Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.cer
File:                     EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.cer (raw, json)
Hash identifier:          b9HBIUyY/q0GZk2ncH5FMg2GH6QOcA2MiBOk70GZ6DU=
Subject key identifier:   EA:35:0D:DF:6B:8B:36:1C:D6:83:E0:FE:B3:EB:B5:3F:41:71:A9:A6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       479A161CDF60583D085ABBCDF7CE8BD62709B56F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:27:40 +0000
Certificate not after:    Wed 02 Apr 2025 18:32:40 +0000
Subordinate resources:    AS: 270586
                          IP: 177.152.100.0/22
                          IP: 2804:6e48::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:9a:16:1c:df:60:58:3d:08:5a:bb:cd:f7:ce:8b:d6:27:09:b5:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:27:40 2024 GMT
            Not After : Apr  2 18:32:40 2025 GMT
        Subject: CN=EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:15:55:76:28:e7:50:77:36:42:15:9f:69:d7:
                    e4:88:85:91:a9:66:fb:08:11:5b:12:f3:8f:e7:4f:
                    56:7d:cc:6a:cf:55:fd:f6:d8:52:01:59:c2:65:98:
                    d2:80:6c:9d:59:cd:e9:0d:be:c1:e0:7e:01:76:29:
                    a8:a8:06:0b:8d:b5:31:51:37:38:7e:19:d5:22:b2:
                    73:a6:af:e0:62:97:39:99:ef:ed:b4:b6:29:75:a3:
                    64:e2:2e:b3:bf:14:64:c4:fb:4c:d2:eb:39:a2:1b:
                    ed:da:79:02:c5:cc:d2:59:2f:05:69:c9:95:2a:3b:
                    4f:1c:02:2a:a8:b1:81:2d:ac:e6:3e:87:53:93:74:
                    c7:2f:9d:a4:d9:03:c8:a6:5f:ef:2a:57:15:a2:d2:
                    0a:8f:23:24:60:80:f4:ec:d9:3c:7e:d1:9d:1e:28:
                    19:33:1a:2b:03:d1:bd:df:a4:df:1b:4b:71:d1:45:
                    5d:f0:14:65:a3:ce:b6:37:2c:2d:6e:41:9e:43:c5:
                    13:15:49:ee:c7:14:36:f9:12:1d:bd:9d:6c:06:0d:
                    51:d6:a2:29:cd:86:55:48:47:48:9c:40:f5:59:19:
                    2d:11:b3:a9:4e:02:35:2e:d9:ca:eb:4a:d6:5c:b2:
                    41:71:9e:18:48:ab:a4:66:a6:1b:b5:20:52:b6:97:
                    33:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EA:35:0D:DF:6B:8B:36:1C:D6:83:E0:FE:B3:EB:B5:3F:41:71:A9:A6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.100.0/22
                IPv6:
                  2804:6e48::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270586

    Signature Algorithm: sha256WithRSAEncryption
         01:4a:0b:8e:23:67:80:0b:2e:16:99:52:9b:88:00:a0:07:13:
         cc:25:9e:59:af:7d:83:4e:91:51:92:ff:d8:ea:e7:ff:31:59:
         c2:30:ad:dd:c3:af:ba:a6:88:7e:59:7b:d6:69:e3:cc:e9:7a:
