Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A940AAD948DF51968F2CFC007E5775994F255968.cer
File:                     A940AAD948DF51968F2CFC007E5775994F255968.cer (raw, json)
Hash identifier:          +aeDOqRzwAiXDiagguvgOGSSQ3WEloilbC18aDQ4mqQ=
Subject key identifier:   A9:40:AA:D9:48:DF:51:96:8F:2C:FC:00:7E:57:75:99:4F:25:59:68
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2FE86BC90B1448F1CA05590280DA0D13D236F02F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Em8u3mjx6DGFMbj5nsHkYs3vkzDhuSAai1UdSxFDuAdE/1/A940AAD948DF51968F2CFC007E5775994F255968.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Em8u3mjx6DGFMbj5nsHkYs3vkzDhuSAai1UdSxFDuAdE/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 19:37:12 +0000
Certificate not after:    Thu 03 Apr 2025 19:42:12 +0000
Subordinate resources:    AS: 266402
                          IP: 170.81.104.0/22
                          IP: 2804:374c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 00:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e8:6b:c9:0b:14:48:f1:ca:05:59:02:80:da:0d:13:d2:36:f0:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 19:37:12 2024 GMT
            Not After : Apr  3 19:42:12 2025 GMT
        Subject: CN=A940AAD948DF51968F2CFC007E5775994F255968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c6:9e:ae:c3:79:98:1b:ee:ee:73:34:2e:4c:
                    df:eb:f3:3a:e8:ad:61:cd:2e:c4:6f:0b:cd:77:3e:
                    a4:b6:b0:4c:8d:da:23:53:24:72:93:33:cb:f3:f8:
                    03:61:55:41:fc:fa:51:2a:8a:8b:6c:7e:c3:29:07:
                    f9:f9:6d:17:8c:16:44:72:c5:9a:b0:13:ab:eb:d4:
                    81:72:87:fa:5c:e6:99:cc:37:33:9d:6b:c9:b5:55:
                    ce:90:17:8d:2f:be:f4:d2:03:26:91:e1:05:e3:b5:
                    b8:db:50:8d:85:82:36:f4:ac:7c:6c:4d:c9:78:fa:
                    e2:e2:43:78:40:db:d5:18:d6:60:fe:e0:8b:da:f7:
                    58:9e:dc:82:bf:2f:80:ef:00:1e:91:1d:c4:13:fd:
                    43:14:0e:73:d0:76:e3:54:77:f7:2e:29:ab:78:4d:
                    b8:13:e5:7d:3f:bc:1c:f9:37:ec:91:1d:bc:a1:0e:
                    30:81:55:1c:a0:d7:3f:2b:20:55:93:71:b7:50:62:
                    90:18:7b:47:fe:d6:79:73:0b:f4:88:db:9e:66:63:
                    60:e9:38:33:86:c4:c8:ff:6f:fd:f1:6f:59:34:1c:
                    7e:c7:e9:ae:34:78:7a:75:85:3d:fa:b3:81:55:fd:
                    e1:95:f6:20:d9:e4:57:74:ff:66:df:a0:be:cd:0b:
                    61:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A9:40:AA:D9:48:DF:51:96:8F:2C:FC:00:7E:57:75:99:4F:25:59:68
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Em8u3mjx6DGFMbj5nsHkYs3vkzDhuSAai1UdSxFDuAdE/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Em8u3mjx6DGFMbj5nsHkYs3vkzDhuSAai1UdSxFDuAdE/1/A940AAD948DF51968F2CFC007E5775994F255968.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.104.0/22
