7:b0:af:f7:20:18:
                    39:b7:86:af:55:51:a3:bd:11:fe:06:73:5a:e6:a2:
                    db:09:7c:da:85:e2:5b:56:cd:fd:dc:6e:f4:5a:61:
                    36:ca:45:17:a8:ba:46:3a:a6:60:77:80:88:6c:0b:
                    0e:be:e8:84:e2:28:fc:98:db:ec:9e:53:28:a4:1e:
                    9c:88:ba:32:82:d6:e2:35:3e:84:60:a3:8e:42:0c:
                    37:1e:af:ce:50:06:e8:f5:ca:89:28:28:6c:14:d0:
                    80:f2:5b:c8:cb:82:88:20:a7:41:69:88:62:62:99:
                    a6:4f:19:1f:a6:e2:41:1b:61:9a:2f:2c:50:65:82:
                    36:8e:74:df:4b:4f:f8:12:f7:89:4e:da:1d:d9:58:
                    d5:b4:0c:a2:c2:bf:a5:5e:8e:82:3d:6a:0d:b0:8a:
                    4b:ff:b2:ec:f9:fe:4a:6e:85:1a:95:b9:26:a1:76:
                    d1:56:36:d8:86:70:f5:99:9a:aa:91:e5:bf:f8:26:
                    0a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A5:87:17:AA:81:29:72:E2:8B:6C:C3:B8:5A:DD:16:10:22:29:92:E2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/1/A58717AA812972E28B6CC3B85ADD1610222992E2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.40.0/22
                IPv6:
                  2804:5cc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268929

    Signature Algorithm: sha256WithRSAEncryption
         08:7c:4b:c6:30:f4:c2:f1:e9:4d:f0:e3:27:8d:53:7a:3a:db:
         38:46:47:88:d6:e6:fb:f9:6a:39:09:c5:ac:30:99:a3:24:13:
         25:87:17:41:a9:eb:20:b5:b9:8d:9a:0e:51:1c:32:08:49:04:
         72:a7:bc:ad:cf:df:7a:49:21:de:e6:41:92:a9:7b:32:87:6a:
         0d:2a:68:63:40:ee:49:33:43:13:43:c0:d3:93:33:88:2d:1d:
         63:a5:77:5b:a4:60:1c:cf:02:ae:ef:48:dd:78:3f:43:5c:2c:
         a1:a5:b4:c2:9a:bc:b3:66:9a:2b:f9:f0:c7:ef:c6:64:04:98:
         40:e5:96:cb:43:18:cb:8f:d8:a0:64:6f:69:91:6e:7d:94:07:
         25:cb:2d:ec:6e:ef:71:a2:63:53:28:99:0f:5e:71:c5:3b:70:
         ea:ab:59:9b:9b:0a:32:0a:d5:e5:aa:6e:b0:e0:7d:33:13:d1:
         84:25:c4:d5:13:b7:18:4d:cf:6d:4e:d8:18:b7:d5:98:28:fb:
         1f:ca:ab:1a:ba:b5:3e:7e:3e:27:3e:a3:1d:6d:44:47:06:93:
         c0:bc:a7:96:cf:e6:10:cd:99:13:04:95:a3:ac:c0:6d:76:8e:
         d6:da:53:b0:57:6d:49:ba:e2:b1:42:34:b9:ef:86:4e:95:a1:
         ee:ee:85:e1
-----BEGIN CERTIFICATE-----
MIIGLjCCBRagAwIBAgIUO3pfywHVWxGZaKlXicN+47N8lqowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwMDA0NDJaFw0yNTA0MDMwMDA5NDJaMDMxMTAvBgNV
BAMTKEE1ODcxN0FBODEyOTcyRTI4QjZDQzNCODVBREQxNjEwMjIyOTkyRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFwufVhKGJPm62a9OPJka8Tzq2
ckrPxfECK+6l94q3ngnkgmnb031xy5SiTznvQ2QOuYnUXVWjSTKSXCA9jQ8hOeQH
Jrewr/cgGDm3hq9VUaO9Ef4Gc1rmotsJfNqF4ltWzf3cbvRaYTbKRReoukY6pmB3
gIhsCw6+6ITiKPyY2+yeUyikHpyIujKC1uI1PoRgo45CDDcer85QBuj1yokoKGwU
0IDyW8jLgoggp0FpiGJimaZPGR+m4kEbYZovLFBlgjaOdN9LT/gS94lO2h3ZWNW0
DKLCv6VejoI9ag2wikv/suz5/kpuhRqVuSahdtFWNtiGcPWZmqqR5b/4Jgr3AgMB
AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSlhxeqgSly4ots
w7ha3RYQIimS4jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vS0s1
WGtuV29Xc2RyVmVpd0NaR3ppbkZxNkJOVzF2S05Ga29TOW5vWk1kaC8xLzCBiQYI
KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vS0s1
WGtuV29Xc2RyVmVpd0NaR3ppbkZxNkJOVzF2S05Ga29TOW5vWk1kaC8xL0E1ODcx
N0FBODEyOTcyRTI4QjZDQzNCODVBREQxNjEwMjIyOTkyRTIubWZ0MD8GCCsGAQUF
BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh
dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB
/wQfMB0wDAQCAAEwBgMEAi2wKDANBAIAAjAHAwUAKARcxDAaBggrBgEFBQcBCAEB
/wQLMAmgBzAFAgMEGoEwDQYJKoZIhvcNAQELBQADggEBAAh8S8Yw9MLx6U3w4yeN
U3o62zhGR4jW5vv5ajkJxawwmaMkEyWHF0Gp6yC1uY2aDlEcMghJBHKnvK3P33pJ
Id7mQZKpezKHag0qaGNA7kkzQxNDwNOTM4gtHWOld1ukYBzPAq7vSN14P0NcLKGl
tMKavLNmmiv58MfvxmQEmEDllstDGMuP2KBkb2mRbn2UByXLLexu73GiY1MomQ9e
ccU7cOqrWZubCjIK1eWqbrDgfTMT0YQlxNUTtxhNz21O2Bi31Zgo+x/Kqxq6tT5+
Pic+ox1tREcGk8C8p5bP5hDNmRMElaOswG12jtbaU7BXbUm64rFCNLnvhk6Voe7u
heE=
-----END CERTIFICATE-----
Generated at Sat Sep 28 20:51:53 2024 by rpki-client on console-fra.rpki-client.org