Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer
File:                     B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer (raw, json)
Hash identifier:          Kxx14+IMf2JknKzEleFMACqmXWmxbGmgQGp7RM+q5gM=
Subject key identifier:   B0:D0:F1:CE:30:A2:BC:0F:3A:DB:66:FD:82:42:75:02:58:97:5E:1D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       595ED5304A1EBFCE3DBD736303AC60294A828DC6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Nov 2024 20:10:51 +0000
Certificate not after:    Thu 20 Nov 2025 20:15:51 +0000
Subordinate resources:    AS: 266440
                          IP: 170.82.20.0/22
                          IP: 2804:37dc::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:5e:d5:30:4a:1e:bf:ce:3d:bd:73:63:03:ac:60:29:4a:82:8d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 21 20:10:51 2024 GMT
            Not After : Nov 20 20:15:51 2025 GMT
        Subject: CN=B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ba:85:30:08:49:6c:d4:ff:b6:e5:a0:78:58:
                    8c:27:b8:cb:af:88:73:d5:a4:02:b1:3a:f0:02:ac:
                    74:5f:c5:6b:0e:41:4b:3e:7c:7a:3c:d3:ef:20:bc:
                    10:e0:6c:72:41:f4:b7:44:e4:62:25:fe:bc:1b:32:
                    ef:f1:16:a0:80:d3:c9:69:d2:97:73:2d:5f:d6:12:
                    ea:70:19:c5:3a:78:4c:8a:fa:8b:e0:70:b4:5e:17:
                    33:d7:71:81:14:5c:e5:16:60:82:12:5e:8b:ff:0e:
                    f0:ea:42:e8:6f:ff:2d:ac:de:42:37:f0:22:6d:ff:
                    ea:1f:12:ca:8e:85:a5:34:21:89:6d:86:6b:55:46:
                    b9:b7:dc:6f:71:d4:f6:f7:5b:b2:24:78:83:2e:2a:
                    02:be:28:01:98:44:24:d5:8f:90:24:d7:4f:8a:a3:
                    9d:10:03:94:fe:21:0e:c0:5e:49:7d:08:6d:bd:02:
                    89:3a:7e:3d:cc:41:43:8f:09:69:cb:5a:a7:23:8a:
                    32:32:7d:65:46:0d:87:00:0f:51:49:88:77:3c:c3:
                    19:c2:63:68:35:df:e9:c0:cd:fb:54:cf:4d:f3:6e:
                    2f:82:9b:35:e8:7c:78:38:ea:a6:52:76:73:86:8e:
                    c2:04:7e:9d:8e:3d:b8:65:2f:d1:29:53:b3:43:c6:
                    66:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B0:D0:F1:CE:30:A2:BC:0F:3A:DB:66:FD:82:42:75:02:58:97:5E:1D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.20.0/22
                IPv6:
                  2804:37dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266440

    Signature Algorithm: sha256WithRSAEncryption
         58:75:d9:3d:7b:3d:e1:97:dd:b8:02:14:34:ec:fa:6a:98:87:
         19:0d:64:97:bb:df:6b:9b:67:c7:cd:48:47:3e:5b:47:bc:5f:
         97:f3:cb:3a:67:0f:44:d2:27:25:a4:00:fe:d0:7b:22:d2:1b:
         73:47:c4:9d:cc:46:ef:5e:14:7a:93:a9:1d:ba:11:25:34:01:
         bd:30:08:f9:ae:3a:6b:0b:28:de:35:a6:2c:b3:11:01:9d:4b:
         15:97:f2:cd:0d:7f:55:4f:d6:7c:46:7a:e9:a1:14:ae:4f:52:
         08:83:7b:21:45:36:4b:05:a9:b9:94:9a:8f:d0:35:7e:79:f6:
         f5:45:b7:d8:4b:c8:75:4c:39:1b:88:69:c2:2e:bf:58:cf:59:
         4e:2d:b6:12:98:54:d1:f2:25:78:fc:24:96:34:5b:15:24:f0:
         d9:01:86:eb:b6:b7:14:d9:51:89:58:38:d3:01:e4:bc:4c:d1:
         78:27:e9:51:57:17:aa:e2:90:2f:b9:28:0e:11:6b:c5:b5:1f:
         32:56:b9:cb:d2:f9:4f:7b:96:c8:f0:eb:9d:23:61:5a:e1:f0:
         bf:fe:c2:83:21:40:10:06:a3:fd:5f:51:ce:39:d1:db:c1:f4:
         8c:20:ef:87:6d:9f:c5:9c:ae:62:98:b5:75:d0:ba:c9:97:5a:
         e8:82:3a:51
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUWV7VMEoev849vXNjA6xgKUqCjcYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDExMjEyMDEwNTFaFw0yNTExMjAyMDE1NTFaMDMxMTAvBgNV
BAMTKEIwRDBGMUNFMzBBMkJDMEYzQURCNjZGRDgyNDI3NTAyNTg5NzVFMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5uoUwCEls1P+25aB4WIwnuMuv
iHPVpAKxOvACrHRfxWsOQUs+fHo80+8gvBDgbHJB9LdE5GIl/rwbMu/xFqCA08lp
0pdzLV/WEupwGcU6eEyK+ovgcLReFzPXcYEUXOUWYIISXov/DvDqQuhv/y2s3kI3
8CJt/+ofEsqOhaU0IYlthmtVRrm33G9x1Pb3W7IkeIMuKgK+KAGYRCTVj5Ak10+K
o50QA5T+IQ7AXkl9CG29Aok6fj3MQUOPCWnLWqcjijIyfWVGDYcAD1FJiHc8wxnC
Y2g13+nAzftUz03zbi+CmzXofHg46qZSdnOGjsIEfp2OPbhlL9EpU7NDxmbnAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSw0PHOMKK8Dzrb
Zv2CQnUCWJdeHTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSG9X
VGJVR1BYS1hzN1FQQ2FEY1ZYQ1hYcGhzdlRmc1pDbXBSaXVxWk1rWTQvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hv
V1RiVUdQWEtYczdRUENhRGNWWENYWHBoc3ZUZnNaQ21wUml1cVpNa1k0LzAvQjBE
MEYxQ0UzMEEyQkMwRjNBREI2NkZEODI0Mjc1MDI1ODk3NUUxRC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCqlIUMA0EAgACMAcDBQAoBDfcMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQQyDANBgkqhkiG9w0BAQsFAAOCAQEAWHXZPXs94ZfduAIU
NOz6apiHGQ1kl7vfa5tnx81IRz5bR7xfl/PLOmcPRNInJaQA/tB7ItIbc0fEncxG
714UepOpHboRJTQBvTAI+a46awso3jWmLLMRAZ1LFZfyzQ1/VU/WfEZ66aEUrk9S
CIN7IUU2SwWpuZSaj9A1fnn29UW32EvIdUw5G4hpwi6/WM9ZTi22EphU0fIlePwk
ljRbFSTw2QGG67a3FNlRiVg40wHkvEzReCfpUVcXquKQL7koDhFrxbUfMla5y9L5
T3uWyPDrnSNhWuHwv/7CgyFAEAaj/V9RzjnR28H0jCDvh22fxZyuYpi1ddC6yZda
6II6UQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:06:27 2024 by rpki-client on console-ams.rpki-client.org