Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AE5E9FFAE587AF4B85747FA1350EE91C3D555DB6.cer
File:                     AE5E9FFAE587AF4B85747FA1350EE91C3D555DB6.cer (raw, json)
Hash identifier:          yNTnBMZ/WJlUCCWKdnIwZIc9YbJsTj1I+Q5hb01SJbw=
Subject key identifier:   AE:5E:9F:FA:E5:87:AF:4B:85:74:7F:A1:35:0E:E9:1C:3D:55:5D:B6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4AE44137539A5846036035CE5056E21754A8925F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/0/AE5E9FFAE587AF4B85747FA1350EE91C3D555DB6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 Jul 2024 19:43:32 +0000
Certificate not after:    Tue 29 Jul 2025 19:48:32 +0000
Subordinate resources:    AS: 266105
                          IP: 45.5.196.0/22
                          IP: 2804:3ab8::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e4:41:37:53:9a:58:46:03:60:35:ce:50:56:e2:17:54:a8:92:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 30 19:43:32 2024 GMT
            Not After : Jul 29 19:48:32 2025 GMT
        Subject: CN=AE5E9FFAE587AF4B85747FA1350EE91C3D555DB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:33:ae:15:4a:5d:31:2d:ee:c9:02:f5:0c:6a:
                    47:eb:d9:84:27:43:2e:9f:e3:37:0b:1b:51:a3:57:
                    24:8f:f1:6d:34:7d:0a:cc:7c:a5:49:36:74:f0:4d:
                    c9:a3:e9:88:cb:2e:fe:06:d9:1a:05:67:f3:87:af:
                    dd:fb:46:81:32:d9:8a:27:c7:6e:1d:48:35:78:21:
                    7c:6c:9d:88:89:39:85:67:34:0f:36:3d:86:7d:b2:
                    f0:10:7c:51:b1:56:35:13:bd:e0:a5:26:bc:8f:c9:
                    cc:69:4b:77:4f:37:6b:62:76:c3:2e:d3:17:65:3f:
                    0b:f4:df:2f:13:c0:91:e5:52:71:a8:6f:58:97:25:
                    5f:b9:ad:39:8a:e7:92:3d:3c:a2:56:c3:24:57:8b:
                    ef:2d:8a:b1:d7:be:c2:33:e3:e4:34:e1:12:2d:3e:
                    7b:23:b3:b9:1c:d3:5a:a5:e3:88:ff:15:13:22:92:
                    38:ff:18:51:ec:21:a2:ec:a5:95:f6:5e:79:db:df:
                    25:b7:96:6d:04:fe:94:7e:4c:6c:d1:38:86:eb:e2:
                    84:04:b8:96:6d:67:81:5a:dd:5d:7e:eb:a6:76:b5:
                    32:da:f0:97:c3:74:b8:76:11:32:9f:be:7e:e0:b2:
                    ed:d6:ba:5d:df:0e:a4:50:81:97:f5:c1:09:72:67:
                    e7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AE:5E:9F:FA:E5:87:AF:4B:85:74:7F:A1:35:0E:E9:1C:3D:55:5D:B6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/0/AE5E9FFAE587AF4B85747FA1350EE91C3D555DB6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.196.0/22
                IPv6:
                  2804:3ab8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266105

