Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AA75E9D7C14B8290B067D83EABF023C9B420FB66.cer
File:                     AA75E9D7C14B8290B067D83EABF023C9B420FB66.cer (raw, json)
Hash identifier:          gY8bXAT+OulGD0fDSkV4gCIq3iuVirYzRbNe3d2tGlo=
Subject key identifier:   AA:75:E9:D7:C1:4B:82:90:B0:67:D8:3E:AB:F0:23:C9:B4:20:FB:66
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       67B97CBC846389AE820E21CE4C003D8986CC8AB3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/1/AA75E9D7C14B8290B067D83EABF023C9B420FB66.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 07:31:16 +0000
Certificate not after:    Thu 03 Apr 2025 07:36:16 +0000
Subordinate resources:    AS: 262317
                          IP: 177.91.120.0/21
                          IP: 177.124.64.0/21
                          IP: 2804:bac::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:b9:7c:bc:84:63:89:ae:82:0e:21:ce:4c:00:3d:89:86:cc:8a:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 07:31:16 2024 GMT
            Not After : Apr  3 07:36:16 2025 GMT
        Subject: CN=AA75E9D7C14B8290B067D83EABF023C9B420FB66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c6:ef:d5:99:ce:ac:7e:65:58:4b:b2:19:1d:
                    03:20:c4:4b:f6:04:e3:14:4d:f4:fa:1c:31:38:4d:
                    2e:02:52:6d:cc:35:fd:c4:26:67:8b:ce:6b:f1:49:
                    25:a1:6a:fd:11:79:45:64:d5:19:05:c4:7c:ba:a9:
                    d3:32:2c:1d:cb:b3:c6:63:6d:f4:ab:32:a0:7d:b0:
                    6b:f8:07:0b:61:b5:90:ac:ff:b8:3d:97:a6:1e:c0:
                    81:6d:2c:01:74:c8:69:ed:5c:c4:ce:3e:a7:51:8f:
                    79:9d:27:dc:f6:2a:d7:f6:20:73:19:37:41:96:a4:
                    bf:45:d5:95:c8:4a:7d:35:fa:96:00:a2:76:54:57:
                    3b:bc:3c:1b:6e:36:c3:dc:9d:44:ec:6f:91:d1:30:
                    a6:40:f1:f7:c7:5e:2c:21:37:19:1d:dd:da:bb:5e:
                    80:03:ca:8a:9e:c9:5c:de:f4:61:79:7c:9a:46:51:
                    70:01:aa:f4:2d:6b:b1:84:b1:18:6a:40:3d:37:f2:
                    e2:41:6c:3d:c8:64:dc:62:93:47:f8:9d:80:b6:64:
                    0e:4e:ed:2c:26:da:d4:1e:0b:20:cc:c0:02:0f:82:
                    ec:fe:61:3b:b7:4a:a3:14:69:8f:af:8b:63:15:a9:
                    fa:2b:fb:11:5c:be:89:14:da:c7:3a:8c:15:75:fe:
                    a1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AA:75:E9:D7:C1:4B:82:90:B0:67:D8:3E:AB:F0:23:C9:B4:20:FB:66
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/1/AA75E9D7C14B8290B067D83EABF023C9B420FB66.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.120.0/21
                  177.124.64.0/21
                IPv6:
