Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer
File:                     ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer (raw, json)
Hash identifier:          vwsXYGVRVVcq7ALmFXiYYutMvTYB8/J1cZmMN9In2A8=
Subject key identifier:   EC:D0:DB:C5:E6:36:A2:1B:4C:E0:F5:BA:5C:D7:18:92:C3:1B:B6:A8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1753DB77AE1F5B416F3F0334B79082443CCFF40F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 14:22:11 +0000
Certificate not after:    Thu 03 Apr 2025 14:27:11 +0000
Subordinate resources:    AS: 269597
                          IP: 45.71.208.0/22
                          IP: 45.181.36.0/22
                          IP: 45.189.176.0/22
                          IP: 2804:6700::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jul 2024 14:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:53:db:77:ae:1f:5b:41:6f:3f:03:34:b7:90:82:44:3c:cf:f4:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 14:22:11 2024 GMT
            Not After : Apr  3 14:27:11 2025 GMT
        Subject: CN=ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:f5:66:57:41:1a:00:cc:5b:9e:9d:94:70:46:
                    0c:72:41:ac:23:8d:4f:0c:2a:f2:95:db:13:b9:21:
                    d6:f3:9c:9b:1b:4b:87:89:53:bf:09:f3:15:59:00:
                    16:ce:85:a2:84:e3:81:09:e6:a2:7e:fa:70:c5:4b:
                    4f:a3:80:5c:9e:4e:50:59:65:50:9d:41:ee:e5:39:
                    ae:12:d2:92:77:5e:ab:c2:83:29:ad:10:76:cd:77:
                    a2:c0:de:2b:58:76:91:4c:25:7f:ef:96:1d:05:0f:
                    b7:7a:87:5f:9b:f7:2c:3c:af:f5:b3:12:fe:fd:a1:
                    cf:f0:57:b8:8d:47:79:e4:54:0b:1d:0c:02:18:19:
                    29:54:79:5a:a8:06:04:34:ad:78:c2:dd:77:06:bc:
                    b5:50:11:17:57:95:2f:52:05:61:79:bb:6a:61:c3:
                    ee:55:ef:81:20:e5:86:a3:2a:0c:da:7e:e7:b3:21:
                    47:81:5a:0f:63:76:a8:80:57:f6:83:60:3f:bc:58:
                    f7:48:ab:65:dd:c3:97:36:8d:ee:81:3f:2b:cc:5d:
                    fc:07:64:c7:9c:e5:4e:6a:b3:0f:5c:06:c9:89:1f:
                    68:b2:fe:64:33:66:d8:5d:5b:88:c5:a9:f6:e2:93:
                    24:d9:f4:78:af:44:6c:c4:7c:96:a5:3a:c5:54:fc:
                    91:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EC:D0:DB:C5:E6:36:A2:1B:4C:E0:F5:BA:5C:D7:18:92:C3:1B:B6:A8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.208.0/22
                  45.181.36.0/22
                  45.189.176.0/22
                IPv6:
                  2804:6700::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269597

    Signature Algorithm: sha256WithRSAEncryption
