Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EAC898E59AFA51913FC6E858E5AF519E53687EE6.cer
File:                     EAC898E59AFA51913FC6E858E5AF519E53687EE6.cer (raw, json)
Hash identifier:          K7gZ4+3IQOlCf0UEal54+CXCfOJlt/1q2rUUVM+wz08=
Subject key identifier:   EA:C8:98:E5:9A:FA:51:91:3F:C6:E8:58:E5:AF:51:9E:53:68:7E:E6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6F804C412138F94792E95F00EDC1512B0E2CBFAF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/EAC898E59AFA51913FC6E858E5AF519E53687EE6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 03 Sep 2024 12:27:56 +0000
Certificate not after:    Tue 02 Sep 2025 12:32:56 +0000
Subordinate resources:    AS: 268858
                          IP: 45.174.160.0/22
                          IP: 2804:5b9c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:80:4c:41:21:38:f9:47:92:e9:5f:00:ed:c1:51:2b:0e:2c:bf:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep  3 12:27:56 2024 GMT
            Not After : Sep  2 12:32:56 2025 GMT
        Subject: CN=EAC898E59AFA51913FC6E858E5AF519E53687EE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f4:98:11:56:1a:d8:4f:b4:6b:0a:71:3f:7f:
                    99:9c:82:96:40:96:fc:ff:01:34:46:cd:f0:88:f8:
                    f6:3c:34:f4:f9:8e:d2:c1:af:57:d3:3b:65:9c:d7:
                    cd:6c:bc:12:1b:9c:23:99:91:7a:1e:2b:17:8c:e3:
                    95:51:f9:30:25:f1:78:d8:9a:ed:9e:f4:8a:a5:01:
                    57:16:4d:40:fc:e0:c9:38:3b:e9:aa:b0:fb:fd:4b:
                    3d:76:bb:f1:fb:e8:37:47:12:56:b7:2a:df:1d:7c:
                    6c:01:62:fb:45:27:dc:0b:f1:ca:9c:9d:66:12:3f:
                    65:5f:35:35:af:aa:36:ed:7a:45:f2:73:52:66:c9:
                    98:49:14:bf:11:47:cb:d1:cd:7a:1a:f0:d9:c6:49:
                    0c:cf:90:9e:70:fb:9d:2c:2b:76:1c:b3:37:15:eb:
                    10:cd:30:9a:92:0c:3f:59:6c:a0:bb:cb:44:31:f5:
                    6b:3e:51:e7:ef:1c:df:58:9f:3c:8d:5d:18:99:22:
                    e0:69:a8:61:fb:ce:a8:7c:41:4c:1a:d6:80:10:bc:
                    d0:7d:07:26:f2:da:12:7f:4f:08:28:79:6c:25:93:
                    22:28:f5:09:c5:9d:cd:46:7e:cc:d9:78:24:76:f5:
                    fb:36:52:5a:09:62:95:67:3e:9d:6a:4f:e4:2c:b6:
                    2a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EA:C8:98:E5:9A:FA:51:91:3F:C6:E8:58:E5:AF:51:9E:53:68:7E:E6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/EAC898E59AFA51913FC6E858E5AF519E53687EE6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.160.0/22
                IPv6:
                  2804:5b9c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268858

