Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer
File:                     DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer (raw, json)
Hash identifier:          X3kQk/LzHUbIctEikbDSa3pqNt/F7WT3iTM6j8cbtKk=
Subject key identifier:   DA:06:5D:6A:BF:EB:30:0D:2C:42:38:4F:E3:5C:BF:5F:39:D0:5F:13
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       26D0D4E9472127E1CA1FBAC33511857DBF1C0AC6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 16 May 2024 21:04:44 +0000
Certificate not after:    Thu 15 May 2025 21:09:44 +0000
Subordinate resources:    AS: 61728
                          IP: 131.72.56.0/22
                          IP: 2804:1b70::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 02:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d0:d4:e9:47:21:27:e1:ca:1f:ba:c3:35:11:85:7d:bf:1c:0a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 16 21:04:44 2024 GMT
            Not After : May 15 21:09:44 2025 GMT
        Subject: CN=DA065D6ABFEB300D2C42384FE35CBF5F39D05F13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e7:63:a7:e2:95:69:7b:5e:a0:3e:f6:83:c1:
                    5b:12:48:7c:9f:a4:5e:fe:f4:77:9f:b7:b9:50:f0:
                    ce:91:ca:7b:e2:89:93:fb:c4:b1:3a:da:0b:74:a8:
                    0e:f8:de:94:b1:3c:0f:d3:9d:5c:9f:64:3a:80:36:
                    33:e2:22:65:46:30:68:d3:c1:95:30:aa:b6:d5:cb:
                    4d:c2:60:ae:ac:20:a2:23:7e:6c:f6:b9:df:4d:31:
                    dc:97:31:5f:12:eb:75:11:94:8e:ee:f5:54:65:a6:
                    67:c4:7c:ac:45:46:35:da:3d:bc:b8:63:e6:a2:39:
                    03:5a:de:06:97:b9:32:4f:85:10:f3:14:5f:3b:15:
                    73:4c:1c:a9:37:5c:a3:ad:3a:9f:33:c3:91:fb:f2:
                    81:72:54:f4:ca:f1:1f:42:72:96:27:10:72:43:89:
                    32:12:e4:46:ce:63:c0:82:07:0f:ff:a2:c6:4c:18:
                    b4:8a:fd:2a:43:82:d2:eb:57:9e:6a:bf:a7:1c:10:
                    48:c2:73:6b:23:d7:f9:e5:11:e2:63:e7:e5:6e:08:
                    8a:b3:f7:a8:dd:a6:d4:20:19:0a:f7:ca:cb:ff:b1:
                    2a:87:cb:d3:08:6c:46:17:e1:8f:2d:bb:0b:3d:85:
                    e1:41:c3:dc:bc:b7:b0:35:10:52:21:9c:1c:b7:ab:
                    4a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DA:06:5D:6A:BF:EB:30:0D:2C:42:38:4F:E3:5C:BF:5F:39:D0:5F:13
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.56.0/22
                IPv6:
                  2804:1b70::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61728

    Signature Algorithm: sha256WithRSAEncryption
         05:bd:1e:d4:97:8d:4b:bb:80:5f:9f:97:46:1b:31:e7:8b:38:
         96:3e:5c:7c:3b:f4:94:70:dd:4c:b6:09:0f:19:7e:b1:25:10:
         be:10:24:0c:2a:2e:36:08:43:f5:4d:de:ec:f7:39:a6:1d:3d:
         06:dd:f5:04:88:dc:e6:dc:1f:c1:aa:9d:6f:67:fb:b6:3e:1b:
         8c:7e:31:85:b3:54:98:c1:86:ba:10:d6:fe:65:fd:9d:3b:98:
         3d:31:6c:b8:b8:f4:3b:42:08:d9:21:8d:22:bd:f8:de:7f:cd:
         69:37:b0:9d:a6:32:45:d0:6b:60:53:c2:3a:29:11:06:60:32:
         56:68:06:51:5f:d7:d5:6e:41:4e:31:df:2a:31:ef:45:70:e4:
         d0:f9:5a:65:e4:29:b1:9d:23:22:23:0b:e7:4c:b5:30:32:cb:
         ee:4c:02:a6:de:0a:4c:92:df:f7:56:0f:fe:ec:10:83:ce:ad:
         66:eb:ca:64:90:4f:bb:1b:3b:ad:be:d3:ea:2c:f0:b1:16:ec:
         be:3d:f4:b0:e9:0f:c3:e8:92:00:1c:07:00:78:18:b2:68:f2:
         3b:75:55:ab:04:8d:99:b7:1c:9d:52:93:27:61:7f:3c:28:10:
         55:48:8d:b3:c8:90:76:82:14:dc:b8:36:06:84:1c:b0:71:45:
         bb:8e:9b:21
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUJtDU6UchJ+HKH7rDNRGFfb8cCsYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA1MTYyMTA0NDRaFw0yNTA1MTUyMTA5NDRaMDMxMTAvBgNV
BAMTKERBMDY1RDZBQkZFQjMwMEQyQzQyMzg0RkUzNUNCRjVGMzlEMDVGMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr52On4pVpe16gPvaDwVsSSHyf
pF7+9Heft7lQ8M6RynviiZP7xLE62gt0qA743pSxPA/TnVyfZDqANjPiImVGMGjT
wZUwqrbVy03CYK6sIKIjfmz2ud9NMdyXMV8S63URlI7u9VRlpmfEfKxFRjXaPby4
Y+aiOQNa3gaXuTJPhRDzFF87FXNMHKk3XKOtOp8zw5H78oFyVPTK8R9CcpYnEHJD
iTIS5EbOY8CCBw//osZMGLSK/SpDgtLrV55qv6ccEEjCc2sj1/nlEeJj5+VuCIqz
96jdptQgGQr3ysv/sSqHy9MIbEYX4Y8tuws9heFBw9y8t7A1EFIhnBy3q0rJAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTaBl1qv+swDSxC
OE/jXL9fOdBfEzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRGRu
NmtTZkpaSHU0ekJieHNRQkxCMmQ4QmY3cUx6cHBjRzlBM2RSWXdvMUEvMDCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRGRu
NmtTZkpaSHU0ekJieHNRQkxCMmQ4QmY3cUx6cHBjRzlBM2RSWXdvMUEvMC9EQTA2
NUQ2QUJGRUIzMDBEMkM0MjM4NEZFMzVDQkY1RjM5RDA1RjEzLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAKDSDgwDQQCAAIwBwMFACgEG3AwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDAPEgMA0GCSqGSIb3DQEBCwUAA4IBAQAFvR7Ul41Lu4Bfn5dG
GzHniziWPlx8O/SUcN1MtgkPGX6xJRC+ECQMKi42CEP1Td7s9zmmHT0G3fUEiNzm
3B/Bqp1vZ/u2PhuMfjGFs1SYwYa6ENb+Zf2dO5g9MWy4uPQ7QgjZIY0ivfjef81p
N7CdpjJF0GtgU8I6KREGYDJWaAZRX9fVbkFOMd8qMe9FcOTQ+Vpl5CmxnSMiIwvn
TLUwMsvuTAKm3gpMkt/3Vg/+7BCDzq1m68pkkE+7GzutvtPqLPCxFuy+PfSw6Q/D
6JIAHAcAeBiyaPI7dVWrBI2ZtxydUpMnYX88KBBVSI2zyJB2ghTcuDYGhBywcUW7
jpsh
-----END CERTIFICATE-----
Generated at Sun Jun 2 02:06:42 2024 by rpki-client on console-fra.rpki-client.org