         70:9e:c8:23:87:d9:49:ce:cc:ca:b8:52:1f:e5:48:79:8a:93:
         ce:f6:05:8c:40:3c:53:70:16:86:84:0f:f6:c5:a8:b9:41:5d:
         98:d3:44:7f:4b:60:5b:1e:c7:44:66:95:97:ac:d1:62:61:31:
         31:56:63:8c:b6:f6:3b:31:5b:54:ae:16:92:d7:4f:d8:c4:06:
         ff:5c:4a:e0:da:98:bf:7c:49:ca:6b:7c:ea:4b:d0:cf:4e:b3:
         48:5f:5b:9e:28:22:34:81:9a:6f:cc:01:82:1c:30:5b:4d:dd:
         d9:67:65:b4:4e:04:45:d0:ce:d3:ca:97:d1:38:b8:e4:5a:80:
         79:16:6a:2e:46:5b:d8:21:10:5c:fd:e3:b8:44:49:02:dd:e1:
         e9:30:14:72:68:34:da:dc:c3:01:4e:df:6a:03:cf:5d:06:df:
         3a:32:16:fd:08:c5:53:a1:90:ed:e8:d7:13:41:36:8f:90:c6:
         bb:a0:50:03:5d:5d:1f:f2:f2:eb:ab:a7:e4:39:fc:e1:81:88:
         2a:07:f3:26:d2:ab:a6:9a:fb:c1:a9:b7:13:f2:92:18:d6:0c:
         24:de:0b:11:35:9e:52:a0:c1:bd:2a:0b:2e:2c:4d:79:d1:bc:
         b7:d6:08:a0:07:ae:23:77:06:43:06:fb:f3:e3:e5:47:b0:d6:
         93:c0:b2:ef
-----BEGIN CERTIFICATE-----
MIIGPDCCBSSgAwIBAgIUF1Pbd64fW0FvPwM0t5CCRDzP9A8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQxNDIyMTFaFw0yNTA0MDMxNDI3MTFaMDMxMTAvBgNV
BAMTKEVDRDBEQkM1RTYzNkEyMUI0Q0UwRjVCQTVDRDcxODkyQzMxQkI2QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD59WZXQRoAzFuenZRwRgxyQawj
jU8MKvKV2xO5IdbznJsbS4eJU78J8xVZABbOhaKE44EJ5qJ++nDFS0+jgFyeTlBZ
ZVCdQe7lOa4S0pJ3XqvCgymtEHbNd6LA3itYdpFMJX/vlh0FD7d6h1+b9yw8r/Wz
Ev79oc/wV7iNR3nkVAsdDAIYGSlUeVqoBgQ0rXjC3XcGvLVQERdXlS9SBWF5u2ph
w+5V74Eg5YajKgzafuezIUeBWg9jdqiAV/aDYD+8WPdIq2Xdw5c2je6BPyvMXfwH
ZMec5U5qsw9cBsmJH2iy/mQzZthdW4jFqfbikyTZ9HivRGzEfJalOsVU/JF1AgMB
AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTs0NvF5jaiG0zg
9bpc1xiSwxu2qDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR1pS
UXVhY0E1c3B2c3JIMXpDUEhjVU1xejdMbzE2VlVzYXVpMUJTeFJ3OHEvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0da
UlF1YWNBNXNwdnNySDF6Q1BIY1VNcXo3TG8xNlZVc2F1aTFCU3hSdzhxLzEvRUNE
MERCQzVFNjM2QTIxQjRDRTBGNUJBNUNENzE4OTJDMzFCQjZBOC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH
AQH/BCswKTAYBAIAATASAwQCLUfQAwQCLbUkAwQCLb2wMA0EAgACMAcDBQAoBGcA
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQdHTANBgkqhkiG9w0BAQsFAAOCAQEA
cJ7II4fZSc7MyrhSH+VIeYqTzvYFjEA8U3AWhoQP9sWouUFdmNNEf0tgWx7HRGaV
l6zRYmExMVZjjLb2OzFbVK4WktdP2MQG/1xK4NqYv3xJymt86kvQz06zSF9bnigi
NIGab8wBghwwW03d2WdltE4ERdDO08qX0Ti45FqAeRZqLkZb2CEQXP3juERJAt3h
6TAUcmg02tzDAU7fagPPXQbfOjIW/QjFU6GQ7ejXE0E2j5DGu6BQA11dH/Ly66un
5Dn84YGIKgfzJtKrppr7wam3E/KSGNYMJN4LETWeUqDBvSoLLixNedG8t9YIoAeu
I3cGQwb78+PlR7DWk8Cy7w==
-----END CERTIFICATE-----
Generated at Mon Jul 1 12:36:25 2024 by rpki-client on console-fra.rpki-client.org