Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.cer
File:                     B48A181C2DC4482EF44411B66EBF4E215BD86B5F.cer (raw, json)
Hash identifier:          9+GjcNsQjraSpgCL3/7nnlZaIoniHcDeS4gZMwdkas8=
Subject key identifier:   B4:8A:18:1C:2D:C4:48:2E:F4:44:11:B6:6E:BF:4E:21:5B:D8:6B:5F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2B235302A7F115C417493793E52BC7CBBABF1265
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 07:44:45 +0000
Certificate not after:    Thu 03 Apr 2025 07:49:45 +0000
Subordinate resources:    AS: 264270
                          IP: 45.234.24.0/22
                          IP: 138.118.244.0/22
                          IP: 170.84.236.0/22
                          IP: 189.36.248.0/22
                          IP: 2804:2548::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 03:32:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:23:53:02:a7:f1:15:c4:17:49:37:93:e5:2b:c7:cb:ba:bf:12:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 07:44:45 2024 GMT
            Not After : Apr  3 07:49:45 2025 GMT
        Subject: CN=B48A181C2DC4482EF44411B66EBF4E215BD86B5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5c:73:d5:cf:a8:da:ef:d1:9c:03:d5:2b:16:
                    c9:95:d3:46:bf:52:ee:26:06:85:cc:61:d5:ed:49:
                    5d:13:bf:fe:67:d2:d6:3f:17:d7:a1:04:81:29:7f:
                    11:5f:ad:52:93:c4:bf:23:ef:93:8d:cf:cb:fb:c5:
                    39:b1:3c:ba:61:61:ac:f6:3a:09:24:e7:4d:0e:f4:
                    53:8d:ef:c0:90:f6:c7:c7:cc:2e:b8:2f:fa:82:a5:
                    ac:56:1f:cb:0c:46:55:bc:dd:de:19:fb:4a:a9:23:
                    fb:d0:79:8f:4d:1a:12:55:0f:df:9d:f7:84:65:28:
                    26:f5:18:de:4a:93:15:d9:43:9b:4d:45:12:19:0e:
                    63:ec:15:e6:57:4e:61:98:1c:14:a6:66:4d:a5:3e:
                    69:54:13:f9:8c:cb:62:15:26:a4:ff:0c:5d:e4:22:
                    ca:d4:d0:6d:b7:74:08:a7:6d:83:50:8f:3e:4b:b4:
                    05:6f:bc:cd:9f:59:54:4a:c3:9a:2d:11:ff:c9:f6:
                    d3:e1:31:57:08:db:52:df:f6:9e:37:a0:ac:fd:52:
                    70:bf:36:a9:4f:87:89:72:9f:c4:84:9a:33:82:11:
                    d2:25:e5:d1:0c:e0:3b:27:0a:4c:0f:b1:81:b3:d2:
                    f0:77:d1:de:bb:2b:93:f5:ce:7b:57:9d:e9:60:9b:
                    aa:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:8A:18:1C:2D:C4:48:2E:F4:44:11:B6:6E:BF:4E:21:5B:D8:6B:5F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.24.0/22
                  138.118.244.0/22
                  170.84.236.0/22
                  189.36.248.0/22
                IPv6:
                  2804:2548::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264270

