Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A91ED5B815CB75A0C7C33DDC1F1EA91FC3E2F1BE.cer
File:                     A91ED5B815CB75A0C7C33DDC1F1EA91FC3E2F1BE.cer (raw, json)
Hash identifier:          BugCFU686ka3GD1ehEHoRVE3B5GD5Qva+ys9I0wnT+Q=
Subject key identifier:   A9:1E:D5:B8:15:CB:75:A0:C7:C3:3D:DC:1F:1E:A9:1F:C3:E2:F1:BE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0D661C1563E9A642CAD32919EDFF463C5AB7B9F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FU6W7MBUzj4yLjvMdjJuUAtNRxFdb8VZaAjyYCDSToB2/1/A91ED5B815CB75A0C7C33DDC1F1EA91FC3E2F1BE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FU6W7MBUzj4yLjvMdjJuUAtNRxFdb8VZaAjyYCDSToB2/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 22:59:36 +0000
Certificate not after:    Wed 02 Apr 2025 23:04:36 +0000
Subordinate resources:    AS: 272631
                          IP: 2804:8640::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:66:1c:15:63:e9:a6:42:ca:d3:29:19:ed:ff:46:3c:5a:b7:b9:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 22:59:36 2024 GMT
            Not After : Apr  2 23:04:36 2025 GMT
        Subject: CN=A91ED5B815CB75A0C7C33DDC1F1EA91FC3E2F1BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ea:dd:04:b2:20:b3:97:08:e7:60:e3:3c:8f:
                    84:81:08:10:60:fb:01:95:22:a5:14:8b:7b:15:49:
                    5e:2d:ec:c1:47:6b:e4:97:8b:33:cd:a9:3a:7b:65:
                    8b:6d:22:79:6c:52:61:ad:c8:0b:c6:14:dd:2f:9f:
                    54:1b:c7:25:0c:a0:a1:fe:50:32:fd:a6:63:76:34:
                    ef:47:55:5f:07:29:36:69:f9:c4:04:03:ed:5d:cf:
                    f8:53:80:60:35:e8:88:66:69:53:a1:74:0d:92:7e:
                    b6:8a:f1:41:ca:fc:ac:15:9d:53:69:75:d6:fe:4c:
                    98:56:18:5b:b0:68:65:52:4d:e0:ca:f0:ae:43:c0:
                    8b:49:d9:03:1b:ba:20:1d:38:0f:b1:e4:f0:0d:f6:
                    b2:b1:0c:a2:7f:a9:03:68:44:17:26:1a:b7:07:73:
                    f9:f7:03:2a:e5:51:04:1e:02:e7:e3:5c:2d:88:63:
                    36:cf:74:20:a3:cc:d1:2d:cd:a9:79:68:2b:84:9f:
                    28:3d:31:30:c2:53:fb:52:91:9d:09:a0:77:10:e1:
                    87:d5:40:8e:0c:92:5b:8c:a6:00:78:b9:e7:e3:f4:
                    8b:7d:f9:d0:40:21:ab:ad:f9:d7:fc:d3:98:93:eb:
                    2d:de:98:9a:0e:ef:33:32:73:c7:e9:63:67:f2:87:
                    08:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A9:1E:D5:B8:15:CB:75:A0:C7:C3:3D:DC:1F:1E:A9:1F:C3:E2:F1:BE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FU6W7MBUzj4yLjvMdjJuUAtNRxFdb8VZaAjyYCDSToB2/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FU6W7MBUzj4yLjvMdjJuUAtNRxFdb8VZaAjyYCDSToB2/1/A91ED5B815CB75A0C7C33DDC1F1EA91FC3E2F1BE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8640::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272631

