Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.cer
File:                     E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.cer (raw, json)
Hash identifier:          HgbGobNVtKIMiaiGuDlIPmMEw2A/SVh8ADDNB9Mj4G4=
Subject key identifier:   E7:08:AB:F0:39:B1:FF:20:F9:DE:5F:F6:CE:1D:E3:DC:BB:AF:D6:B4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7CDB24F6F0D84C5125C6EFC2CBC4BD47CF09E15E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 10:02:09 +0000
Certificate not after:    Thu 03 Apr 2025 10:07:09 +0000
Subordinate resources:    AS: 269337
                          IP: 45.183.180.0/22
                          IP: 2804:6314::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:db:24:f6:f0:d8:4c:51:25:c6:ef:c2:cb:c4:bd:47:cf:09:e1:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 10:02:09 2024 GMT
            Not After : Apr  3 10:07:09 2025 GMT
        Subject: CN=E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:95:33:0f:da:00:16:88:51:4b:b0:e0:b7:f5:
                    45:63:9b:e4:5b:9a:5b:0f:64:f8:e3:2c:a3:8c:f9:
                    95:b2:21:ae:7c:e0:0a:f5:9c:19:50:ec:da:a2:93:
                    3f:39:11:67:76:d8:96:0f:2d:55:bf:66:ef:6d:38:
                    22:b9:ca:70:b4:77:5b:b9:68:70:c2:72:eb:ae:08:
                    35:7e:ce:09:e2:46:c9:ef:23:8e:82:da:ab:a3:66:
                    eb:2f:c8:a6:8d:d2:0e:26:d4:89:4f:f8:ac:a7:b1:
                    26:fd:e7:35:e9:da:d5:5d:e7:dd:c0:04:13:a9:f4:
                    1e:8f:76:53:ad:d5:3f:10:49:fe:95:88:2e:2d:ef:
                    23:cf:65:da:83:42:52:25:35:8f:1e:5c:ff:c7:b9:
                    de:fa:e0:34:7f:d7:c0:24:b0:63:6d:b6:db:f0:8c:
                    48:dc:2f:77:8e:56:e1:ee:7c:57:6d:aa:6f:34:82:
                    6e:d1:64:bd:a7:43:95:53:1b:72:27:89:38:a9:d5:
                    4e:da:cc:58:bf:f4:4f:83:28:9c:93:2d:9d:8c:eb:
                    6c:9a:6c:97:43:f3:09:0b:3c:0d:5a:a3:cf:6b:9f:
                    4d:21:dc:61:42:bb:34:1a:06:58:63:cb:aa:5b:dd:
                    5d:75:b4:0f:45:d0:ad:c8:f0:d3:db:72:30:18:4f:
                    29:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E7:08:AB:F0:39:B1:FF:20:F9:DE:5F:F6:CE:1D:E3:DC:BB:AF:D6:B4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.180.0/22
                IPv6:
                  2804:6314::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269337

    Signature Algorithm: sha256WithRSAEncryption
         71:53:f5:a6:e1:64:a9:92:47:4b:21:af:5f:c5:92:63:28:a6:
         fc:cd:b2:17:e9:f7:8f:93:99:0d:c5:a9:09:67:9f:e7:b9:ec:
         57:3b:42:68:a6:78:de:e3:b7:46:63:7b:02:96:87:e9:bf:3e:
         d2:a3:55:83:9b:2d:de:23:9f:b3:59:82:80:2b:22:c2:20:e4:
         61:37:fa:cd:d8:fe:b9:a5:20:c1:55:88:c1:93:52:12:1e:c9:
         8b:a2:94:21:fd:c4:bc:84:4d:f8:73:7d:ab:ef:8e:3f:3b:d5:
         bd:ee:6c:1b:03:0c:8f:32:e9:9b:23:0e:c1:c2:a8:10:ad:c5:
         ee:38:68:85:5d:d4:6b:7e:01:21:2f:10:f6:8a:48:9c:b7:b3:
         5d:d9:e4:44:8f:bd:3e:9e:3d:72:e5:35:f5:7b:c3:16:19:d9:
         63:15:5c:08:ed:79:e8:e9:a4:be:25:aa:23:e7:c8:f8:a4:d1:
         df:0d:57:1c:f3:91:09:57:f9:f7:fb:1b:34:1b:2b:19:fc:c0:
         a5:53:35:46:7a:ae:7f:14:da:4e:9f:ac:8d:38:15:8d:c6:90:
         be:79:28:af:45:0a:af:db:0d:d5:48:13:bb:77:eb:ff:df:a0:
         e5:74:ca:a0:e1:0d:b7:ef:2b:ba:d0:db:8b:d8:c4:e7:58:e0:
         78:8c:66:a3
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUfNsk9vDYTFElxu/Cy8S9R88J4V4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQxMDAyMDlaFw0yNTA0MDMxMDA3MDlaMDMxMTAvBgNV
BAMTKEU3MDhBQkYwMzlCMUZGMjBGOURFNUZGNkNFMURFM0RDQkJBRkQ2QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLlTMP2gAWiFFLsOC39UVjm+Rb
mlsPZPjjLKOM+ZWyIa584Ar1nBlQ7Nqikz85EWd22JYPLVW/Zu9tOCK5ynC0d1u5
aHDCcuuuCDV+zgniRsnvI46C2qujZusvyKaN0g4m1IlP+KynsSb95zXp2tVd593A
BBOp9B6PdlOt1T8QSf6ViC4t7yPPZdqDQlIlNY8eXP/Hud764DR/18AksGNtttvw
jEjcL3eOVuHufFdtqm80gm7RZL2nQ5VTG3IniTip1U7azFi/9E+DKJyTLZ2M62ya
bJdD8wkLPA1ao89rn00h3GFCuzQaBlhjy6pb3V11tA9F0K3I8NPbcjAYTynXAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTnCKvwObH/IPne
X/bOHePcu6/WtDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ0g0
NmE5dFJGdFZSNWJaRkthalZlZTlZNzV2cDQ0QzZhMzRMMVlzblVqSEUvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NI
NDZhOXRSRnRWUjViWkZLYWpWZWU5WTc1dnA0NEM2YTM0TDFZc25VakhFLzEvRTcw
OEFCRjAzOUIxRkYyMEY5REU1RkY2Q0UxREUzRENCQkFGRDZCNC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLbe0MA0EAgACMAcDBQAoBGMUMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQcGTANBgkqhkiG9w0BAQsFAAOCAQEAcVP1puFkqZJHSyGv
X8WSYyim/M2yF+n3j5OZDcWpCWef57nsVztCaKZ43uO3RmN7ApaH6b8+0qNVg5st
3iOfs1mCgCsiwiDkYTf6zdj+uaUgwVWIwZNSEh7Ji6KUIf3EvIRN+HN9q++OPzvV
ve5sGwMMjzLpmyMOwcKoEK3F7jhohV3Ua34BIS8Q9opInLezXdnkRI+9Pp49cuU1
9XvDFhnZYxVcCO156OmkviWqI+fI+KTR3w1XHPORCVf59/sbNBsrGfzApVM1Rnqu
fxTaTp+sjTgVjcaQvnkor0UKr9sN1UgTu3fr/9+g5XTKoOENt+8rutDbi9jE51jg
eIxmow==
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:06:40 2024 by rpki-client on console-ams.rpki-client.org