Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D094BD14767790CF0B4A79F0DA251694C06C2C7E.cer
File:                     D094BD14767790CF0B4A79F0DA251694C06C2C7E.cer (raw, json)
Hash identifier:          Hi7TKmvl+hqOIoE9wr2qbXj/6qAK4oxZrPwdxhdImTQ=
Subject key identifier:   D0:94:BD:14:76:77:90:CF:0B:4A:79:F0:DA:25:16:94:C0:6C:2C:7E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6925C51785C3E93F7E64325BF8BB35068194102A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/1/D094BD14767790CF0B4A79F0DA251694C06C2C7E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 10:15:35 +0000
Certificate not after:    Thu 03 Apr 2025 10:20:35 +0000
Subordinate resources:    AS: 264404
                          IP: 131.161.228.0/22
                          IP: 138.255.16.0/22
                          IP: 170.82.140.0/22
                          IP: 2804:1df8::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 23:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:25:c5:17:85:c3:e9:3f:7e:64:32:5b:f8:bb:35:06:81:94:10:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 10:15:35 2024 GMT
            Not After : Apr  3 10:20:35 2025 GMT
        Subject: CN=D094BD14767790CF0B4A79F0DA251694C06C2C7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:85:8c:d0:d1:73:ee:58:41:85:a1:cf:b4:9c:
                    91:e3:47:7f:49:73:80:c7:9c:ca:c1:77:a3:70:6f:
                    17:1a:6c:66:28:1d:67:2b:e7:7a:58:86:61:2f:96:
                    c8:e9:87:f9:a3:11:8c:75:ad:0b:c2:e1:11:88:dd:
                    19:be:cc:80:c1:1b:74:c3:11:dd:b0:df:db:f4:c7:
                    ec:7a:dd:96:ee:87:10:85:8e:db:4b:ff:57:97:22:
                    21:5d:13:db:12:07:15:af:78:ab:8a:5d:f3:f1:17:
                    18:37:54:dc:35:6e:8b:21:05:9b:b2:93:36:d0:52:
                    be:be:98:ab:1a:7a:71:3d:d7:48:67:06:fa:44:f1:
                    cf:8d:8f:b6:47:d6:61:03:22:4d:dc:71:39:46:30:
                    89:3f:7f:e7:a2:f4:b5:17:97:78:72:2c:8f:ad:2b:
                    b9:71:51:df:93:5c:8a:3e:46:35:d7:64:a5:41:3f:
                    16:d4:d8:02:16:f6:1a:2d:af:46:5b:4f:42:e5:79:
                    a0:ce:ae:0b:a9:e4:ec:5d:56:ee:d9:ef:b3:ec:1e:
                    3f:09:a2:f6:94:6c:0e:2f:05:41:1a:ff:39:3a:91:
                    0b:f4:b3:f5:f9:52:7d:7e:46:0d:0c:09:cf:bb:8a:
                    4d:f4:ec:5c:d6:80:05:d9:b8:b7:80:c2:8a:af:6d:
                    b5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D0:94:BD:14:76:77:90:CF:0B:4A:79:F0:DA:25:16:94:C0:6C:2C:7E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/1/D094BD14767790CF0B4A79F0DA251694C06C2C7E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.228.0/22
                  138.255.16.0/22
                  170.82.140.0/22
