Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E098A6AE917635C7EC4C1C9E0654AC745C42D2D0.cer
File:                     E098A6AE917635C7EC4C1C9E0654AC745C42D2D0.cer (raw, json)
Hash identifier:          rCphLZO71a/YM4W34v2jRQT8fKRHRU2S3C+rh1HVEB4=
Subject key identifier:   E0:98:A6:AE:91:76:35:C7:EC:4C:1C:9E:06:54:AC:74:5C:42:D2:D0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1F8F4BBE361FF86531BEEFBB9E04DF6A19D4D880
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GC5q79XxcojkP7f4rnW277ADxFX1vMcQdAmf8LEZuamm/1/E098A6AE917635C7EC4C1C9E0654AC745C42D2D0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GC5q79XxcojkP7f4rnW277ADxFX1vMcQdAmf8LEZuamm/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 21 Apr 2024 02:58:57 +0000
Certificate not after:    Sun 20 Apr 2025 03:03:57 +0000
Subordinate resources:    AS: 272498
                          IP: 2804:8218::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 04:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:8f:4b:be:36:1f:f8:65:31:be:ef:bb:9e:04:df:6a:19:d4:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 21 02:58:57 2024 GMT
            Not After : Apr 20 03:03:57 2025 GMT
        Subject: CN=E098A6AE917635C7EC4C1C9E0654AC745C42D2D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a1:8b:42:21:48:74:2f:6f:53:14:bb:f2:d9:
                    45:42:0e:ea:8c:71:07:c7:e6:37:3c:4e:2b:d7:99:
                    50:18:c9:62:64:07:05:74:a2:a1:ee:2c:71:ad:a3:
                    56:a6:a0:27:c3:33:95:23:5f:d2:7c:45:e8:3f:ed:
                    19:23:ce:6c:18:b0:ff:57:e5:f3:46:f9:6d:bc:43:
                    ac:41:a9:4f:7b:f4:38:e9:81:c2:d3:39:b4:74:9c:
                    aa:d5:66:0e:3b:71:4d:54:1f:d1:1e:67:3e:63:89:
                    aa:2e:cc:64:6f:09:a1:5a:e3:4c:44:b0:34:e6:85:
                    13:d0:d3:1e:1d:06:47:ab:f1:d5:62:de:82:47:dd:
                    5f:04:cf:fa:c7:f8:56:99:b9:b2:12:a4:8f:28:62:
                    5c:f9:ab:d3:72:61:29:42:87:cc:18:07:ef:57:40:
                    f2:ef:9c:68:b2:f4:28:5c:4f:4f:9a:02:f4:a9:40:
                    ce:8e:83:65:51:28:d4:b5:6a:13:47:7b:27:9a:1b:
                    bc:57:01:d1:32:f5:09:88:2b:7f:cc:ed:17:c9:a6:
                    4e:6e:46:d9:8e:f4:8b:68:6a:eb:51:e8:2e:ea:e2:
                    dc:25:d4:06:50:3c:cb:79:8a:23:ec:03:bd:c0:f5:
                    d7:df:c9:7e:b4:01:d0:ef:e6:d7:f6:c9:5c:9c:c0:
                    46:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E0:98:A6:AE:91:76:35:C7:EC:4C:1C:9E:06:54:AC:74:5C:42:D2:D0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GC5q79XxcojkP7f4rnW277ADxFX1vMcQdAmf8LEZuamm/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GC5q79XxcojkP7f4rnW277ADxFX1vMcQdAmf8LEZuamm/1/E098A6AE917635C7EC4C1C9E0654AC745C42D2D0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8218::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272498

