Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
File:                     BD1E87C8514998E362292741C70F693178FDD20E.cer (raw, json)
Hash identifier:          O0zRNvYKLUg8Geh2QyqNRX8qBecKQ/dh5ac7NOt9yIE=
Subject key identifier:   BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5AAE7F954220B74A7C54383F92310A2112D10966
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 17 May 2024 13:52:20 +0000
Certificate not after:    Fri 16 May 2025 13:57:20 +0000
Subordinate resources:    AS: 28576
                          IP: 187.73.128.0/20
                          IP: 189.38.16.0/20
                          IP: 200.220.144.0/20
                          IP: 2804:3c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:ae:7f:95:42:20:b7:4a:7c:54:38:3f:92:31:0a:21:12:d1:09:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 17 13:52:20 2024 GMT
            Not After : May 16 13:57:20 2025 GMT
        Subject: CN=BD1E87C8514998E362292741C70F693178FDD20E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c2:b3:de:71:c4:99:09:a9:9d:52:47:40:79:
                    d5:c4:ca:d7:28:84:42:d6:16:e2:f0:5a:42:24:79:
                    d5:32:0a:66:aa:73:a0:f0:96:87:ce:52:e7:56:f7:
                    f6:e6:6f:73:7e:31:f6:dd:6c:2f:10:31:59:ce:64:
                    6a:9c:3e:46:a0:3b:be:09:26:f0:e4:7b:75:93:e1:
                    0c:d0:95:1b:41:21:60:74:67:4b:f5:ad:f6:9f:42:
                    39:b0:6f:3d:aa:53:09:d6:6e:da:b6:a6:4b:58:87:
                    be:a3:15:d7:02:cb:1a:14:f4:e8:79:20:1a:24:99:
                    64:8f:10:06:ac:14:af:64:31:ae:6e:b1:ed:5e:bb:
                    e0:d3:3f:f5:3c:76:72:16:90:fa:13:08:79:b6:2f:
                    e9:9e:1c:db:09:4f:d6:b0:2b:c7:db:02:34:d3:28:
                    06:54:aa:14:02:df:ed:04:93:1e:e5:d8:61:a3:87:
                    08:67:82:df:67:78:52:16:e6:f3:48:cd:31:4e:6a:
                    62:dc:4f:b8:98:9b:0b:6b:9d:95:96:1d:b7:70:a4:
                    3e:6d:16:f8:3b:cc:04:f9:af:2d:85:5e:92:93:67:
                    aa:22:be:1e:2f:53:6b:b5:ac:7f:55:9f:aa:d1:1d:
                    6a:7f:e2:fa:b1:6e:b0:31:70:25:98:a5:df:ee:5f:
                    16:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.128.0/20
                  189.38.16.0/20
                  200.220.144.0/20
                IPv6:
                  2804:3c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28576

    Signature Algorithm: sha256WithRSAEncryption
         38:9d:2e:39:a0:30:29:82:e4:c4:a0:f8:90:b6:29:29:eb:86:
         be:6f:79:65:2b:7c:8f:ce:8e:67:be:35:6b:22:f5:4a:93:9b:
         76:b5:e8:b4:5c:6c:45:42:e5:59:61:75:d7:f8:8e:c4:b4:89:
         99:56:9f:95:24:c1:bc:76:c9:bc:67:c5:cd:c0:e2:0b:a8:75:
         92:22:dd:00:a1:9f:9d:f9:b0:a4:7e:51:78:8f:c6:31:d2:b6:
         87:5c:a8:fb:64:5b:e0:5c:2a:b3:11:dd:8b:3d:b8:cd:d5:78:
         e5:63:0c:6f:4e:be:4a:1e:6a:0c:f1:59:49:b4:05:6e:7b:8d:
         4e:4f:f4:9c:73:f0:21:47:bb:13:68:0e:5a:62:49:21:57:41:
         e3:61:1d:b8:26:19:ff:dc:bb:c3:f8:37:bb:ad:a9:af:94:72:
         59:5d:cb:69:da:45:58:34:75:86:45:88:3a:b2:84:40:bd:d9:
         dc:d6:47:cb:a3:39:76:05:54:2e:7d:ce:b9:ab:0d:e3:8e:c7:
         28:d9:2f:9a:be:68:10:7a:62:56:ef:fa:6f:01:49:27:36:ee:
         71:a8:97:49:f7:c7:81:94:31:bd:1d:5c:0e:c9:6f:e1:be:0a:
         72:32:17:3b:00:4a:89:9b:b8:f0:00:b4:c7:82:f5:5a:70:3f:
         d9:f6:69:9b
-----BEGIN CERTIFICATE-----
MIIGOzCCBSOgAwIBAgIUWq5/lUIgt0p8VDg/kjEKIRLRCWYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA1MTcxMzUyMjBaFw0yNTA1MTYxMzU3MjBaMDMxMTAvBgNV
BAMTKEJEMUU4N0M4NTE0OTk4RTM2MjI5Mjc0MUM3MEY2OTMxNzhGREQyMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLwrPeccSZCamdUkdAedXEytco
hELWFuLwWkIkedUyCmaqc6DwlofOUudW9/bmb3N+MfbdbC8QMVnOZGqcPkagO74J
JvDke3WT4QzQlRtBIWB0Z0v1rfafQjmwbz2qUwnWbtq2pktYh76jFdcCyxoU9Oh5
IBokmWSPEAasFK9kMa5use1eu+DTP/U8dnIWkPoTCHm2L+meHNsJT9awK8fbAjTT
KAZUqhQC3+0Ekx7l2GGjhwhngt9neFIW5vNIzTFOamLcT7iYmwtrnZWWHbdwpD5t
Fvg7zAT5ry2FXpKTZ6oivh4vU2u1rH9Vn6rRHWp/4vqxbrAxcCWYpd/uXxbTAgMB
AAGjggNFMIIDQTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS9HofIUUmY42Ip
J0HHD2kxeP3SDjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN0NH
V0x1YW1XQlJTWnJ6eUFWZzZyd1BhOGQ2NWhvN2FnNEY5Wnl4WkJjNU4vMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdD
R1dMdWFtV0JSU1pyenlBVmc2cndQYThkNjVobzdhZzRGOVp5eFpCYzVOLzAvQkQx
RTg3Qzg1MTQ5OThFMzYyMjkyNzQxQzcwRjY5MzE3OEZERDIwRS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH
AQH/BCswKTAYBAIAATASAwQEu0mAAwQEvSYQAwQEyNyQMA0EAgACMAcDBQAoBAA8
MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAm+gMA0GCSqGSIb3DQEBCwUAA4IBAQA4
nS45oDApguTEoPiQtikp64a+b3llK3yPzo5nvjVrIvVKk5t2tei0XGxFQuVZYXXX
+I7EtImZVp+VJMG8dsm8Z8XNwOILqHWSIt0AoZ+d+bCkflF4j8Yx0raHXKj7ZFvg
XCqzEd2LPbjN1XjlYwxvTr5KHmoM8VlJtAVue41OT/Scc/AhR7sTaA5aYkkhV0Hj
YR24Jhn/3LvD+De7ramvlHJZXctp2kVYNHWGRYg6soRAvdnc1kfLozl2BVQufc65
qw3jjsco2S+avmgQemJW7/pvAUknNu5xqJdJ98eBlDG9HVwOyW/hvgpyMhc7AEqJ
m7jwALTHgvVacD/Z9mmb
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:57:23 2024 by rpki-client on console-fra.rpki-client.org