                IPv6:
                  2804:1df8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264404

    Signature Algorithm: sha256WithRSAEncryption
         5d:6c:d7:51:db:41:f3:6e:98:40:90:de:1e:b3:6f:7b:64:24:
         b0:d8:20:67:94:75:3c:4d:43:fa:b6:b0:7b:04:0b:6f:74:91:
         6d:7a:95:b0:10:1d:63:b4:61:f7:6d:53:4c:68:99:9c:89:6a:
         37:b9:93:d4:d9:87:da:71:3b:b3:31:94:7d:d8:03:a4:d4:0d:
         84:92:a9:58:07:db:1c:49:3a:bf:b1:a2:72:8e:f3:69:9f:2c:
         06:8e:48:75:dc:6e:0f:b4:c6:ba:13:4c:d8:10:35:cf:78:c2:
         dc:67:1d:59:3c:bd:38:fc:2f:37:4b:18:a3:86:70:9d:99:45:
         97:6e:76:4e:1d:08:39:cc:99:40:19:51:94:3a:14:32:10:d8:
         e8:75:3e:d0:84:c4:87:a1:47:23:74:4c:a8:9f:c9:93:7e:73:
         da:e8:be:f2:99:75:30:af:2a:ef:a7:37:13:10:02:fc:f1:9d:
         af:49:7d:26:10:7d:85:23:9f:1c:9e:d0:4f:5e:b3:8b:b5:8f:
         74:21:7f:80:92:63:82:88:98:f6:e0:b3:36:15:eb:c7:e3:8c:
         3f:1d:e3:c5:3e:2d:d2:ca:57:32:90:c8:cb:6d:c1:86:6d:2b:
         71:db:d4:b5:1d:ef:16:99:c9:0c:7a:93:ec:43:11:c3:53:59:
         03:bc:52:77
-----BEGIN CERTIFICATE-----
MIIGPDCCBSSgAwIBAgIUaSXFF4XD6T9+ZDJb+Ls1BoGUECowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQxMDE1MzVaFw0yNTA0MDMxMDIwMzVaMDMxMTAvBgNV
BAMTKEQwOTRCRDE0NzY3NzkwQ0YwQjRBNzlGMERBMjUxNjk0QzA2QzJDN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuhYzQ0XPuWEGFoc+0nJHjR39J
c4DHnMrBd6NwbxcabGYoHWcr53pYhmEvlsjph/mjEYx1rQvC4RGI3Rm+zIDBG3TD
Ed2w39v0x+x63ZbuhxCFjttL/1eXIiFdE9sSBxWveKuKXfPxFxg3VNw1boshBZuy
kzbQUr6+mKsaenE910hnBvpE8c+Nj7ZH1mEDIk3ccTlGMIk/f+ei9LUXl3hyLI+t
K7lxUd+TXIo+RjXXZKVBPxbU2AIW9hotr0ZbT0LleaDOrgup5OxdVu7Z77PsHj8J
ovaUbA4vBUEa/zk6kQv0s/X5Un1+Rg0MCc+7ik307FzWgAXZuLeAwoqvbbXRAgMB
AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTQlL0UdneQzwtK
efDaJRaUwGwsfjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQWE3
aHNraTFmU3drVnBnRGNqeVpCUHNBNU5ZZ1lHTG44Vzlza3lDNXc1aUIvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Fh
N2hza2kxZlN3a1ZwZ0RjanlaQlBzQTVOWWdZR0xuOFc5c2t5QzV3NWlCLzEvRDA5
NEJEMTQ3Njc3OTBDRjBCNEE3OUYwREEyNTE2OTRDMDZDMkM3RS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH
AQH/BCswKTAYBAIAATASAwQCg6HkAwQCiv8QAwQCqlKMMA0EAgACMAcDBQAoBB34
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQI1DANBgkqhkiG9w0BAQsFAAOCAQEA
XWzXUdtB826YQJDeHrNve2QksNggZ5R1PE1D+rawewQLb3SRbXqVsBAdY7Rh921T
TGiZnIlqN7mT1NmH2nE7szGUfdgDpNQNhJKpWAfbHEk6v7Gico7zaZ8sBo5Iddxu
D7TGuhNM2BA1z3jC3GcdWTy9OPwvN0sYo4ZwnZlFl252Th0IOcyZQBlRlDoUMhDY
6HU+0ITEh6FHI3RMqJ/Jk35z2ui+8pl1MK8q76c3ExAC/PGdr0l9JhB9hSOfHJ7Q
T16zi7WPdCF/gJJjgoiY9uCzNhXrx+OMPx3jxT4t0spXMpDIy23Bhm0rcdvUtR3v
FpnJDHqT7EMRw1NZA7xSdw==
-----END CERTIFICATE-----
Generated at Sun Jun 2 00:29:25 2024 by rpki-client on console-ams.rpki-client.org