Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/ED5166AD49A8DCBBF4677BEAA2FC8A73E2F060A2.cer
File:                     ED5166AD49A8DCBBF4677BEAA2FC8A73E2F060A2.cer (raw, json)
Hash identifier:          8srIa5ZW9NxpY3yjfRa0mb2L3JvdE8NW1nHT5IuPI+A=
Subject key identifier:   ED:51:66:AD:49:A8:DC:BB:F4:67:7B:EA:A2:FC:8A:73:E2:F0:60:A2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       439D465A9806C778B6106B4B6A1A9B5A854B185A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/2/ED5166AD49A8DCBBF4677BEAA2FC8A73E2F060A2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 02:46:35 +0000
Certificate not after:    Thu 03 Apr 2025 02:51:35 +0000
Subordinate resources:    AS: 269632
                          IP: 45.190.28.0/22
                          IP: 2804:6780::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 04:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:9d:46:5a:98:06:c7:78:b6:10:6b:4b:6a:1a:9b:5a:85:4b:18:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 02:46:35 2024 GMT
            Not After : Apr  3 02:51:35 2025 GMT
        Subject: CN=ED5166AD49A8DCBBF4677BEAA2FC8A73E2F060A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f1:44:b2:dd:b2:89:e3:0e:3d:29:d5:82:1a:
                    97:11:5b:2b:52:9f:a3:9d:1b:6b:df:ac:a6:bf:88:
                    2c:d2:0c:4e:7d:c5:95:96:ef:5a:d9:bc:1d:c5:30:
                    a3:a6:58:2e:f8:6c:51:e6:89:49:d7:7f:66:e0:28:
                    33:c9:a2:5c:40:5a:af:96:b2:81:d7:6b:9c:02:1d:
                    d6:30:1d:f8:a6:c0:38:da:4f:c8:2d:d0:31:0b:6e:
                    64:1c:13:ae:88:e2:47:7b:be:83:63:a2:c4:0f:9b:
                    87:c2:7a:b3:09:a2:80:64:b3:5c:52:d7:26:e0:46:
                    22:c6:01:0e:9d:51:7b:3b:a1:08:12:18:54:60:79:
                    9b:e1:a1:26:15:ff:37:a7:b8:3b:51:55:2a:d3:1a:
                    6e:9a:ec:5c:9b:19:4a:a9:4e:50:e1:8c:6d:2f:24:
                    46:4b:bc:e4:0d:db:2b:db:c0:21:9f:32:e5:a4:1c:
                    bd:30:c0:96:5a:ac:0e:5b:a5:c7:da:9c:0b:30:67:
                    f9:92:ef:ed:8c:e5:33:ca:7f:0d:c4:58:82:8e:6e:
                    fc:10:7b:d1:c2:7c:e7:10:01:fe:7c:ef:c5:42:6d:
                    b1:c8:9b:b8:86:3d:a3:f8:e0:14:6d:33:4e:d4:46:
                    7b:3a:c9:0b:87:df:f0:79:d8:7b:e7:7d:49:f3:7e:
                    ed:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                ED:51:66:AD:49:A8:DC:BB:F4:67:7B:EA:A2:FC:8A:73:E2:F0:60:A2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/2/ED5166AD49A8DCBBF4677BEAA2FC8A73E2F060A2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.28.0/22
                IPv6:
