Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
File:                     BAE2D54D6C1793B7DCD774699216D316E8C75351.cer (raw, json)
Hash identifier:          fUC0P9ASCA7Ui9UtJ0W28YhEyw70NSRU+Uaj9kG7VWA=
Subject key identifier:   BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       47C5F46B9E9F8A1C2A7606B89CE48A9EE41C6E22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.mft
caRepository:             rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 11:01:48 +0000
Certificate not after:    Thu 03 Apr 2025 11:06:48 +0000
Subordinate resources:    AS: 262868
                          IP: 138.255.196.0/22
                          IP: 164.163.148.0/22
                          IP: 168.197.212.0/22
                          IP: 168.227.72.0/22
                          IP: 177.20.208.0/20
                          IP: 2804:328::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 02:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:c5:f4:6b:9e:9f:8a:1c:2a:76:06:b8:9c:e4:8a:9e:e4:1c:6e:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 11:01:48 2024 GMT
            Not After : Apr  3 11:06:48 2025 GMT
        Subject: CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7c:52:e8:b8:67:32:b6:b8:3d:b8:56:fc:9f:
                    e2:fa:21:b7:65:b3:77:f4:90:51:05:4a:74:b5:ec:
                    b3:4b:a5:f6:30:e1:b4:17:6d:ad:ad:4e:38:2d:bb:
                    2a:46:2b:2b:9f:90:da:b0:81:52:63:43:43:c2:1b:
                    9d:01:3f:47:88:64:7c:4c:c5:79:28:34:57:22:6b:
                    9c:f4:d2:5a:d3:4f:96:fe:9b:f8:45:2a:41:c1:ec:
                    c4:a2:51:b7:6b:d4:1b:ca:e2:5a:0f:c5:09:6a:17:
                    f1:5f:ed:bb:fa:8a:4a:57:c5:67:cd:a4:c3:6b:98:
                    ea:4c:7b:bd:fa:8c:a3:90:0b:5b:78:b9:81:1c:b3:
                    ed:28:92:e3:9b:b0:0b:4b:8f:d5:5e:a0:9c:d1:6d:
                    61:18:ec:0a:1f:99:5b:0c:ea:3e:d2:66:a6:da:24:
                    4e:70:8c:a5:6d:f7:12:06:af:2a:ae:3c:4b:a9:48:
                    3b:6a:d8:91:33:b7:f5:98:da:4d:29:d2:af:80:0e:
                    2a:94:9e:07:64:76:01:d5:01:29:aa:7a:cc:6d:32:
                    d6:8e:94:9e:60:23:20:e7:dc:1c:50:66:29:db:e8:
                    7d:b0:59:2e:ed:46:ad:96:5d:ef:05:26:ac:35:a9:
                    43:d4:bb:19:4a:be:33:cd:8c:c9:68:b9:ca:e1:72:
                    b0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.196.0/22
                  164.163.148.0/22
                  168.197.212.0/22
                  168.227.72.0/22
                  177.20.208.0/20
                IPv6:
                  2804:328::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262868

