Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer
File:                     E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer (raw, json)
Hash identifier:          SkVnsT+WO0x6De7cC90bNI4+wrKuHyzSLypXq+0JXkg=
Subject key identifier:   E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1E8F83DC66F07CF269F1CAEC19003E067AAE7466
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 11:05:20 +0000
Certificate not after:    Thu 03 Apr 2025 11:10:20 +0000
Subordinate resources:    AS: 264001
                          IP: 143.0.200.0/22
                          IP: 170.0.24.0/22
                          IP: 170.246.188.0/22
                          IP: 2804:2948::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 23:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:8f:83:dc:66:f0:7c:f2:69:f1:ca:ec:19:00:3e:06:7a:ae:74:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 11:05:20 2024 GMT
            Not After : Apr  3 11:10:20 2025 GMT
        Subject: CN=E4E679E110DA011F952FB409E81E8EC81BAE43EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e4:d2:49:96:c3:34:c6:8d:c8:52:1b:6c:24:
                    78:6d:4c:e8:52:53:19:e0:b5:ec:e6:3f:07:e8:3f:
                    ad:84:e4:bc:4a:06:09:33:a4:9d:e6:72:81:77:a1:
                    1f:8b:d4:d0:f5:ce:a1:da:72:85:16:3d:6d:92:e4:
                    fb:5a:94:5b:1f:49:8f:73:9e:7b:e0:93:72:08:fa:
                    99:54:d9:6c:f2:ce:bf:22:19:5f:ce:20:70:5b:48:
                    7b:aa:89:a8:2b:e1:e0:c0:9a:b5:fb:10:65:6b:d0:
                    44:9f:17:c0:d7:4d:15:f2:bd:0e:10:08:b7:cc:7a:
                    1c:82:1e:6c:ae:fc:2e:12:44:f5:c1:82:b7:7c:bc:
                    da:05:ca:2d:2d:a9:b0:53:39:59:e1:67:ca:00:7d:
                    f9:11:57:b5:96:28:a8:92:8b:6c:79:ed:ed:2e:67:
                    2a:8f:e3:48:c5:e0:40:b3:76:98:2c:e1:1c:38:2b:
                    42:77:b3:bd:32:51:b3:8c:2d:cf:f5:07:4c:fb:58:
                    68:9d:bc:08:43:49:c4:c9:bf:8e:b2:cf:e3:98:08:
                    10:01:ec:3a:6e:67:98:d0:92:fa:bc:7e:20:e6:f8:
                    f7:56:5c:d8:2b:9f:83:25:e6:d8:95:68:fb:e5:da:
                    eb:dc:50:d2:c2:05:37:50:16:1e:78:dd:0b:73:27:
                    cc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.200.0/22
                  170.0.24.0/22
                  170.246.188.0/22
                IPv6:
                  2804:2948::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264001

    Signature Algorithm: sha256WithRSAEncryption
         cb:84:40:b2:1e:65:2f:c1:a1:e3:9f:78:35:63:19:f7:73:9f:
         fa:c9:66:83:72:d1:82:c1:88:5c:e6:0d:47:bb:3b:b2:e7:93:
         dd:3e:f7:be:dd:f2:34:9e:2b:c7:f0:2d:3d:a0:da:93:49:0c:
         09:7f:5b:d6:72:d1:68:79:2f:b1:7e:94:ca:3e:76:24:78:40:
         98:d1:65:e2:18:03:85:97:e1:c1:d8:c6:f4:ed:19:88:0a:d7:
         cb:e6:dd:03:54:7f:86:9a:c7:a0:29:44:5e:fd:66:42:47:fe:
         f0:fa:e0:e9:5a:04:da:fe:11:9b:49:48:45:6b:63:81:d5:9b:
         5c:4c:8a:f8:a4:5a:01:5a:88:aa:94:66:cd:29:b6:82:ab:07:
         ac:89:3c:db:fc:e3:7e:82:d6:c1:29:10:5e:72:1d:16:95:e7:
         1d:c7:a0:7c:ab:a6:7b:17:01:ee:b6:b3:f8:0e:3b:c3:fd:c2:
         b7:59:06:5b:52:fc:1e:b4:7a:1f:50:c5:4d:96:e4:c9:15:12:
         46:a2:6c:10:83:74:a3:86:24:64:80:36:c3:ab:55:c5:ab:e4:
         51:fe:16:63:44:9d:9a:61:a1:ce:8f:63:c4:f7:f1:58:4b:6d:
         4c:e4:e0:b1:f4:91:77:a3:ff:41:ae:34:2f:06:e9:6d:0e:d7:
         3d:2d:14:03
-----BEGIN CERTIFICATE-----
MIIGPDCCBSSgAwIBAgIUHo+D3GbwfPJp8crsGQA+BnqudGYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQxMTA1MjBaFw0yNTA0MDMxMTEwMjBaMDMxMTAvBgNV
BAMTKEU0RTY3OUUxMTBEQTAxMUY5NTJGQjQwOUU4MUU4RUM4MUJBRTQzRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE5NJJlsM0xo3IUhtsJHhtTOhS
UxngtezmPwfoP62E5LxKBgkzpJ3mcoF3oR+L1ND1zqHacoUWPW2S5PtalFsfSY9z
nnvgk3II+plU2Wzyzr8iGV/OIHBbSHuqiagr4eDAmrX7EGVr0ESfF8DXTRXyvQ4Q
CLfMehyCHmyu/C4SRPXBgrd8vNoFyi0tqbBTOVnhZ8oAffkRV7WWKKiSi2x57e0u
ZyqP40jF4ECzdpgs4Rw4K0J3s70yUbOMLc/1B0z7WGidvAhDScTJv46yz+OYCBAB
7DpuZ5jQkvq8fiDm+PdWXNgrn4Ml5tiVaPvl2uvcUNLCBTdQFh543QtzJ8xbAgMB
AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTk5nnhENoBH5Uv
tAnoHo7IG65D7zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vREc5
cURBZHZQbkJxMnJNeFQ4NEVOUG51WU5RRzZ5RDlyS1NYeDNrNmlCOGovMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RH
OXFEQWR2UG5CcTJyTXhUODRFTlBudVlOUUc2eUQ5cktTWHgzazZpQjhqLzEvRTRF
Njc5RTExMERBMDExRjk1MkZCNDA5RTgxRThFQzgxQkFFNDNFRi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH
AQH/BCswKTAYBAIAATASAwQCjwDIAwQCqgAYAwQCqva8MA0EAgACMAcDBQAoBClI
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQHQTANBgkqhkiG9w0BAQsFAAOCAQEA
y4RAsh5lL8Gh4594NWMZ93Of+slmg3LRgsGIXOYNR7s7sueT3T73vt3yNJ4rx/At
PaDak0kMCX9b1nLRaHkvsX6Uyj52JHhAmNFl4hgDhZfhwdjG9O0ZiArXy+bdA1R/
hprHoClEXv1mQkf+8Prg6VoE2v4Rm0lIRWtjgdWbXEyK+KRaAVqIqpRmzSm2gqsH
rIk82/zjfoLWwSkQXnIdFpXnHcegfKumexcB7raz+A47w/3Ct1kGW1L8HrR6H1DF
TZbkyRUSRqJsEIN0o4YkZIA2w6tVxavkUf4WY0SdmmGhzo9jxPfxWEttTOTgsfSR
d6P/Qa40LwbpbQ7XPS0UAw==
-----END CERTIFICATE-----
Generated at Sat Jun 1 23:43:36 2024 by rpki-client on console-fra.rpki-client.org