         63:2b:a8:a7:69:2a:74:76:df:22:05:0f:df:f0:d5:e0:67:ba:
         8a:79:ea:3c:f1:bf:e2:53:49:ce:d8:85:02:50:a6:90:38:de:
         20:b3:6e:ec:86:08:c0:ed:a4:9e:13:6b:b3:f4:df:d7:94:f5:
         af:f2:ff:87:c3:75:ee:f4:e4:d4:f6:c8:68:c4:ef:c5:60:f3:
         3a:36:05:7a:fc:35:da:81:27:42:df:36:50:47:1f:e7:f6:bf:
         94:39:eb:6a:20:01:02:f9:6a:d0:aa:33:30:ab:0e:3f:62:05:
         37:17:a4:90:b3:0b:32:cc:5b:50:c4:fb:8e:a0:7b:47:50:0e:
         c2:60:17:50:c3:2c:ae:04:e6:07:ea:c2:7f:ed:c6:d0:c6:16:
         be:03:0a:3f:c8:69:02:6d:e8:e9:69:58:0f:c3:e5:1b:40:01:
         a9:bf:91:42:a0:31:2a:e2:71:9a:16:df:27:4e:03:cc:fd:56:
         e3:d4:e7:f0:ef:37:d5:ef:14:0d:09:40:ee:39:29:88:46:d5:
         d3:54:4a:8f
-----BEGIN CERTIFICATE-----
MIIGLTCCBRWgAwIBAgIUR5oWHN9gWD0IWrvN986L1icJtW8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMxODI3NDBaFw0yNTA0MDIxODMyNDBaMDMxMTAvBgNV
BAMTKEVBMzUwRERGNkI4QjM2MUNENjgzRTBGRUIzRUJCNTNGNDE3MUE5QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaFVV2KOdQdzZCFZ9p1+SIhZGp
ZvsIEVsS84/nT1Z9zGrPVf322FIBWcJlmNKAbJ1ZzekNvsHgfgF2KaioBguNtTFR
Nzh+GdUisnOmr+BilzmZ7+20til1o2TiLrO/FGTE+0zS6zmiG+3aeQLFzNJZLwVp
yZUqO08cAiqosYEtrOY+h1OTdMcvnaTZA8imX+8qVxWi0gqPIyRggPTs2Tx+0Z0e
KBkzGisD0b3fpN8bS3HRRV3wFGWjzrY3LC1uQZ5DxRMVSe7HFDb5Eh29nWwGDVHW
oinNhlVIR0icQPVZGS0Rs6lOAjUu2crrStZcskFxnhhIq6Rmphu1IFK2lzMDAgMB
AAGjggM3MIIDMzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTqNQ3fa4s2HNaD
4P6z67U/QXGppjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT0GCCsGAQUFBwELBIIBLzCCASswXAYI
KwYBBQUHMAWGUHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQUdL
OTh5NjNWN0c1dksxWDhpck5YRVp1TXZ1VG9YdXNKVVdCTDNIZ1dnNi8xMIGJBggr
BgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BR0s5
OHk2M1Y3RzV2SzFYOGlyTlhFWnVNdnVUb1h1c0pVV0JMM0hnV2c2LzEvRUEzNTBE
REY2QjhCMzYxQ0Q2ODNFMEZFQjNFQkI1M0Y0MTcxQTlBNi5tZnQwPwYIKwYBBQUH
MA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZpY2F0
aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/
BB8wHTAMBAIAATAGAwQCsZhkMA0EAgACMAcDBQAoBG5IMBoGCCsGAQUFBwEIAQH/
BAswCaAHMAUCAwQg+jANBgkqhkiG9w0BAQsFAAOCAQEAAUoLjiNngAsuFplSm4gA
oAcTzCWeWa99g06RUZL/2Orn/zFZwjCt3cOvuqaIfll71mnjzOl6Yyuop2kqdHbf
IgUP3/DV4Ge6innqPPG/4lNJztiFAlCmkDjeILNu7IYIwO2knhNrs/Tf15T1r/L/
h8N17vTk1PbIaMTvxWDzOjYFevw12oEnQt82UEcf5/a/lDnraiABAvlq0KozMKsO
P2IFNxekkLMLMsxbUMT7jqB7R1AOwmAXUMMsrgTmB+rCf+3G0MYWvgMKP8hpAm3o
6WlYD8PlG0ABqb+RQqAxKuJxmhbfJ04DzP1W49Tn8O831e8UDQlA7jkpiEbV01RK
jw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:07 2024 by rpki-client on console-fra.rpki-client.org