Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DE52A04E8F1F5A9955E1555E60EA1A4BF5618404.cer
File:                     DE52A04E8F1F5A9955E1555E60EA1A4BF5618404.cer (raw, json)
Hash identifier:          iqSCFMatQa584tKFlSUUFrvnqrrCaH0NGJ8jrggJBcw=
Subject key identifier:   DE:52:A0:4E:8F:1F:5A:99:55:E1:55:5E:60:EA:1A:4B:F5:61:84:04
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       19480BD05A04ED1CC2185E6E887A9F3E05F52D0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/DE52A04E8F1F5A9955E1555E60EA1A4BF5618404.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 26 Apr 2024 19:29:11 +0000
Certificate not after:    Fri 25 Apr 2025 19:34:11 +0000
Subordinate resources:    AS: 265017
                          IP: 170.84.140.0/22
                          IP: 2804:3178::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 04:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:48:0b:d0:5a:04:ed:1c:c2:18:5e:6e:88:7a:9f:3e:05:f5:2d:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 26 19:29:11 2024 GMT
            Not After : Apr 25 19:34:11 2025 GMT
        Subject: CN=DE52A04E8F1F5A9955E1555E60EA1A4BF5618404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bd:b1:db:cd:8a:59:1f:24:69:23:ac:78:c4:
                    fa:42:85:64:36:ef:7f:a4:3b:f0:35:bd:c1:4c:b1:
                    3c:24:73:85:50:a8:74:01:54:79:ed:6a:c3:61:c3:
                    bc:07:31:1f:1b:ed:3c:79:32:d9:ec:30:cf:4c:8a:
                    41:50:a4:06:57:12:3a:6c:8f:b1:8f:4c:a7:9e:9f:
                    a9:3a:1f:c5:9a:32:eb:f4:31:66:2a:41:5a:26:e5:
                    5a:c8:3c:44:6e:89:54:6e:db:72:3d:d4:28:57:71:
                    5f:26:92:a9:e0:07:a3:c8:16:9e:80:52:83:9f:17:
                    bf:8b:f1:ac:67:ac:64:8f:f0:8e:6e:3f:bb:1d:f8:
                    e3:aa:f8:2b:de:2e:95:2c:cc:4c:92:bd:a5:bd:2b:
                    09:b1:d8:51:6e:7b:f4:af:3c:f5:2e:af:72:df:d2:
                    49:f8:81:0c:2b:c4:d0:8d:e3:d7:14:d5:7a:23:7c:
                    d4:5f:df:2a:9b:7b:93:38:e4:6b:7b:f8:42:d9:92:
                    31:23:f8:c2:58:76:6f:b1:1a:fb:6a:e7:31:ea:87:
                    f3:00:cd:1c:6e:eb:3f:8b:15:d0:f8:a9:bd:f7:c7:
                    c0:41:ce:3f:70:cf:6b:1f:f9:73:ff:8f:75:06:81:
                    38:ac:e9:7c:8e:cb:04:f1:e8:cc:59:b3:40:3d:0e:
                    a9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DE:52:A0:4E:8F:1F:5A:99:55:E1:55:5E:60:EA:1A:4B:F5:61:84:04
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/DE52A04E8F1F5A9955E1555E60EA1A4BF5618404.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.140.0/22
                IPv6:
                  2804:3178::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265017

    Signature Algorithm: sha256WithRSAEncryption
         5f:8c:f2:38:88:ae:b3:76:a9:92:02:68:35:12:e7:15:7b:b1:
         33:50:c5:03:5a:bc:3d:7b:1a:46:db:bf:0a:90:da:dd:93:cf:
         21:0b:e8:50:3c:dd:bd:fb:16:ff:6d:4e:2e:b1:f4:94:7d:37:
         63:d1:59:d1:06:8d:f1:3e:cb:ad:e5:7f:72:74:cc:52:08:b5:
         92:39:a7:7f:74:14:58:fa:c8:7b:fc:63:de:87:07:16:85:39:
         16:1d:7a:a4:56:fb:78:1f:d7:9f:cc:11:d7:59:1c:d1:e9:02:
         6f:0a:27:7a:42:46:ac:69:67:e4:73:b1:2c:db:06:b0:05:d0:
         cd:1a:13:99:97:3e:5b:b5:0e:c3:07:cf:3c:05:96:04:16:14:
         be:16:9c:6b:71:08:9c:2e:ae:91:f1:59:ec:e5:06:8b:76:30:
         5a:07:fb:8c:24:2c:57:57:57:94:7e:46:2e:28:e7:f9:76:e1:
         64:37:39:87:75:31:5a:c1:19:b0:2e:a1:af:fc:c5:b1:fa:a0:
         4d:d1:6a:1e:79:6c:33:31:63:c8:c5:bc:a1:c3:6b:4b:30:4d:
         9d:d7:55:78:e5:d9:49:43:82:ad:3f:7a:86:47:d6:27:b0:a2:
         2d:49:f0:6f:05:7d:a5:ac:b5:9e:58:11:19:de:dd:e4:0f:d8:
         bb:62:7c:cf
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUGUgL0FoE7RzCGF5uiHqfPgX1LQwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MjYxOTI5MTFaFw0yNTA0MjUxOTM0MTFaMDMxMTAvBgNV
BAMTKERFNTJBMDRFOEYxRjVBOTk1NUUxNTU1RTYwRUExQTRCRjU2MTg0MDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKvbHbzYpZHyRpI6x4xPpChWQ2
73+kO/A1vcFMsTwkc4VQqHQBVHntasNhw7wHMR8b7Tx5MtnsMM9MikFQpAZXEjps
j7GPTKeen6k6H8WaMuv0MWYqQVom5VrIPERuiVRu23I91ChXcV8mkqngB6PIFp6A
UoOfF7+L8axnrGSP8I5uP7sd+OOq+CveLpUszEySvaW9Kwmx2FFue/SvPPUur3Lf
0kn4gQwrxNCN49cU1XojfNRf3yqbe5M45Gt7+ELZkjEj+MJYdm+xGvtq5zHqh/MA
zRxu6z+LFdD4qb33x8BBzj9wz2sf+XP/j3UGgTis6XyOywTx6MxZs0A9DqnLAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTeUqBOjx9amVXh
VV5g6hpL9WGEBDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRHNF
Tm5yVEZnZGh2Ylp1QjZWcTZTTVlpanMxdVpiYUR1RWo3QjkyNUN2TW0vMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Rz
RU5uclRGZ2RodmJadUI2VnE2U01ZaWpzMXVaYmFEdUVqN0I5MjVDdk1tLzAvREU1
MkEwNEU4RjFGNUE5OTU1RTE1NTVFNjBFQTFBNEJGNTYxODQwNC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCqlSMMA0EAgACMAcDBQAoBDF4MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQLOTANBgkqhkiG9w0BAQsFAAOCAQEAX4zyOIius3apkgJo
NRLnFXuxM1DFA1q8PXsaRtu/CpDa3ZPPIQvoUDzdvfsW/21OLrH0lH03Y9FZ0QaN
8T7LreV/cnTMUgi1kjmnf3QUWPrIe/xj3ocHFoU5Fh16pFb7eB/Xn8wR11kc0ekC
bwonekJGrGln5HOxLNsGsAXQzRoTmZc+W7UOwwfPPAWWBBYUvhaca3EInC6ukfFZ
7OUGi3YwWgf7jCQsV1dXlH5GLijn+XbhZDc5h3UxWsEZsC6hr/zFsfqgTdFqHnls
MzFjyMW8ocNrSzBNnddVeOXZSUOCrT96hkfWJ7CiLUnwbwV9pay1nlgRGd7d5A/Y
u2J8zw==
-----END CERTIFICATE-----
Generated at Sun Jun 2 01:36:52 2024 by rpki-client on console-ams.rpki-client.org