    Signature Algorithm: sha256WithRSAEncryption
         28:87:3b:f9:8e:16:f9:d6:a0:13:74:a4:ae:4d:14:5e:ad:0d:
         02:be:fc:10:cd:e7:1c:c4:24:1c:ba:3b:e7:ef:5a:60:0d:37:
         92:76:20:4c:b2:78:72:b1:fb:56:32:04:b3:ac:a2:e8:a6:56:
         79:57:b4:1f:51:b1:c7:e9:a7:40:5f:ab:2d:69:12:6c:05:bb:
         fd:d0:4f:28:a8:75:da:4f:54:f3:79:46:93:c2:ce:f9:39:93:
         17:25:4e:fc:65:ca:21:04:7f:c3:24:23:54:c6:52:ee:44:9d:
         f6:12:23:44:28:a0:93:db:e3:2f:02:97:0c:fc:25:30:53:5b:
         c4:a0:eb:ba:cf:62:8a:af:22:57:9e:8d:cc:88:0c:df:3e:15:
         07:f6:45:3a:f4:59:9a:54:01:b4:ae:da:69:35:4b:20:85:88:
         72:88:cf:ee:87:ce:73:32:09:87:2e:10:d2:64:65:18:61:8f:
         ce:08:4b:f3:9c:9b:86:e1:68:2a:85:9d:86:06:09:b0:69:b4:
         06:9e:df:12:a7:9a:de:ae:ff:3f:96:3f:6e:e3:fa:37:14:8f:
         ca:c4:ec:82:02:8b:2f:51:23:aa:9e:40:4c:b3:a3:8b:a2:50:
         1b:38:bb:ec:7b:cc:7e:34:95:58:1c:e6:d0:dc:dd:8a:bb:e2:
         e6:2e:62:4b
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUSuRBN1OaWEYDYDXOUFbiF1Sokl8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA3MzAxOTQzMzJaFw0yNTA3MjkxOTQ4MzJaMDMxMTAvBgNV
BAMTKEFFNUU5RkZBRTU4N0FGNEI4NTc0N0ZBMTM1MEVFOTFDM0Q1NTVEQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFM64VSl0xLe7JAvUMakfr2YQn
Qy6f4zcLG1GjVySP8W00fQrMfKVJNnTwTcmj6YjLLv4G2RoFZ/OHr937RoEy2Yon
x24dSDV4IXxsnYiJOYVnNA82PYZ9svAQfFGxVjUTveClJryPycxpS3dPN2tidsMu
0xdlPwv03y8TwJHlUnGob1iXJV+5rTmK55I9PKJWwyRXi+8tirHXvsIz4+Q04RIt
Pnsjs7kc01ql44j/FRMikjj/GFHsIaLspZX2Xnnb3yW3lm0E/pR+TGzROIbr4oQE
uJZtZ4Fa3V1+66Z2tTLa8JfDdLh2ETKfvn7gsu3Wul3fDqRQgZf1wQlyZ+efAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSuXp/65YevS4V0
f6E1DukcPVVdtjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRlJR
clludDdMYlRvOWlqeE1RN2hWUUw2eGtDeTlkRDdxQXJRMUJKMU43NmQvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZS
UXJZbnQ3TGJUbzlpanhNUTdoVlFMNnhrQ3k5ZEQ3cUFyUTFCSjFONzZkLzAvQUU1
RTlGRkFFNTg3QUY0Qjg1NzQ3RkExMzUwRUU5MUMzRDU1NURCNi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLQXEMA0EAgACMAcDBQAoBDq4MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQPeTANBgkqhkiG9w0BAQsFAAOCAQEAKIc7+Y4W+dagE3Sk
rk0UXq0NAr78EM3nHMQkHLo75+9aYA03knYgTLJ4crH7VjIEs6yi6KZWeVe0H1Gx
x+mnQF+rLWkSbAW7/dBPKKh12k9U83lGk8LO+TmTFyVO/GXKIQR/wyQjVMZS7kSd
9hIjRCigk9vjLwKXDPwlMFNbxKDrus9iiq8iV56NzIgM3z4VB/ZFOvRZmlQBtK7a
aTVLIIWIcojP7ofOczIJhy4Q0mRlGGGPzghL85ybhuFoKoWdhgYJsGm0Bp7fEqea
3q7/P5Y/buP6NxSPysTsggKLL1Ejqp5ATLOji6JQGzi77HvMfjSVWBzm0Nzdirvi
5i5iSw==
-----END CERTIFICATE-----
Generated at Sat Sep 28 02:15:13 2024 by rpki-client on console-fra.rpki-client.org