Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D17816B530FEC6F7B82440893F151739594318FA.cer
File:                     D17816B530FEC6F7B82440893F151739594318FA.cer (raw, json)
Hash identifier:          r5d+qhNqDI+5uD2AKaC1EbHu2P8ZH/9VSXFsBNxOPKo=
Subject key identifier:   D1:78:16:B5:30:FE:C6:F7:B8:24:40:89:3F:15:17:39:59:43:18:FA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1FC149119FEC693D1184E922CE713DEEF736FB5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/D17816B530FEC6F7B82440893F151739594318FA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Nov 2024 19:26:28 +0000
Certificate not after:    Wed 19 Nov 2025 19:31:28 +0000
Subordinate resources:    AS: 270968
                          IP: 181.225.168.0/22
                          IP: 2804:743c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 00:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:c1:49:11:9f:ec:69:3d:11:84:e9:22:ce:71:3d:ee:f7:36:fb:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 20 19:26:28 2024 GMT
            Not After : Nov 19 19:31:28 2025 GMT
        Subject: CN=D17816B530FEC6F7B82440893F151739594318FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:43:5c:ba:0d:f8:bd:22:3e:0d:47:3a:f1:3f:
                    98:45:3d:40:d2:2a:5a:c4:0b:77:b9:02:fa:2e:38:
                    9f:22:1c:8b:ae:ff:e7:23:ea:cf:c6:33:89:63:29:
                    c1:9d:31:6a:d2:9a:3f:69:2c:fa:65:eb:c2:f1:22:
                    8f:97:90:7f:91:ea:9e:f1:29:67:11:b8:c9:ac:52:
                    7a:5a:44:da:d8:80:aa:05:6d:e3:d3:12:f4:41:da:
                    90:4b:51:14:f7:82:a2:05:2d:88:3f:5d:0a:50:51:
                    aa:0f:96:1a:e2:99:53:fa:c7:e4:a9:0f:f2:ab:86:
                    41:03:5e:05:ae:8c:2c:2b:80:c8:71:b3:6d:4b:11:
                    85:51:2b:fa:7c:ec:34:7e:d6:ee:db:cb:31:21:dc:
                    16:3e:2d:c6:f9:f1:e7:de:9d:95:34:9e:12:22:d9:
                    3f:cc:2f:a1:79:b9:28:6b:37:34:86:ed:82:6d:b2:
                    17:b3:9e:b3:b7:d1:42:33:66:20:a9:73:b9:b6:ac:
                    4d:a2:9b:fb:2e:0b:6e:4f:2d:b9:75:00:3d:3f:5a:
                    b1:bd:c0:93:bb:48:c8:86:f9:d8:a7:cf:d9:8a:a8:
                    c0:f2:ef:a0:62:77:ec:b7:18:b5:b6:2f:3d:18:5b:
                    04:b2:1c:be:69:7a:f6:90:83:dc:e7:0e:ee:ae:09:
                    fb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D1:78:16:B5:30:FE:C6:F7:B8:24:40:89:3F:15:17:39:59:43:18:FA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/D17816B530FEC6F7B82440893F151739594318FA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.168.0/22
                IPv6:
                  2804:743c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270968