                  2804:bac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262317

    Signature Algorithm: sha256WithRSAEncryption
         6e:56:99:d3:e3:98:7d:bc:e3:24:b6:f4:ef:70:a5:f1:79:89:
         fa:7b:99:75:55:e7:9a:96:08:cc:96:4e:2f:2f:d8:97:22:2b:
         4b:a0:f4:fc:06:79:27:81:fc:c6:d9:88:f4:ef:41:66:ac:af:
         1d:e9:35:01:2e:48:41:48:7d:68:e2:28:9b:ef:68:cd:d9:c8:
         67:f8:e5:d8:d7:da:bc:16:a4:6b:37:ac:57:81:25:ca:3f:10:
         4b:14:8d:10:49:da:c2:2d:93:b3:80:e4:b0:d0:d3:59:57:ff:
         f8:1f:88:b6:9e:6b:56:c4:92:d3:70:31:91:a5:8c:af:5c:1a:
         50:be:9b:8d:84:0e:1f:78:52:c8:4c:e8:d4:f4:55:d1:ee:33:
         be:38:7f:d3:a8:71:1c:55:a2:cd:84:45:82:49:a8:dc:ec:ad:
         77:f6:03:45:90:7b:34:5f:5f:27:39:74:47:99:82:7f:f9:f5:
         6e:30:c0:2f:71:d5:ee:aa:e6:ba:7c:58:17:3b:7d:c6:f0:31:
         ff:f3:89:93:10:2d:38:63:39:ca:07:b5:f6:49:83:c3:08:79:
         24:cc:f6:ed:a2:5d:da:a4:45:69:28:8b:de:8e:57:76:b7:34:
         81:8e:4b:30:ff:61:52:5d:18:70:3b:5b:33:7e:7d:ff:27:d0:
         5b:00:4f:0b
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUZ7l8vIRjia6CDiHOTAA9iYbMirMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwNzMxMTZaFw0yNTA0MDMwNzM2MTZaMDMxMTAvBgNV
BAMTKEFBNzVFOUQ3QzE0QjgyOTBCMDY3RDgzRUFCRjAyM0M5QjQyMEZCNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPxu/Vmc6sfmVYS7IZHQMgxEv2
BOMUTfT6HDE4TS4CUm3MNf3EJmeLzmvxSSWhav0ReUVk1RkFxHy6qdMyLB3Ls8Zj
bfSrMqB9sGv4BwthtZCs/7g9l6YewIFtLAF0yGntXMTOPqdRj3mdJ9z2Ktf2IHMZ
N0GWpL9F1ZXISn01+pYAonZUVzu8PBtuNsPcnUTsb5HRMKZA8ffHXiwhNxkd3dq7
XoADyoqeyVze9GF5fJpGUXABqvQta7GEsRhqQD038uJBbD3IZNxik0f4nYC2ZA5O
7Swm2tQeCyDMwAIPguz+YTu3SqMUaY+vi2MVqfor+xFcvokU2sc6jBV1/qHzAgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSqdenXwUuCkLBn
2D6r8CPJtCD7ZjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNG5z
M0VYWFl6enhvZzl3Q01NcmFGc1N4MmVDZU1KcjVWTWJyR1ZuUHlMb0IvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRu
czNFWFhZenp4b2c5d0NNTXJhRnNTeDJlQ2VNSnI1Vk1ickdWblB5TG9CLzEvQUE3
NUU5RDdDMTRCODI5MEIwNjdEODNFQUJGMDIzQzlCNDIwRkI2Ni5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQDsVt4AwQDsXxAMA0EAgACMAcDBQAoBAusMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwQArTANBgkqhkiG9w0BAQsFAAOCAQEAblaZ0+OY
fbzjJLb073Cl8XmJ+nuZdVXnmpYIzJZOLy/YlyIrS6D0/AZ5J4H8xtmI9O9BZqyv
Hek1AS5IQUh9aOIom+9ozdnIZ/jl2NfavBakazesV4Elyj8QSxSNEEnawi2Ts4Dk
sNDTWVf/+B+Itp5rVsSS03AxkaWMr1waUL6bjYQOH3hSyEzo1PRV0e4zvjh/06hx
HFWizYRFgkmo3Oytd/YDRZB7NF9fJzl0R5mCf/n1bjDAL3HV7qrmunxYFzt9xvAx
//OJkxAtOGM5yge19kmDwwh5JMz27aJd2qRFaSiL3o5Xdrc0gY5LMP9hUl0YcDtb
M359/yfQWwBPCw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:47 2024 by rpki-client on console-fra.rpki-client.org