Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer
File:                     C3976BFC098E04D93A5507BBB046C3608B889670.cer (raw, json)
Hash identifier:          D8tY+X5K4hfdoJD5Iwm73I7FdqXyanttIS5PZBEe9gs=
Subject key identifier:   C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       45F5DAC51DE7741F35FC748F8621001B1FB81AE0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:26:31 +0000
Certificate not after:    Wed 02 Apr 2025 18:31:31 +0000
Subordinate resources:    AS: 269532
                          IP: 45.188.140.0/22
                          IP: 2804:6614::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 04:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:f5:da:c5:1d:e7:74:1f:35:fc:74:8f:86:21:00:1b:1f:b8:1a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:26:31 2024 GMT
            Not After : Apr  2 18:31:31 2025 GMT
        Subject: CN=C3976BFC098E04D93A5507BBB046C3608B889670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ed:26:3d:f2:70:90:b9:df:e5:37:cf:99:9b:
                    6a:c3:35:2e:89:85:4a:72:f1:96:c4:4f:81:41:c6:
                    33:fc:ba:0f:d4:71:70:1f:85:69:5e:ac:69:54:cb:
                    5e:b1:bf:0e:2a:2a:8f:8a:64:97:0a:1c:7f:ea:d5:
                    ca:a9:5c:f1:27:5e:3f:bc:a5:9d:a1:d9:07:7f:c6:
                    33:8c:52:ab:0d:69:9d:a9:4c:b1:f3:75:32:ce:88:
                    a4:0e:5d:ca:d8:e3:b0:5b:79:26:5b:1b:f7:26:d7:
                    76:6a:aa:0c:d5:15:0c:85:2e:5b:8f:18:ac:05:62:
                    14:44:6a:56:48:3e:00:4a:34:20:08:7d:3f:a5:26:
                    f0:e5:57:02:3e:b9:83:d2:0b:d7:3f:97:7d:2c:3c:
                    e5:bb:b4:05:5e:f8:9b:be:60:3a:00:57:8d:df:5e:
                    d6:61:ef:fe:e9:47:0c:0c:24:48:fd:8b:bf:59:c9:
                    df:0a:bc:62:fa:07:24:2e:16:28:f3:b6:e8:8a:63:
                    bf:62:15:1b:3d:eb:77:c6:b1:83:e7:51:26:89:0a:
                    53:15:e7:15:7e:53:b4:67:f6:16:bb:28:a0:a5:03:
                    c5:c1:33:18:ff:8a:fa:c1:b1:5d:38:79:a8:3d:08:
                    8c:62:19:ac:34:7c:23:71:11:5e:08:1a:88:b8:a8:
                    b7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.140.0/22
                IPv6:
                  2804:6614::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269532

    Signature Algorithm: sha256WithRSAEncryption
         ba:24:aa:8b:29:c3:fa:73:7e:ff:8c:e6:57:87:6b:dd:ca:d7:
         9d:7d:d3:6d:2a:3b:50:ca:3f:1b:c0:89:6e:f5:49:7c:11:cb:
         6e:4b:24:ab:9e:c1:4c:59:bb:3b:bd:67:cc:22:03:49:91:39:
         d2:9c:f4:22:d2:b3:3c:0e:11:55:d9:45:77:70:f1:0f:96:97:
         84:00:3d:6e:b9:25:88:ab:6c:a9:34:b6:73:93:db:d1:66:a2:
         5d:53:b5:0f:16:60:5f:24:7c:4b:b9:24:59:9a:1c:8f:28:01:
         c9:9b:ef:22:88:82:29:d9:00:bc:b5:4c:d4:f4:3c:19:24:a2:
         a6:c2:0a:26:75:51:6a:74:6f:91:c0:b6:9d:f6:4d:e6:50:e8:
         5b:00:ba:c5:d1:5d:38:6a:99:bf:36:a1:cc:60:66:dc:d9:10:
         6a:b3:90:a8:b9:3d:b6:8d:33:31:9f:9e:25:38:9d:fd:28:68:
         38:5f:bb:b8:a7:ea:c1:19:4c:a4:7d:ef:0a:ee:09:5c:78:20:
         63:ac:38:b3:d7:b4:80:f9:77:fa:fc:20:c9:42:14:d9:44:24:
         5d:45:30:84:0c:1f:12:40:ab:66:89:6c:a0:10:fc:c1:42:cc:
         c4:8e:ae:30:d3:36:0a:bb:b2:7b:94:fe:da:d0:a9:b9:2d:0c:
         b2:80:f9:bd
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIURfXaxR3ndB81/HSPhiEAGx+4GuAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMxODI2MzFaFw0yNTA0MDIxODMxMzFaMDMxMTAvBgNV
BAMTKEMzOTc2QkZDMDk4RTA0RDkzQTU1MDdCQkIwNDZDMzYwOEI4ODk2NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE7SY98nCQud/lN8+Zm2rDNS6J
hUpy8ZbET4FBxjP8ug/UcXAfhWlerGlUy16xvw4qKo+KZJcKHH/q1cqpXPEnXj+8
pZ2h2Qd/xjOMUqsNaZ2pTLHzdTLOiKQOXcrY47BbeSZbG/cm13ZqqgzVFQyFLluP
GKwFYhREalZIPgBKNCAIfT+lJvDlVwI+uYPSC9c/l30sPOW7tAVe+Ju+YDoAV43f
XtZh7/7pRwwMJEj9i79Zyd8KvGL6ByQuFijztuiKY79iFRs963fGsYPnUSaJClMV
5xV+U7Rn9ha7KKClA8XBMxj/ivrBsV04eag9CIxiGaw0fCNxEV4IGoi4qLczAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTDl2v8CY4E2TpV
B7uwRsNgi4iWcDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQUtW
YmIxTU5TTDhSQXJlZ0FjM01rV3NnTWt3N2ZLMkZiRXprRGZTd2s4TjIvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQUtW
YmIxTU5TTDhSQXJlZ0FjM01rV3NnTWt3N2ZLMkZiRXprRGZTd2s4TjIvMS9DMzk3
NkJGQzA5OEUwNEQ5M0E1NTA3QkJCMDQ2QzM2MDhCODg5NjcwLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAItvIwwDQQCAAIwBwMFACgEZhQwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBBzcMA0GCSqGSIb3DQEBCwUAA4IBAQC6JKqLKcP6c37/jOZX
h2vdytedfdNtKjtQyj8bwIlu9Ul8EctuSySrnsFMWbs7vWfMIgNJkTnSnPQi0rM8
DhFV2UV3cPEPlpeEAD1uuSWIq2ypNLZzk9vRZqJdU7UPFmBfJHxLuSRZmhyPKAHJ
m+8iiIIp2QC8tUzU9DwZJKKmwgomdVFqdG+RwLad9k3mUOhbALrF0V04apm/NqHM
YGbc2RBqs5CouT22jTMxn54lOJ39KGg4X7u4p+rBGUykfe8K7glceCBjrDiz17SA
+Xf6/CDJQhTZRCRdRTCEDB8SQKtmiWygEPzBQszEjq4w0zYKu7J7lP7a0Km5LQyy
gPm9
-----END CERTIFICATE-----
Generated at Sun Jun 2 01:36:49 2024 by rpki-client on console-ams.rpki-client.org