Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.cer
File:                     E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.cer (raw, json)
Hash identifier:          LxZoIUINdG51oKTJXb7SuTqqB875AX4753aObD2cj4E=
Subject key identifier:   E1:BB:FD:E5:A7:EB:A9:69:95:77:93:A5:D2:A2:93:42:8D:4D:7B:B9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       30B8252358B287E8CB80B1F4A80C0FF1CD5AAD7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 24 Apr 2024 17:54:57 +0000
Certificate not after:    Wed 23 Apr 2025 17:59:57 +0000
Subordinate resources:    AS: 264125
                          IP: 138.94.44.0/22
                          IP: 2804:22d4::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b8:25:23:58:b2:87:e8:cb:80:b1:f4:a8:0c:0f:f1:cd:5a:ad:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 24 17:54:57 2024 GMT
            Not After : Apr 23 17:59:57 2025 GMT
        Subject: CN=E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:68:fb:24:a7:79:71:56:c4:74:fa:e3:ae:cc:
                    b5:27:26:63:e4:ef:e0:2b:bc:31:49:f3:f8:a7:a4:
                    1c:e4:c5:92:09:df:b8:0d:7d:af:73:26:12:10:01:
                    11:42:4e:90:14:e4:93:62:9a:19:c7:8b:22:40:05:
                    ba:da:9f:20:6f:a9:84:5e:05:7f:e0:6d:14:9f:8d:
                    30:c1:11:34:f9:80:ba:66:72:de:ce:01:aa:66:51:
                    03:e2:4e:e6:b0:f7:a5:b3:43:c1:c3:b8:3c:f9:35:
                    c8:a2:4e:8b:2b:12:64:5c:10:da:6e:b3:a7:9f:89:
                    74:de:4a:6c:1e:1f:2a:4d:ed:bf:c5:cd:a1:ef:89:
                    cd:d2:b0:c2:c5:fa:f8:cd:61:03:cf:95:ec:e3:5f:
                    5c:b6:d7:c2:4e:28:51:51:af:b5:c5:a9:44:db:b9:
                    38:66:be:34:3b:41:d7:3b:1b:18:db:cb:2c:9b:bb:
                    ab:49:9e:d7:e9:29:7a:a1:fd:39:53:0e:12:86:35:
                    fc:2f:f7:97:88:98:23:b4:8b:81:52:b6:ad:36:0a:
                    11:1f:5e:3f:37:ea:8a:88:4c:18:7f:fe:8f:af:1a:
                    47:f5:3b:ba:3b:d8:b5:24:bb:12:ca:03:32:b6:05:
                    d9:6d:7b:49:a0:e2:1e:18:dc:d1:21:15:5c:b4:56:
                    44:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E1:BB:FD:E5:A7:EB:A9:69:95:77:93:A5:D2:A2:93:42:8D:4D:7B:B9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.44.0/22
                IPv6:
                  2804:22d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264125

    Signature Algorithm: sha256WithRSAEncryption
         38:fa:a1:4d:a8:bf:07:0c:da:ad:41:c3:94:15:34:20:68:62:
         fc:d0:47:c3:d1:04:48:db:ee:8d:e6:2c:eb:34:c8:86:54:b2:
         d6:63:4a:ac:68:54:e9:11:c4:a1:13:03:2b:32:1d:47:20:d2:
         c4:3b:69:8c:3d:b0:8e:a2:e0:70:af:c5:1b:10:b8:1a:ac:48:
         48:c7:74:de:2d:b6:46:21:02:3c:b4:cd:6a:77:c4:1a:0c:7d:
         e3:c2:f6:76:48:e0:ea:10:20:77:b7:ea:47:35:b1:29:db:f7:
         cf:a0:46:97:64:c4:25:2a:73:30:84:fc:fd:66:93:5e:de:dc:
         35:68:47:d6:d4:f6:7b:00:04:f4:9a:2d:ff:86:93:20:fa:cc:
         ca:82:d5:2d:d7:ae:fd:a5:b0:d5:7f:70:0b:bf:80:13:94:81:
         d6:79:63:93:c8:11:9c:f2:d1:95:33:76:c2:6f:23:df:63:38:
         79:78:2c:e8:8a:09:29:0c:8c:40:4d:ad:fc:eb:66:c9:e7:5c:
         71:20:fb:55:b0:96:a1:8d:9d:d8:6d:f3:cc:d3:af:c3:77:b4:
         2a:c7:63:80:f4:d6:e6:3f:68:f1:54:53:4d:d6:4f:d6:0f:9c:
         85:c9:0d:ac:eb:74:fd:4e:d6:6a:ab:cc:22:8c:97:4c:da:90:
         87:0a:b6:46
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUMLglI1iyh+jLgLH0qAwP8c1arXowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MjQxNzU0NTdaFw0yNTA0MjMxNzU5NTdaMDMxMTAvBgNV
BAMTKEUxQkJGREU1QTdFQkE5Njk5NTc3OTNBNUQyQTI5MzQyOEQ0RDdCQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQaPskp3lxVsR0+uOuzLUnJmPk
7+ArvDFJ8/inpBzkxZIJ37gNfa9zJhIQARFCTpAU5JNimhnHiyJABbranyBvqYRe
BX/gbRSfjTDBETT5gLpmct7OAapmUQPiTuaw96WzQ8HDuDz5NciiTosrEmRcENpu
s6efiXTeSmweHypN7b/FzaHvic3SsMLF+vjNYQPPlezjX1y218JOKFFRr7XFqUTb
uThmvjQ7Qdc7Gxjbyyybu6tJntfpKXqh/TlTDhKGNfwv95eImCO0i4FStq02ChEf
Xj836oqITBh//o+vGkf1O7o72LUkuxLKAzK2Bdlte0mg4h4Y3NEhFVy0VkQnAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBThu/3lp+upaZV3
k6XSopNCjU17uTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNnNU
RzIxb0hvZExRcXVyVjFoNldoaE51Sm9ZQ3VSa0xBS3ZxTlFtbWZHZ0UvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZz
VEcyMW9Ib2RMUXF1clYxaDZXaGhOdUpvWUN1UmtMQUt2cU5RbW1mR2dFLzAvRTFC
QkZERTVBN0VCQTk2OTk1Nzc5M0E1RDJBMjkzNDI4RDREN0JCOS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCil4sMA0EAgACMAcDBQAoBCLUMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQHvTANBgkqhkiG9w0BAQsFAAOCAQEAOPqhTai/BwzarUHD
lBU0IGhi/NBHw9EESNvujeYs6zTIhlSy1mNKrGhU6RHEoRMDKzIdRyDSxDtpjD2w
jqLgcK/FGxC4GqxISMd03i22RiECPLTNanfEGgx948L2dkjg6hAgd7fqRzWxKdv3
z6BGl2TEJSpzMIT8/WaTXt7cNWhH1tT2ewAE9Jot/4aTIPrMyoLVLdeu/aWw1X9w
C7+AE5SB1nljk8gRnPLRlTN2wm8j32M4eXgs6IoJKQyMQE2t/OtmyedccSD7VbCW
oY2d2G3zzNOvw3e0KsdjgPTW5j9o8VRTTdZP1g+chckNrOt0/U7WaqvMIoyXTNqQ
hwq2Rg==
-----END CERTIFICATE-----
Generated at Tue Nov 26 06:33:12 2024 by rpki-client on console-fra.rpki-client.org