    Signature Algorithm: sha256WithRSAEncryption
         1a:bf:18:37:96:f6:e8:7e:bf:27:3e:d7:15:ed:1f:cf:9b:f1:
         41:60:34:81:ad:95:8f:49:e9:73:bc:d9:b1:b9:99:f5:10:1c:
         f2:52:86:c1:f2:d8:d2:fa:cb:a7:33:4e:b1:f4:58:7d:be:65:
         dd:d7:32:1d:1e:b5:b9:da:7b:7f:6f:1f:45:fb:0b:bc:ca:1c:
         ca:0c:f0:c1:11:1d:4c:7d:fe:aa:ae:35:d8:d3:9d:e8:23:dd:
         7b:51:14:db:41:1e:0d:88:30:3f:50:5a:9c:9c:fb:c5:ec:fe:
         38:ec:df:e4:1f:ff:9f:78:70:9c:4c:83:5b:84:23:57:16:60:
         06:24:b4:ca:3e:5b:fa:dd:39:5d:0e:4c:21:9c:82:3f:6b:dc:
         60:be:cc:e5:8c:4a:a1:2c:7f:5a:be:a3:39:fc:b4:16:2f:20:
         aa:1d:37:d2:76:1f:5a:e7:d3:b7:14:35:39:72:90:40:bb:d3:
         b7:a4:3b:58:77:22:2d:72:44:00:3f:67:b5:ff:fb:bb:30:b0:
         78:43:41:d9:a8:52:6a:c2:93:c9:27:87:4a:c5:5b:cf:83:ca:
         89:2d:f1:c8:2c:c1:55:b2:54:08:e8:0e:ba:34:31:0a:40:6b:
         c1:67:dc:35:42:1e:01:b0:0c:c9:67:75:24:78:6f:bc:0a:0a:
         5b:50:fd:8a
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUb4BMQSE4+UeS6V8A7cFRKw4sv68wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA5MDMxMjI3NTZaFw0yNTA5MDIxMjMyNTZaMDMxMTAvBgNV
BAMTKEVBQzg5OEU1OUFGQTUxOTEzRkM2RTg1OEU1QUY1MTlFNTM2ODdFRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb9JgRVhrYT7RrCnE/f5mcgpZA
lvz/ATRGzfCI+PY8NPT5jtLBr1fTO2Wc181svBIbnCOZkXoeKxeM45VR+TAl8XjY
mu2e9IqlAVcWTUD84Mk4O+mqsPv9Sz12u/H76DdHEla3Kt8dfGwBYvtFJ9wL8cqc
nWYSP2VfNTWvqjbtekXyc1JmyZhJFL8RR8vRzXoa8NnGSQzPkJ5w+50sK3YcszcV
6xDNMJqSDD9ZbKC7y0Qx9Ws+UefvHN9YnzyNXRiZIuBpqGH7zqh8QUwa1oAQvNB9
Byby2hJ/TwgoeWwlkyIo9QnFnc1GfszZeCR29fs2UloJYpVnPp1qT+QstipjAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTqyJjlmvpRkT/G
6Fjlr1GeU2h+5jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR2Nt
M2liQXRCZG5rdDFZRGs5d3p5NmRCNllVYXpmOFJLU2dVTFVQekdhQnkvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dj
bTNpYkF0QmRua3QxWURrOXd6eTZkQjZZVWF6ZjhSS1NnVUxVUHpHYUJ5LzAvRUFD
ODk4RTU5QUZBNTE5MTNGQzZFODU4RTVBRjUxOUU1MzY4N0VFNi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLa6gMA0EAgACMAcDBQAoBFucMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQaOjANBgkqhkiG9w0BAQsFAAOCAQEAGr8YN5b26H6/Jz7X
Fe0fz5vxQWA0ga2Vj0npc7zZsbmZ9RAc8lKGwfLY0vrLpzNOsfRYfb5l3dcyHR61
udp7f28fRfsLvMocygzwwREdTH3+qq412NOd6CPde1EU20EeDYgwP1BanJz7xez+
OOzf5B//n3hwnEyDW4QjVxZgBiS0yj5b+t05XQ5MIZyCP2vcYL7M5YxKoSx/Wr6j
Ofy0Fi8gqh030nYfWufTtxQ1OXKQQLvTt6Q7WHciLXJEAD9ntf/7uzCweENB2ahS
asKTySeHSsVbz4PKiS3xyCzBVbJUCOgOujQxCkBrwWfcNUIeAbAMyWd1JHhvvAoK
W1D9ig==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:45:37 2024 by rpki-client on console-ams.rpki-client.org