    Signature Algorithm: sha256WithRSAEncryption
         cd:04:56:b4:a1:9a:75:a4:b7:73:22:11:a4:72:d5:3a:c2:07:
         91:70:44:8e:74:83:39:b9:44:6e:fb:72:b0:a5:e6:8d:50:49:
         73:d2:64:19:12:71:09:d7:4a:ee:24:b4:0f:41:31:6e:06:3d:
         a1:4e:0b:fc:c9:ce:7c:a3:34:3c:49:52:0c:5d:8d:ee:f7:5b:
         ad:1b:11:30:4d:d9:0b:ed:1a:b8:08:8a:82:3d:6e:5d:c3:9c:
         0a:41:1f:f1:85:28:88:7f:77:71:7a:c2:a8:55:e6:78:07:2f:
         d7:c7:61:47:1e:dd:5c:13:7c:23:4b:8f:5e:14:7f:a9:22:1a:
         cf:06:e0:cc:63:87:46:20:d3:24:bd:23:c7:e1:88:12:1a:0b:
         af:63:6c:06:79:ba:af:63:cf:7b:30:df:8b:1c:f3:b4:b3:b5:
         9b:6d:d5:41:9e:73:c6:56:5a:39:b0:db:30:d6:f9:65:d5:d1:
         87:b0:c0:12:3a:75:30:c1:42:15:18:ed:ad:e0:26:9d:42:a2:
         a2:76:0f:80:d3:50:c0:9d:41:1d:77:85:13:11:53:1d:35:f0:
         db:20:f5:19:28:83:79:ae:ce:9d:a7:4c:8a:3e:37:c3:25:25:
         5f:61:1b:d3:72:f8:bc:19:22:e4:9a:23:c7:e2:bf:c2:54:47:
         96:b2:47:fd
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgIUDWYcFWPppkLK0ykZ7f9GPFq3ufAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMyMjU5MzZaFw0yNTA0MDIyMzA0MzZaMDMxMTAvBgNV
BAMTKEE5MUVENUI4MTVDQjc1QTBDN0MzM0REQzFGMUVBOTFGQzNFMkYxQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC46t0EsiCzlwjnYOM8j4SBCBBg
+wGVIqUUi3sVSV4t7MFHa+SXizPNqTp7ZYttInlsUmGtyAvGFN0vn1QbxyUMoKH+
UDL9pmN2NO9HVV8HKTZp+cQEA+1dz/hTgGA16IhmaVOhdA2SfraK8UHK/KwVnVNp
ddb+TJhWGFuwaGVSTeDK8K5DwItJ2QMbuiAdOA+x5PAN9rKxDKJ/qQNoRBcmGrcH
c/n3AyrlUQQeAufjXC2IYzbPdCCjzNEtzal5aCuEnyg9MTDCU/tSkZ0JoHcQ4YfV
QI4MkluMpgB4uefj9It9+dBAIaut+df805iT6y3emJoO7zMyc8fpY2fyhwh7AgMB
AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSpHtW4Fct1oMfD
PdwfHqkfw+LxvjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRlU2
VzdNQlV6ajR5TGp2TWRqSnVVQXROUnhGZGI4VlphQWp5WUNEU1RvQjIvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZV
Nlc3TUJVemo0eUxqdk1kakp1VUF0TlJ4RmRiOFZaYUFqeVlDRFNUb0IyLzEvQTkx
RUQ1QjgxNUNCNzVBMEM3QzMzRERDMUYxRUE5MUZDM0UyRjFCRS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASGQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME
KPcwDQYJKoZIhvcNAQELBQADggEBAM0EVrShmnWkt3MiEaRy1TrCB5FwRI50gzm5
RG77crCl5o1QSXPSZBkScQnXSu4ktA9BMW4GPaFOC/zJznyjNDxJUgxdje73W60b
ETBN2QvtGrgIioI9bl3DnApBH/GFKIh/d3F6wqhV5ngHL9fHYUce3VwTfCNLj14U
f6kiGs8G4Mxjh0Yg0yS9I8fhiBIaC69jbAZ5uq9jz3sw34sc87SztZtt1UGec8ZW
Wjmw2zDW+WXV0YewwBI6dTDBQhUY7a3gJp1CoqJ2D4DTUMCdQR13hRMRUx018Nsg
9Rkog3muzp2nTIo+N8MlJV9hG9Ny+LwZIuSaI8fiv8JUR5ayR/0=
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:51 2024 by rpki-client on console-fra.rpki-client.org