    Signature Algorithm: sha256WithRSAEncryption
         2b:3a:b2:6a:9f:d4:a5:da:d1:60:c7:51:7b:3d:a4:f6:f7:dc:
         00:fd:57:43:e4:1c:c0:1e:f2:50:57:de:94:01:6b:73:35:77:
         88:d1:84:76:57:c6:a6:dc:80:51:e3:68:ad:f9:ce:83:d3:4e:
         31:7f:c2:5f:a5:b5:d7:60:80:45:8a:b1:0e:76:94:90:d5:ec:
         ac:92:a8:fc:68:1b:ff:0b:b8:ce:12:3c:1b:78:a5:7e:8e:f5:
         d0:2b:88:9b:79:e8:3e:4f:2e:01:bc:5e:f8:8c:d2:bc:8f:8d:
         19:18:cb:05:d2:55:ac:e1:05:40:e9:53:29:44:8b:c4:30:3d:
         5a:03:16:1d:49:97:dc:f6:01:7d:be:11:96:7b:a2:53:59:e8:
         49:bb:48:21:2b:e0:62:e8:4e:fb:5e:42:1f:21:e9:a6:19:d1:
         0a:20:6b:33:ca:df:68:a1:c9:1d:ed:8a:14:ce:9f:73:e7:f0:
         a9:51:a1:b9:91:fb:18:56:a4:78:59:da:6a:19:70:85:63:c9:
         0c:c9:ae:d2:52:4c:35:49:63:e8:91:b1:1c:c4:10:9e:8f:03:
         5b:f0:ab:cf:4c:56:6a:3b:81:b1:cf:8d:26:6c:09:ec:46:3b:
         6b:68:e8:53:b8:0f:7e:71:df:cd:31:d0:6f:57:fd:62:fe:23:
         bf:3c:10:1a
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUH8FJEZ/saT0RhOkiznE97vc2+10wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDExMjAxOTI2MjhaFw0yNTExMTkxOTMxMjhaMDMxMTAvBgNV
BAMTKEQxNzgxNkI1MzBGRUM2RjdCODI0NDA4OTNGMTUxNzM5NTk0MzE4RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Q1y6Dfi9Ij4NRzrxP5hFPUDS
KlrEC3e5AvouOJ8iHIuu/+cj6s/GM4ljKcGdMWrSmj9pLPpl68LxIo+XkH+R6p7x
KWcRuMmsUnpaRNrYgKoFbePTEvRB2pBLURT3gqIFLYg/XQpQUaoPlhrimVP6x+Sp
D/KrhkEDXgWujCwrgMhxs21LEYVRK/p87DR+1u7byzEh3BY+Lcb58efenZU0nhIi
2T/ML6F5uShrNzSG7YJtsheznrO30UIzZiCpc7m2rE2im/suC25PLbl1AD0/WrG9
wJO7SMiG+dinz9mKqMDy76Bid+y3GLW2Lz0YWwSyHL5pevaQg9znDu6uCftTAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTReBa1MP7G97gk
QIk/FRc5WUMY+jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vODZo
YUFaYXMxY2hBUmZ6eEJ3ZTlDNjRyMkIyYUo0c0RCcm92UHA2YmdlQTQvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzg2
aGFBWmFzMWNoQVJmenhCd2U5QzY0cjJCMmFKNHNEQnJvdlBwNmJnZUE0LzAvRDE3
ODE2QjUzMEZFQzZGN0I4MjQ0MDg5M0YxNTE3Mzk1OTQzMThGQS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCteGoMA0EAgACMAcDBQAoBHQ8MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQieDANBgkqhkiG9w0BAQsFAAOCAQEAKzqyap/UpdrRYMdR
ez2k9vfcAP1XQ+QcwB7yUFfelAFrczV3iNGEdlfGptyAUeNorfnOg9NOMX/CX6W1
12CARYqxDnaUkNXsrJKo/Ggb/wu4zhI8G3ilfo710CuIm3noPk8uAbxe+IzSvI+N
GRjLBdJVrOEFQOlTKUSLxDA9WgMWHUmX3PYBfb4RlnuiU1noSbtIISvgYuhO+15C
HyHpphnRCiBrM8rfaKHJHe2KFM6fc+fwqVGhuZH7GFakeFnaahlwhWPJDMmu0lJM
NUlj6JGxHMQQno8DW/Crz0xWajuBsc+NJmwJ7EY7a2joU7gPfnHfzTHQb1f9Yv4j
vzwQGg==
-----END CERTIFICATE-----
Generated at Wed Nov 27 02:17:02 2024 by rpki-client on console-fra.rpki-client.org