    Signature Algorithm: sha256WithRSAEncryption
         55:6f:ab:92:82:77:10:a8:14:7e:1c:f3:38:cb:12:98:97:7f:
         23:8a:30:a8:c4:f6:75:46:66:45:88:f0:b1:95:51:e2:00:18:
         61:56:2b:85:c7:4f:45:15:3b:03:61:0c:9f:9b:22:b6:ea:f3:
         d3:cb:03:01:39:8e:b2:e9:6e:75:02:a0:d1:e2:ac:27:24:68:
         28:5d:01:9b:21:69:7a:99:a6:cb:85:f6:46:fc:81:ee:6c:5d:
         6a:5d:75:d9:db:3b:6c:56:38:5e:87:85:9e:b1:20:a9:a1:85:
         1b:07:04:05:52:cd:1c:88:dd:9d:89:fb:a0:fa:ed:8b:65:3a:
         af:0a:1f:e7:3a:62:f1:7b:4a:5f:d2:0d:c0:12:f8:74:05:2c:
         8b:be:30:4e:97:27:18:dc:eb:18:f8:ca:f5:43:42:ad:f1:9f:
         55:dc:d3:43:3c:2f:95:05:bd:f8:1e:e9:eb:72:7a:fd:10:e6:
         13:83:24:5f:d4:b1:1c:67:b4:59:92:4f:3c:48:ba:e3:01:31:
         b9:88:66:91:0e:e1:3c:0d:38:d1:0c:20:5a:95:1f:a8:3e:be:
         e3:e6:9f:68:99:91:10:35:ad:55:55:0d:28:7d:f2:7a:68:50:
         5e:4e:a9:95:9d:55:34:dd:8d:22:23:74:76:78:05:27:ca:f7:
         57:52:9a:94
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUR8X0a56fihwqdga4nOSKnuQcbiIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQxMTAxNDhaFw0yNTA0MDMxMTA2NDhaMDMxMTAvBgNV
BAMTKEJBRTJENTRENkMxNzkzQjdEQ0Q3NzQ2OTkyMTZEMzE2RThDNzUzNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCafFLouGcytrg9uFb8n+L6Ibdl
s3f0kFEFSnS17LNLpfYw4bQXba2tTjgtuypGKyufkNqwgVJjQ0PCG50BP0eIZHxM
xXkoNFcia5z00lrTT5b+m/hFKkHB7MSiUbdr1BvK4loPxQlqF/Ff7bv6ikpXxWfN
pMNrmOpMe736jKOQC1t4uYEcs+0okuObsAtLj9VeoJzRbWEY7AofmVsM6j7SZqba
JE5wjKVt9xIGryquPEupSDtq2JEzt/WY2k0p0q+ADiqUngdkdgHVASmqesxtMtaO
lJ5gIyDn3BxQZinb6H2wWS7tRq2WXe8FJqw1qUPUuxlKvjPNjMloucrhcrB9AgMB
AAGjggNSMIIDTjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS64tVNbBeTt9zX
dGmSFtMW6MdTUTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNjRU
V1E4NFN3Z2k1cTg1SnQ3WGRFU0UxNlZQenZicE50dWpIVjZ5enpLd0EvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzY0
VFdRODRTd2dpNXE4NUp0N1hkRVNFMTZWUHp2YnBOdHVqSFY2eXp6S3dBLzEvQkFF
MkQ1NEQ2QzE3OTNCN0RDRDc3NDY5OTIxNkQzMTZFOEM3NTM1MS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEH
AQH/BDcwNTAkBAIAATAeAwQCiv/EAwQCpKOUAwQCqMXUAwQCqONIAwQEsRTQMA0E
AgACMAcDBQAoBAMoMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQC1DANBgkqhkiG
9w0BAQsFAAOCAQEAVW+rkoJ3EKgUfhzzOMsSmJd/I4owqMT2dUZmRYjwsZVR4gAY
YVYrhcdPRRU7A2EMn5siturz08sDATmOsuludQKg0eKsJyRoKF0BmyFpepmmy4X2
RvyB7mxdal112ds7bFY4XoeFnrEgqaGFGwcEBVLNHIjdnYn7oPrti2U6rwof5zpi
8XtKX9INwBL4dAUsi74wTpcnGNzrGPjK9UNCrfGfVdzTQzwvlQW9+B7p63J6/RDm
E4MkX9SxHGe0WZJPPEi64wExuYhmkQ7hPA040QwgWpUfqD6+4+afaJmREDWtVVUN
KH3yemhQXk6plZ1VNN2NIiN0dngFJ8r3V1KalA==
-----END CERTIFICATE-----
Generated at Sun Jun 2 02:06:40 2024 by rpki-client on console-fra.rpki-client.org