                  2804:6780::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269632

    Signature Algorithm: sha256WithRSAEncryption
         10:36:cf:f0:8f:e0:17:71:e1:c6:9e:78:d3:c8:dd:4a:fd:c6:
         af:50:2f:df:9c:fe:24:d0:d9:43:46:7d:72:bd:f5:1f:8f:b9:
         31:14:b7:e5:4e:ae:e5:ba:08:6e:0b:b5:c5:2f:b6:f4:44:1a:
         ea:20:d9:94:a9:3e:54:bc:d8:37:c9:16:38:0c:ae:eb:56:5d:
         44:a5:77:ab:99:e2:0d:dc:f2:10:92:85:4c:71:c4:d6:c5:7f:
         6d:13:f5:67:bb:92:5e:f3:cc:59:15:90:00:4e:cf:eb:1b:87:
         23:68:de:11:b0:86:c4:07:d0:d0:7c:f1:fa:1b:e0:c4:66:fc:
         d4:b3:ea:dc:59:fa:4d:27:54:3b:3c:89:27:83:8d:09:04:0d:
         b8:6a:c1:bf:3c:48:ad:5a:32:d1:96:cd:58:4e:19:2b:e6:2e:
         3c:23:26:07:69:c1:3c:9b:d1:12:0e:2b:28:fa:bc:e0:8d:cc:
         ab:ed:8a:7c:3f:a5:18:6d:d8:41:0d:b1:d6:70:89:d0:4a:40:
         16:a0:e0:b4:d7:3e:ad:cb:09:ee:c2:33:c7:44:dd:62:b4:6a:
         20:a7:43:cc:66:c5:11:e1:0b:f7:a3:4b:8e:e7:16:4d:b9:dd:
         41:d2:5a:11:3f:63:b2:b6:1a:3f:17:9b:1c:1c:f2:d2:ee:e8:
         f0:a9:6f:2d
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUQ51GWpgGx3i2EGtLahqbWoVLGFowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwMjQ2MzVaFw0yNTA0MDMwMjUxMzVaMDMxMTAvBgNV
BAMTKEVENTE2NkFENDlBOERDQkJGNDY3N0JFQUEyRkM4QTczRTJGMDYwQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb8USy3bKJ4w49KdWCGpcRWytS
n6OdG2vfrKa/iCzSDE59xZWW71rZvB3FMKOmWC74bFHmiUnXf2bgKDPJolxAWq+W
soHXa5wCHdYwHfimwDjaT8gt0DELbmQcE66I4kd7voNjosQPm4fCerMJooBks1xS
1ybgRiLGAQ6dUXs7oQgSGFRgeZvhoSYV/zenuDtRVSrTGm6a7FybGUqpTlDhjG0v
JEZLvOQN2yvbwCGfMuWkHL0wwJZarA5bpcfanAswZ/mS7+2M5TPKfw3EWIKObvwQ
e9HCfOcQAf5878VCbbHIm7iGPaP44BRtM07URns6yQuH3/B52HvnfUnzfu35AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTtUWatSajcu/Rn
e+qi/Ipz4vBgojAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNU13
MmZiZ3pndzZoRk13alhiaURTUXlxVFFmTTR3bk1ZdzJCOUE1NEw1TDgvMi8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVN
dzJmYmd6Z3c2aEZNd2pYYmlEU1F5cVRRZk00d25NWXcyQjlBNTRMNUw4LzIvRUQ1
MTY2QUQ0OUE4RENCQkY0Njc3QkVBQTJGQzhBNzNFMkYwNjBBMi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLb4cMA0EAgACMAcDBQAoBGeAMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQdQDANBgkqhkiG9w0BAQsFAAOCAQEAEDbP8I/gF3Hhxp54
08jdSv3Gr1Av35z+JNDZQ0Z9cr31H4+5MRS35U6u5boIbgu1xS+29EQa6iDZlKk+
VLzYN8kWOAyu61ZdRKV3q5niDdzyEJKFTHHE1sV/bRP1Z7uSXvPMWRWQAE7P6xuH
I2jeEbCGxAfQ0Hzx+hvgxGb81LPq3Fn6TSdUOzyJJ4ONCQQNuGrBvzxIrVoy0ZbN
WE4ZK+YuPCMmB2nBPJvREg4rKPq84I3Mq+2KfD+lGG3YQQ2x1nCJ0EpAFqDgtNc+
rcsJ7sIzx0TdYrRqIKdDzGbFEeEL96NLjucWTbndQdJaET9jsrYaPxebHBzy0u7o
8KlvLQ==
-----END CERTIFICATE-----
Generated at Sun Jun 2 01:36:53 2024 by rpki-client on console-ams.rpki-client.org