Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer
File:                     D539CF929B6A6A2B9596B922F417FAD917799ED7.cer (raw, json)
Hash identifier:          9E0Yt1swXwNszRtcGh45SMiicVeub6yP2K03DmrWvCU=
Subject key identifier:   D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       41A05EB2494A0D3C819CB787265CFED16689C5C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 02:55:44 +0000
Certificate not after:    Thu 03 Apr 2025 03:00:44 +0000
Subordinate resources:    AS: 267102
                          IP: 45.228.140.0/22
                          IP: 2804:482c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:a0:5e:b2:49:4a:0d:3c:81:9c:b7:87:26:5c:fe:d1:66:89:c5:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 02:55:44 2024 GMT
            Not After : Apr  3 03:00:44 2025 GMT
        Subject: CN=D539CF929B6A6A2B9596B922F417FAD917799ED7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e8:d4:52:c5:87:a7:e0:01:d7:ba:0d:04:d2:
                    36:33:3f:36:9f:16:3d:ea:c6:e6:28:78:70:da:ab:
                    f2:ed:04:74:eb:a0:70:9b:83:37:9e:c4:dd:87:d8:
                    c0:de:f8:80:6a:a3:fe:26:b3:14:32:32:97:f4:e1:
                    f4:d3:09:6b:db:84:74:fa:48:8d:25:27:65:14:f9:
                    a6:4b:fa:66:98:a5:1b:d4:eb:41:e4:2f:b7:08:5c:
                    2f:09:c7:ad:18:1e:08:c0:c2:ef:9f:cc:70:5d:6c:
                    37:7f:fd:83:1b:73:15:84:6e:c5:65:50:6a:59:b4:
                    5b:83:cc:d4:06:7a:a7:3e:20:38:43:aa:d2:88:15:
                    37:20:b8:36:c2:54:dc:e8:81:c5:28:1a:21:7c:93:
                    ad:00:fb:b4:5f:aa:9c:f2:77:e7:d9:b7:ca:17:1c:
                    d9:27:d3:c5:12:13:ae:be:d8:a7:23:e9:c3:64:e5:
                    a6:d4:ea:0c:19:53:56:ff:f3:d8:d1:64:5a:38:48:
                    9d:12:ec:ce:0d:11:89:37:d8:ba:85:94:63:69:28:
                    ab:1c:b9:e6:41:e1:e2:0c:70:82:bf:dc:1a:eb:fc:
                    be:12:69:56:7d:66:68:a3:e8:f9:41:c9:49:db:9b:
                    9a:2c:cc:ba:41:36:92:ce:02:dc:36:96:77:a1:5c:
                    dd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.140.0/22
                IPv6:
                  2804:482c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267102

    Signature Algorithm: sha256WithRSAEncryption
         c2:1a:40:08:15:10:0a:81:34:5f:37:d9:23:23:d7:04:58:85:
         9e:42:4c:7e:19:fd:1b:cd:2b:af:52:1d:db:cf:1a:55:42:25:
         4b:0d:ca:76:56:b2:a5:cc:ea:ef:50:c7:09:53:7b:3b:85:77:
         b1:c1:e3:01:17:43:f8:8d:69:ae:62:b4:3a:f6:16:57:41:65:
         64:35:39:8a:6c:d0:31:5d:2e:04:04:43:69:45:fd:0f:76:b0:
         1b:98:3c:67:29:27:2f:63:76:d1:84:1e:a4:05:34:73:da:10:
         79:b3:ca:27:57:ff:b6:33:b3:19:ea:8e:73:ae:27:e6:00:bb:
         0c:66:2e:73:b9:4b:62:7c:d3:0a:cd:de:91:fd:f1:3f:48:aa:
         15:f2:42:05:93:b6:89:7b:73:ed:34:44:b0:ce:88:fd:be:d2:
         ae:36:16:11:0c:ca:a7:15:bc:20:1d:44:64:82:13:92:77:a6:
         f2:0c:5b:54:90:3c:2d:ec:0a:7b:28:59:96:6c:3b:77:67:b5:
         f1:35:5d:8f:9e:c5:9e:85:e8:89:20:24:cd:ca:15:5e:23:32:
         53:b2:fd:b6:62:05:ee:c6:01:53:32:b1:e0:05:11:f2:c2:28:
         87:93:33:03:17:31:55:5f:e1:a2:34:98:91:97:55:65:b9:7e:
         79:83:e5:e2
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUQaBesklKDTyBnLeHJlz+0WaJxcMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwMjU1NDRaFw0yNTA0MDMwMzAwNDRaMDMxMTAvBgNV
BAMTKEQ1MzlDRjkyOUI2QTZBMkI5NTk2QjkyMkY0MTdGQUQ5MTc3OTlFRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV6NRSxYen4AHXug0E0jYzPzaf
Fj3qxuYoeHDaq/LtBHTroHCbgzeexN2H2MDe+IBqo/4msxQyMpf04fTTCWvbhHT6
SI0lJ2UU+aZL+maYpRvU60HkL7cIXC8Jx60YHgjAwu+fzHBdbDd//YMbcxWEbsVl
UGpZtFuDzNQGeqc+IDhDqtKIFTcguDbCVNzogcUoGiF8k60A+7Rfqpzyd+fZt8oX
HNkn08USE66+2Kcj6cNk5abU6gwZU1b/89jRZFo4SJ0S7M4NEYk32LqFlGNpKKsc
ueZB4eIMcIK/3Brr/L4SaVZ9Zmij6PlByUnbm5oszLpBNpLOAtw2lnehXN0LAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTVOc+Sm2pqK5WW
uSL0F/rZF3me1zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRHRh
M1dIWDVjd3E4OGdmTEVjclBlYWp0Ulh2QVB1UFhYTHoxc3NONzNTM1QvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRHRh
M1dIWDVjd3E4OGdmTEVjclBlYWp0Ulh2QVB1UFhYTHoxc3NONzNTM1QvMS9ENTM5
Q0Y5MjlCNkE2QTJCOTU5NkI5MjJGNDE3RkFEOTE3Nzk5RUQ3Lm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAIt5IwwDQQCAAIwBwMFACgESCwwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBBNeMA0GCSqGSIb3DQEBCwUAA4IBAQDCGkAIFRAKgTRfN9kj
I9cEWIWeQkx+Gf0bzSuvUh3bzxpVQiVLDcp2VrKlzOrvUMcJU3s7hXexweMBF0P4
jWmuYrQ69hZXQWVkNTmKbNAxXS4EBENpRf0PdrAbmDxnKScvY3bRhB6kBTRz2hB5
s8onV/+2M7MZ6o5zrifmALsMZi5zuUtifNMKzd6R/fE/SKoV8kIFk7aJe3PtNESw
zoj9vtKuNhYRDMqnFbwgHURkghOSd6byDFtUkDwt7Ap7KFmWbDt3Z7XxNV2PnsWe
heiJICTNyhVeIzJTsv22YgXuxgFTMrHgBRHywiiHkzMDFzFVX+GiNJiRl1VluX55
g+Xi
-----END CERTIFICATE-----
Generated at Sat Nov 23 07:44:31 2024 by rpki-client on console-ams.rpki-client.org