Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer
File:                     D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer (raw, json)
Hash identifier:          y45+thpVfFSNFL4KzdZPSTK/8M9m4jPo83gPAN5Jfbc=
Subject key identifier:   D8:53:C4:D5:56:8D:20:B0:91:9C:2E:29:80:4E:2F:49:83:BC:FD:F3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1A8A852DCDAF96CB2220B3F3A9B1082A31A861A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 21 May 2024 16:46:11 +0000
Certificate not after:    Tue 20 May 2025 16:51:11 +0000
Subordinate resources:    AS: 271293
                          IP: 170.233.240.0/22
                          IP: 2804:793c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 21:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:8a:85:2d:cd:af:96:cb:22:20:b3:f3:a9:b1:08:2a:31:a8:61:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 21 16:46:11 2024 GMT
            Not After : May 20 16:51:11 2025 GMT
        Subject: CN=D853C4D5568D20B0919C2E29804E2F4983BCFDF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:74:f4:64:47:c3:d6:45:50:74:94:fc:b8:01:
                    bb:49:02:ae:aa:da:36:07:00:a9:86:d8:62:35:2f:
                    c5:7d:2e:49:ea:43:01:30:41:1e:29:15:10:3d:e1:
                    5e:78:33:93:77:ee:81:a5:55:30:a6:c6:7c:7a:b9:
                    67:0c:9b:5c:55:98:e8:7f:c0:2c:f4:c7:d1:0a:4e:
                    d2:c6:fa:b6:8d:d3:22:28:b3:35:9a:89:23:ed:e7:
                    be:26:cb:78:60:83:c0:62:cd:a9:67:2d:ca:8d:2a:
                    7f:3b:52:46:7d:99:15:77:23:df:f6:b8:e9:63:51:
                    a7:22:37:88:8b:83:8b:7a:2b:1a:34:47:e5:05:63:
                    bc:a2:51:5f:58:e7:af:cf:2f:71:a0:51:5c:04:3f:
                    03:57:01:62:bb:c4:fd:89:86:82:8d:56:b5:50:e5:
                    2d:23:68:4f:8c:0f:18:c5:23:52:66:3d:0d:16:c7:
                    8b:7d:34:3d:2d:e6:5a:fd:bd:f1:f7:aa:f6:3b:b5:
                    29:2d:21:33:13:06:82:60:8f:17:fc:01:d3:cb:79:
                    9b:5e:bf:87:f6:ea:06:86:79:c8:f0:58:18:19:e3:
                    5a:59:65:86:6f:63:90:02:29:31:63:31:80:66:70:
                    25:ef:81:36:a8:26:4a:71:02:4d:a2:23:35:a9:1f:
                    c5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D8:53:C4:D5:56:8D:20:B0:91:9C:2E:29:80:4E:2F:49:83:BC:FD:F3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.240.0/22
                IPv6:
                  2804:793c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271293

    Signature Algorithm: sha256WithRSAEncryption
         ae:cb:e0:38:93:26:2f:59:9d:be:68:53:1c:63:fa:d1:77:78:
         b3:9b:73:c8:33:64:fb:14:5b:ca:66:f1:ba:cc:4a:d8:a5:40:
         71:9e:47:39:c2:b0:dd:08:68:57:11:44:b7:4d:6e:75:c1:78:
         02:da:6f:ec:48:8d:97:94:d8:0f:e1:71:13:55:65:30:c4:ab:
         e5:ed:f5:fe:9f:c5:de:ea:a1:aa:98:7f:4a:69:03:db:26:50:
         b0:36:0c:62:06:d0:6e:09:e2:7b:64:85:b5:22:90:d9:ee:7b:
         32:c6:6a:64:0e:22:bf:e1:f9:2c:b1:a7:65:39:00:0e:e8:05:
         de:87:28:87:f1:b6:06:9e:d2:1c:91:78:57:25:ab:be:3d:6a:
         ed:6f:57:77:1e:33:85:29:57:82:52:d7:f1:6c:03:5b:cc:07:
         29:31:d9:60:84:78:d9:ab:5e:9b:15:96:e7:98:81:38:fd:9d:
         39:f0:91:f2:b8:15:33:7f:16:51:e2:0d:92:b7:66:eb:d4:ac:
         33:fc:b8:27:19:2f:6d:62:86:b5:0e:bc:46:97:82:f7:e9:e6:
         42:b7:10:8b:ab:fc:e2:6f:88:ab:aa:4e:ca:44:13:f6:36:93:
         c6:b6:77:35:0b:5a:c7:23:92:70:2c:50:4e:ec:94:c7:95:f8:
         e4:32:56:2d
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUGoqFLc2vlssiILPzqbEIKjGoYaIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA1MjExNjQ2MTFaFw0yNTA1MjAxNjUxMTFaMDMxMTAvBgNV
BAMTKEQ4NTNDNEQ1NTY4RDIwQjA5MTlDMkUyOTgwNEUyRjQ5ODNCQ0ZERjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmdPRkR8PWRVB0lPy4AbtJAq6q
2jYHAKmG2GI1L8V9LknqQwEwQR4pFRA94V54M5N37oGlVTCmxnx6uWcMm1xVmOh/
wCz0x9EKTtLG+raN0yIoszWaiSPt574my3hgg8BizalnLcqNKn87UkZ9mRV3I9/2
uOljUaciN4iLg4t6Kxo0R+UFY7yiUV9Y56/PL3GgUVwEPwNXAWK7xP2JhoKNVrVQ
5S0jaE+MDxjFI1JmPQ0Wx4t9ND0t5lr9vfH3qvY7tSktITMTBoJgjxf8AdPLeZte
v4f26gaGecjwWBgZ41pZZYZvY5ACKTFjMYBmcCXvgTaoJkpxAk2iIzWpH8UpAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTYU8TVVo0gsJGc
LimATi9Jg7z98zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXBw
VGRqUDNmdlNDVHR5SllOZXVQcFRhVXIyZzIzQVVIeG80dzMyZ3VjWDgvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vw
cFRkalAzZnZTQ1R0eUpZTmV1UHBUYVVyMmcyM0FVSHhvNHczMmd1Y1g4LzAvRDg1
M0M0RDU1NjhEMjBCMDkxOUMyRTI5ODA0RTJGNDk4M0JDRkRGMy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCqunwMA0EAgACMAcDBQAoBHk8MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQjvTANBgkqhkiG9w0BAQsFAAOCAQEArsvgOJMmL1mdvmhT
HGP60Xd4s5tzyDNk+xRbymbxusxK2KVAcZ5HOcKw3QhoVxFEt01udcF4Atpv7EiN
l5TYD+FxE1VlMMSr5e31/p/F3uqhqph/SmkD2yZQsDYMYgbQbgnie2SFtSKQ2e57
MsZqZA4iv+H5LLGnZTkADugF3ocoh/G2Bp7SHJF4VyWrvj1q7W9Xdx4zhSlXglLX
8WwDW8wHKTHZYIR42atemxWW55iBOP2dOfCR8rgVM38WUeINkrdm69SsM/y4Jxkv
bWKGtQ68RpeC9+nmQrcQi6v84m+Iq6pOykQT9jaTxrZ3NQtaxyOScCxQTuyUx5X4
5DJWLQ==
-----END CERTIFICATE-----
Generated at Sat Sep 28 20:52:03 2024 by rpki-client on console-fra.rpki-client.org