Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B60ED4BAF1002CB172904FB372EB8C72E9276C0D.cer
File:                     B60ED4BAF1002CB172904FB372EB8C72E9276C0D.cer (raw, json)
Hash identifier:          pxl4jfOfYIsPB0/wjqTdEph00nWVtyINyE6XzuvaMWI=
Subject key identifier:   B6:0E:D4:BA:F1:00:2C:B1:72:90:4F:B3:72:EB:8C:72:E9:27:6C:0D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4B349D7C18C83FE4D91A9705700D407689FECF29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/1/B60ED4BAF1002CB172904FB372EB8C72E9276C0D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 14:55:14 +0000
Certificate not after:    Thu 03 Apr 2025 15:00:14 +0000
Subordinate resources:    AS: 268138
                          IP: 45.168.64.0/22
                          IP: 2804:5898::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:34:9d:7c:18:c8:3f:e4:d9:1a:97:05:70:0d:40:76:89:fe:cf:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 14:55:14 2024 GMT
            Not After : Apr  3 15:00:14 2025 GMT
        Subject: CN=B60ED4BAF1002CB172904FB372EB8C72E9276C0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:95:d6:69:b8:75:1c:0f:be:a6:03:0a:b7:f1:
                    e1:6f:c2:da:db:40:e4:60:8c:f0:b1:8f:81:aa:b0:
                    fe:6e:a7:7a:08:df:bc:9c:13:66:03:9d:e8:ec:dc:
                    4d:cf:61:04:8b:4f:db:da:11:ec:3e:19:c7:67:7c:
                    13:e2:93:b7:66:d9:32:bd:a1:ae:b9:fb:28:05:73:
                    b2:1a:0f:34:4a:92:d0:32:ba:fd:9b:a2:d2:f9:de:
                    8a:74:59:d7:e6:a2:f3:cd:0e:bc:b5:3a:a1:3f:fb:
                    95:d3:00:33:7d:e7:22:b4:00:52:e3:37:ad:1d:e5:
                    bd:d0:2a:3e:90:ec:bb:6b:c6:ac:24:62:91:1d:c1:
                    4a:fb:48:b0:a7:b6:0f:98:13:66:ff:39:c1:f3:d1:
                    a1:39:50:0c:63:9c:26:ef:fe:33:93:60:25:b2:69:
                    b0:d8:d4:66:48:96:c4:3f:f1:c7:64:1a:01:86:47:
                    2b:c5:6f:37:88:e5:9b:e2:f3:7a:81:03:14:d8:54:
                    7e:b4:2f:bc:54:32:49:d9:62:34:8a:8c:be:f5:f6:
                    bf:03:0e:4c:fb:7b:f1:d4:9f:b4:04:12:74:e9:7e:
                    88:a7:4b:32:d1:3a:30:93:f8:11:51:3b:a7:ed:7f:
                    f3:eb:c9:e1:7f:55:bc:3c:39:0a:cf:33:31:e9:f8:
                    6d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B6:0E:D4:BA:F1:00:2C:B1:72:90:4F:B3:72:EB:8C:72:E9:27:6C:0D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/1/B60ED4BAF1002CB172904FB372EB8C72E9276C0D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.64.0/22
                IPv6:
                  2804:5898::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268138