                IPv6:
                  2804:374c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266402

    Signature Algorithm: sha256WithRSAEncryption
         0f:7e:47:6a:f7:e1:d4:3a:bf:2c:62:76:64:2c:06:68:8d:e0:
         a6:0e:41:17:0a:e7:9b:cc:5d:06:89:34:fc:88:b4:2c:6c:0e:
         c5:2b:3d:68:3d:1e:bf:10:b1:67:d9:04:ff:4c:74:04:b9:28:
         8b:b4:1e:f1:ce:dc:d1:60:37:dc:6c:74:c7:7b:ae:ed:f4:91:
         a4:27:4c:af:25:82:a1:f0:7d:d4:25:4a:a3:f5:29:19:ef:bc:
         2a:26:3f:71:d7:4a:8c:78:55:9d:c5:1b:86:51:90:ae:76:dd:
         09:5e:9a:f1:2b:a7:ad:3e:38:16:37:5d:8d:84:22:4b:bc:f8:
         80:6a:06:ff:57:35:a5:68:63:96:f6:57:90:11:43:db:df:cd:
         e7:a6:d0:55:fc:e4:6f:9e:74:e4:7c:44:42:bc:3d:34:10:fc:
         de:d0:5f:83:bb:65:af:00:8e:5e:f5:71:80:25:62:76:30:dd:
         8a:30:90:35:2b:7b:f1:c7:c9:79:f3:33:03:d0:6c:b7:3f:48:
         90:ba:d9:cd:17:37:98:2a:71:21:ea:19:6d:59:4a:1e:64:f2:
         93:53:ea:0b:82:2c:e7:7e:00:d8:95:81:83:6b:37:ca:7a:f3:
         e0:21:b0:09:a1:f6:16:dd:90:20:32:56:2a:f9:cc:51:d9:35:
         59:fb:50:0e
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUL+hryQsUSPHKBVkCgNoNE9I28C8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQxOTM3MTJaFw0yNTA0MDMxOTQyMTJaMDMxMTAvBgNV
BAMTKEE5NDBBQUQ5NDhERjUxOTY4RjJDRkMwMDdFNTc3NTk5NEYyNTU5NjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyxp6uw3mYG+7uczQuTN/r8zro
rWHNLsRvC813PqS2sEyN2iNTJHKTM8vz+ANhVUH8+lEqiotsfsMpB/n5bReMFkRy
xZqwE6vr1IFyh/pc5pnMNzOda8m1Vc6QF40vvvTSAyaR4QXjtbjbUI2Fgjb0rHxs
Tcl4+uLiQ3hA29UY1mD+4Iva91ie3IK/L4DvAB6RHcQT/UMUDnPQduNUd/cuKat4
TbgT5X0/vBz5N+yRHbyhDjCBVRyg1z8rIFWTcbdQYpAYe0f+1nlzC/SI255mY2Dp
ODOGxMj/b/3xb1k0HH7H6a40eHp1hT36s4FV/eGV9iDZ5Fd0/2bfoL7NC2HXAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSpQKrZSN9Rlo8s
/AB+V3WZTyVZaDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRW04
dTNtang2REdGTWJqNW5zSGtZczN2a3pEaHVTQWFpMVVkU3hGRHVBZEUvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRW04
dTNtang2REdGTWJqNW5zSGtZczN2a3pEaHVTQWFpMVVkU3hGRHVBZEUvMS9BOTQw
QUFEOTQ4REY1MTk2OEYyQ0ZDMDA3RTU3NzU5OTRGMjU1OTY4Lm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAKqUWgwDQQCAAIwBwMFACgEN0wwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBBCiMA0GCSqGSIb3DQEBCwUAA4IBAQAPfkdq9+HUOr8sYnZk
LAZojeCmDkEXCuebzF0GiTT8iLQsbA7FKz1oPR6/ELFn2QT/THQEuSiLtB7xztzR
YDfcbHTHe67t9JGkJ0yvJYKh8H3UJUqj9SkZ77wqJj9x10qMeFWdxRuGUZCudt0J
XprxK6etPjgWN12NhCJLvPiAagb/VzWlaGOW9leQEUPb383nptBV/ORvnnTkfERC
vD00EPze0F+Du2WvAI5e9XGAJWJ2MN2KMJA1K3vxx8l58zMD0Gy3P0iQutnNFzeY
KnEh6hltWUoeZPKTU+oLgiznfgDYlYGDazfKevPgIbAJofYW3ZAgMlYq+cxR2TVZ
+1AO
-----END CERTIFICATE-----
Generated at Wed Nov 27 02:16:52 2024 by rpki-client on console-fra.rpki-client.org