    Signature Algorithm: sha256WithRSAEncryption
         6b:e4:fc:d7:61:90:4c:ce:b2:d0:7d:e4:4a:65:aa:7e:2c:27:
         67:43:1c:72:f6:59:72:2f:f8:dc:0f:1a:fb:4b:91:ca:78:f8:
         01:1a:40:69:be:13:e0:2d:d9:2b:73:00:07:f5:4a:cd:4e:fb:
         f2:a9:31:21:89:d9:ea:45:c6:24:c6:62:b6:58:73:94:6b:14:
         1c:98:3f:5c:d3:c4:0f:b1:9b:39:03:2f:52:2e:3f:0e:32:9f:
         cb:90:e4:cd:44:8c:b6:9c:72:d6:85:68:81:16:31:8b:03:02:
         3a:33:58:bc:0b:4d:a2:d1:03:24:23:d2:48:17:c9:1c:b3:30:
         09:a4:58:2a:e9:91:26:32:53:69:ae:a0:1b:09:fc:3d:68:4a:
         71:e2:58:58:45:a0:78:c3:e4:e4:57:92:d7:17:34:99:36:63:
         06:f7:a9:20:5c:73:08:97:ad:5f:01:a7:21:dc:29:90:5b:74:
         cc:34:00:00:a7:0a:6f:08:9f:76:2c:17:77:1e:34:37:fc:15:
         13:c9:4a:27:c4:a3:f5:7a:09:28:22:14:e0:dc:e0:85:c7:2b:
         e4:75:1c:05:48:7f:19:2e:f1:f4:6f:64:4e:6c:2c:03:32:2b:
         2d:af:99:75:45:de:9c:77:3e:40:a3:1b:97:df:75:aa:48:d7:
         3e:c6:65:8e
-----BEGIN CERTIFICATE-----
MIIGQTCCBSmgAwIBAgIUKyNTAqfxFcQXSTeT5SvHy7q/EmUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwNzQ0NDVaFw0yNTA0MDMwNzQ5NDVaMDMxMTAvBgNV
BAMTKEI0OEExODFDMkRDNDQ4MkVGNDQ0MTFCNjZFQkY0RTIxNUJEODZCNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBXHPVz6ja79GcA9UrFsmV00a/
Uu4mBoXMYdXtSV0Tv/5n0tY/F9ehBIEpfxFfrVKTxL8j75ONz8v7xTmxPLphYaz2
Ogkk500O9FON78CQ9sfHzC64L/qCpaxWH8sMRlW83d4Z+0qpI/vQeY9NGhJVD9+d
94RlKCb1GN5KkxXZQ5tNRRIZDmPsFeZXTmGYHBSmZk2lPmlUE/mMy2IVJqT/DF3k
IsrU0G23dAinbYNQjz5LtAVvvM2fWVRKw5otEf/J9tPhMVcI21Lf9p43oKz9UnC/
NqlPh4lyn8SEmjOCEdIl5dEM4DsnCkwPsYGz0vB30d67K5P1zntXnelgm6rJAgMB
AAGjggNLMIIDRzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS0ihgcLcRILvRE
EbZuv04hW9hrXzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOFVC
b3lhVllOaWR6NVVKa1Bwc016VXd5cTdCdVZMelZXRDJnU3BWRzRRbTYvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOFVC
b3lhVllOaWR6NVVKa1Bwc016VXd5cTdCdVZMelZXRDJnU3BWRzRRbTYvMS9CNDhB
MTgxQzJEQzQ0ODJFRjQ0NDExQjY2RUJGNEUyMTVCRDg2QjVGLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUHAQcB
Af8EMTAvMB4EAgABMBgDBAIt6hgDBAKKdvQDBAKqVOwDBAK9JPgwDQQCAAIwBwMF
ACgEJUgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAhOMA0GCSqGSIb3DQEBCwUA
A4IBAQBr5PzXYZBMzrLQfeRKZap+LCdnQxxy9llyL/jcDxr7S5HKePgBGkBpvhPg
LdkrcwAH9UrNTvvyqTEhidnqRcYkxmK2WHOUaxQcmD9c08QPsZs5Ay9SLj8OMp/L
kOTNRIy2nHLWhWiBFjGLAwI6M1i8C02i0QMkI9JIF8kcszAJpFgq6ZEmMlNprqAb
Cfw9aEpx4lhYRaB4w+TkV5LXFzSZNmMG96kgXHMIl61fAach3CmQW3TMNAAApwpv
CJ92LBd3HjQ3/BUTyUonxKP1egkoIhTg3OCFxyvkdRwFSH8ZLvH0b2RObCwDMist
r5l1Rd6cdz5AoxuX33WqSNc+xmWO
-----END CERTIFICATE-----
Generated at Sun Jun 2 03:35:22 2024 by rpki-client on console-fra.rpki-client.org