    Signature Algorithm: sha256WithRSAEncryption
         a3:70:b8:1b:8f:c9:9c:ad:f1:f8:2a:d8:e6:a9:2a:16:fd:40:
         fe:2a:b8:39:fc:21:e8:67:b3:71:8b:90:4f:ad:18:ba:98:95:
         59:7c:c8:2a:de:8f:83:01:6b:a1:b4:06:21:50:6c:85:98:f5:
         d3:b8:e3:68:7b:0a:fc:f4:8e:e9:65:5c:b0:67:50:e7:32:7b:
         a1:ee:4b:2f:b6:ec:40:d6:5c:90:3f:63:02:44:f9:b1:73:e9:
         ad:ec:7f:d8:19:3c:cd:fc:04:99:3f:31:14:83:54:ad:ee:92:
         71:59:17:bd:f2:16:f0:1a:b7:b6:3d:49:bf:bc:6e:93:f3:b2:
         90:3b:e4:54:f1:b1:ac:3d:b5:fa:57:5b:3d:08:bd:c3:3e:1b:
         75:a1:a8:57:e4:00:30:15:e6:e2:bd:03:2a:51:a5:4d:9b:15:
         f8:12:65:1d:e4:17:6e:a8:2d:9d:89:cf:35:13:4d:11:8e:31:
         32:34:55:84:bb:2d:3a:e0:8d:7d:bb:b7:75:97:1b:64:a9:e4:
         61:1c:50:47:de:aa:4a:8a:fb:ba:04:e0:dc:de:43:ef:c5:8f:
         09:28:db:fb:ee:e6:d5:28:d2:37:95:c3:6a:ff:98:2d:27:3c:
         4c:43:f8:ce:3b:40:46:e2:ac:52:e9:b2:58:55:77:a7:5d:86:
         83:3e:c1:5b
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUSzSdfBjIP+TZGpcFcA1Adon+zykwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQxNDU1MTRaFw0yNTA0MDMxNTAwMTRaMDMxMTAvBgNV
BAMTKEI2MEVENEJBRjEwMDJDQjE3MjkwNEZCMzcyRUI4QzcyRTkyNzZDMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGldZpuHUcD76mAwq38eFvwtrb
QORgjPCxj4GqsP5up3oI37ycE2YDnejs3E3PYQSLT9vaEew+GcdnfBPik7dm2TK9
oa65+ygFc7IaDzRKktAyuv2botL53op0WdfmovPNDry1OqE/+5XTADN95yK0AFLj
N60d5b3QKj6Q7LtrxqwkYpEdwUr7SLCntg+YE2b/OcHz0aE5UAxjnCbv/jOTYCWy
abDY1GZIlsQ/8cdkGgGGRyvFbzeI5Zvi83qBAxTYVH60L7xUMknZYjSKjL719r8D
Dkz7e/HUn7QEEnTpfoinSzLROjCT+BFRO6ftf/PryeF/Vbw8OQrPMzHp+G3NAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS2DtS68QAssXKQ
T7Ny64xy6SdsDTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMnZa
MmJHdUw0c0QyNnFEekVFSFdTaGJuMWtwaEJ5M2FSOTVmWlhBM2oyaFMvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJ2
WjJiR3VMNHNEMjZxRHpFRUhXU2hibjFrcGhCeTNhUjk1ZlpYQTNqMmhTLzEvQjYw
RUQ0QkFGMTAwMkNCMTcyOTA0RkIzNzJFQjhDNzJFOTI3NkMwRC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLahAMA0EAgACMAcDBQAoBFiYMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQXajANBgkqhkiG9w0BAQsFAAOCAQEAo3C4G4/JnK3x+CrY
5qkqFv1A/iq4Ofwh6GezcYuQT60YupiVWXzIKt6PgwFrobQGIVBshZj107jjaHsK
/PSO6WVcsGdQ5zJ7oe5LL7bsQNZckD9jAkT5sXPprex/2Bk8zfwEmT8xFINUre6S
cVkXvfIW8Bq3tj1Jv7xuk/OykDvkVPGxrD21+ldbPQi9wz4bdaGoV+QAMBXm4r0D
KlGlTZsV+BJlHeQXbqgtnYnPNRNNEY4xMjRVhLstOuCNfbu3dZcbZKnkYRxQR96q
Sor7ugTg3N5D78WPCSjb++7m1SjSN5XDav+YLSc8TEP4zjtARuKsUumyWFV3p12G
gz7BWw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:04 2024 by rpki-client on console-fra.rpki-client.org