    Signature Algorithm: sha256WithRSAEncryption
         b4:0e:f5:06:47:c8:41:f3:19:c3:f8:86:37:90:54:8c:d5:14:
         83:b0:c9:90:e2:6b:22:c6:a6:f4:0a:80:f9:46:ec:e6:b7:59:
         01:16:63:7a:6a:14:13:14:e7:55:cd:a9:62:4a:74:45:b2:24:
         09:f2:27:89:07:6e:81:a7:55:76:75:45:e0:9d:69:70:2b:a9:
         a2:5b:43:93:2d:78:3e:2c:33:5b:39:19:96:7a:ec:a7:99:76:
         35:90:c4:00:4f:29:6a:f2:32:32:33:b2:cf:b4:6a:57:b4:1f:
         59:02:f6:63:e3:8c:ec:1a:37:c7:1d:d2:b2:d8:ef:70:4f:f7:
         2b:4f:ff:16:8d:74:63:1a:ed:ac:15:81:7f:12:3a:60:de:f0:
         7e:61:da:0d:57:a8:ba:aa:fb:d1:92:83:72:85:b4:ef:e2:a7:
         58:50:cc:a0:e0:23:f5:1e:2c:b6:51:62:d7:61:39:45:9b:24:
         9f:2e:d5:0f:d7:43:c7:86:58:c4:8b:65:02:1d:02:b2:97:4a:
         e5:05:9c:22:ae:e9:05:5f:7c:f0:52:d6:03:e9:7b:b4:f9:13:
         58:42:0d:66:4d:09:d9:df:1c:8c:83:49:08:37:6d:10:85:88:
         a5:e3:fd:53:8c:59:8b:18:ba:30:3b:a2:86:c7:2f:3a:20:2c:
         c8:e3:93:50
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgIUH49LvjYf+GUxvu+7ngTfahnU2IAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MjEwMjU4NTdaFw0yNTA0MjAwMzAzNTdaMDMxMTAvBgNV
BAMTKEUwOThBNkFFOTE3NjM1QzdFQzRDMUM5RTA2NTRBQzc0NUM0MkQyRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkoYtCIUh0L29TFLvy2UVCDuqM
cQfH5jc8TivXmVAYyWJkBwV0oqHuLHGto1amoCfDM5UjX9J8Reg/7RkjzmwYsP9X
5fNG+W28Q6xBqU979DjpgcLTObR0nKrVZg47cU1UH9EeZz5jiaouzGRvCaFa40xE
sDTmhRPQ0x4dBker8dVi3oJH3V8Ez/rH+FaZubISpI8oYlz5q9NyYSlCh8wYB+9X
QPLvnGiy9ChcT0+aAvSpQM6Og2VRKNS1ahNHeyeaG7xXAdEy9QmIK3/M7RfJpk5u
RtmO9ItoautR6C7q4twl1AZQPMt5iiPsA73A9dffyX60AdDv5tf2yVycwEZNAgMB
AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTgmKaukXY1x+xM
HJ4GVKx0XELS0DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR0M1
cTc5WHhjb2prUDdmNHJuVzI3N0FEeEZYMXZNY1FkQW1mOExFWnVhbW0vMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dD
NXE3OVh4Y29qa1A3ZjRyblcyNzdBRHhGWDF2TWNRZEFtZjhMRVp1YW1tLzEvRTA5
OEE2QUU5MTc2MzVDN0VDNEMxQzlFMDY1NEFDNzQ1QzQyRDJEMC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASCGDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME
KHIwDQYJKoZIhvcNAQELBQADggEBALQO9QZHyEHzGcP4hjeQVIzVFIOwyZDiayLG
pvQKgPlG7Oa3WQEWY3pqFBMU51XNqWJKdEWyJAnyJ4kHboGnVXZ1ReCdaXArqaJb
Q5MteD4sM1s5GZZ67KeZdjWQxABPKWryMjIzss+0ale0H1kC9mPjjOwaN8cd0rLY
73BP9ytP/xaNdGMa7awVgX8SOmDe8H5h2g1XqLqq+9GSg3KFtO/ip1hQzKDgI/Ue
LLZRYtdhOUWbJJ8u1Q/XQ8eGWMSLZQIdArKXSuUFnCKu6QVffPBS1gPpe7T5E1hC
DWZNCdnfHIyDSQg3bRCFiKXj/VOMWYsYujA7oobHLzogLMjjk1A=
-----END CERTIFICATE-----
Generated at Sun Jun 2 01:36:52 2024 by rpki-client on console-ams.rpki-client.org