Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F0ADD6FFCDFB09210157372271C0B492767D7001.cer
File:                     F0ADD6FFCDFB09210157372271C0B492767D7001.cer (raw, json)
Hash identifier:          U8lsOe+cwGykFWRdsujnynnF71vP/BoOFUmhZ+0kiPI=
Subject key identifier:   F0:AD:D6:FF:CD:FB:09:21:01:57:37:22:71:C0:B4:92:76:7D:70:01
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       389F4E7E86BF6B006AA23E2E15A7A1A6C52BE3FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/F0ADD6FFCDFB09210157372271C0B492767D7001.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 18:39:38 +0000
Certificate not after:    Thu 03 Apr 2025 18:44:38 +0000
Subordinate resources:    AS: 53187
                          IP: 143.106.0.0/16
                          IP: 177.8.96.0/20
                          IP: 177.220.0.0/17
                          IP: 2801:8a::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:9f:4e:7e:86:bf:6b:00:6a:a2:3e:2e:15:a7:a1:a6:c5:2b:e3:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 18:39:38 2024 GMT
            Not After : Apr  3 18:44:38 2025 GMT
        Subject: CN=F0ADD6FFCDFB09210157372271C0B492767D7001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:31:11:dc:e1:d6:28:42:fb:03:17:7a:33:65:
                    0f:53:c7:18:50:9c:b9:2f:92:7f:f3:2b:32:37:cb:
                    58:35:8e:ac:0b:90:04:4c:c4:d1:8d:50:da:be:98:
                    01:1d:dd:87:54:7d:8d:d1:80:1d:56:a9:5e:da:4e:
                    bf:23:e5:7c:79:be:57:a4:62:4e:ac:a9:af:18:a9:
                    09:42:33:9b:ef:f3:39:ee:42:ce:ec:5b:07:81:17:
                    3f:16:dc:56:2c:a7:25:53:0c:78:c3:1d:9f:96:b9:
                    cd:cd:91:ee:42:87:d8:23:65:e1:27:0e:78:bf:91:
                    f8:dd:74:d5:4c:a8:3f:34:47:74:28:6c:30:2e:89:
                    81:f8:ec:98:d2:89:74:b0:00:ef:02:0a:23:d0:fb:
                    5a:fb:e5:8b:f8:d8:cf:7a:96:b5:28:20:ee:12:23:
                    c6:c1:c6:e5:5d:45:2e:8a:b7:80:5b:82:f4:fc:cf:
                    03:09:14:2e:11:5f:cc:9a:80:7e:73:b7:59:cf:68:
                    8e:0a:18:65:52:44:61:52:2b:43:e7:4d:40:7d:4b:
                    e8:61:dd:83:5d:1a:b2:82:7d:f6:ca:b5:54:00:fd:
                    0e:00:26:f5:c8:e2:55:21:f3:5c:aa:de:7a:57:1d:
                    7f:61:20:07:5c:93:72:de:92:97:ea:9f:24:e7:df:
                    3a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F0:AD:D6:FF:CD:FB:09:21:01:57:37:22:71:C0:B4:92:76:7D:70:01
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/F0ADD6FFCDFB09210157372271C0B492767D7001.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.106.0.0/16
                  177.8.96.0/20
                  177.220.0.0/17
                IPv6:
                  2801:8a::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53187

    Signature Algorithm: sha256WithRSAEncryption
         d3:ff:71:32:b6:e2:b7:6d:30:52:06:3a:44:e8:f4:92:4a:cf:
         72:35:8b:50:16:17:c9:7f:b5:d5:5f:22:f8:45:f1:24:f8:41:
         47:e7:60:b6:6d:1b:58:e9:e9:a4:fb:e0:19:6e:75:77:24:fb:
         19:d3:69:0c:c4:47:9f:89:1e:59:59:2e:2c:61:fe:ad:81:2b:
         a3:b2:7a:79:5a:f6:4e:89:f8:8d:3a:03:a1:06:87:f2:a0:3f:
         6e:e0:7a:54:2f:86:c3:e9:09:e5:46:e5:cc:71:2f:83:d3:a1:
         c5:49:a7:a5:9b:eb:e9:10:34:3b:db:49:82:a8:87:85:1b:3a:
         20:f8:c1:e4:cd:92:24:1f:74:d0:0a:50:a8:9f:77:7e:c6:a7:
         e8:e9:08:df:1a:3c:26:6f:61:c5:6b:72:eb:40:42:f2:a5:84:
         c3:f0:54:dd:65:49:b3:b6:24:80:c4:f5:d6:76:ae:9c:8c:df:
         fd:9a:6d:75:94:cb:b0:ba:cc:42:95:1a:01:c5:91:d1:90:23:
         d6:44:98:8f:ea:82:6b:af:56:9f:29:0e:27:5c:33:bf:83:8e:
         92:5f:e2:8f:de:4d:33:6f:57:09:f3:c1:d6:1c:47:3e:53:41:
         ed:b4:0c:03:fd:5f:07:19:d2:01:88:38:2f:a0:8f:e3:c9:0e:
         fe:de:89:26
-----BEGIN CERTIFICATE-----
MIIGOzCCBSOgAwIBAgIUOJ9Ofoa/awBqoj4uFaehpsUr4/8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQxODM5MzhaFw0yNTA0MDMxODQ0MzhaMDMxMTAvBgNV
BAMTKEYwQURENkZGQ0RGQjA5MjEwMTU3MzcyMjcxQzBCNDkyNzY3RDcwMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5MRHc4dYoQvsDF3ozZQ9TxxhQ
nLkvkn/zKzI3y1g1jqwLkARMxNGNUNq+mAEd3YdUfY3RgB1WqV7aTr8j5Xx5vlek
Yk6sqa8YqQlCM5vv8znuQs7sWweBFz8W3FYspyVTDHjDHZ+Wuc3Nke5Ch9gjZeEn
Dni/kfjddNVMqD80R3QobDAuiYH47JjSiXSwAO8CCiPQ+1r75Yv42M96lrUoIO4S
I8bBxuVdRS6Kt4BbgvT8zwMJFC4RX8yagH5zt1nPaI4KGGVSRGFSK0PnTUB9S+hh
3YNdGrKCffbKtVQA/Q4AJvXI4lUh81yq3npXHX9hIAdck3LekpfqnyTn3zp1AgMB
AAGjggNFMIIDQTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTwrdb/zfsJIQFX
NyJxwLSSdn1wATAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQU5K
WWladVFWQTZCNnlUaExWOExtazVZMnZjZGh6bWROUHhHcDk2UloxN0svMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FO
SllpWnVRVkE2QjZ5VGhMVjhMbWs1WTJ2Y2Roem1kTlB4R3A5NlJaMTdLLzEvRjBB
REQ2RkZDREZCMDkyMTAxNTczNzIyNzFDMEI0OTI3NjdENzAwMS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEH
AQH/BCowKDAXBAIAATARAwMAj2oDBASxCGADBAex3AAwDQQCAAIwBwMFACgBAIow
GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAM/DMA0GCSqGSIb3DQEBCwUAA4IBAQDT
/3EytuK3bTBSBjpE6PSSSs9yNYtQFhfJf7XVXyL4RfEk+EFH52C2bRtY6emk++AZ
bnV3JPsZ02kMxEefiR5ZWS4sYf6tgSujsnp5WvZOifiNOgOhBofyoD9u4HpUL4bD
6QnlRuXMcS+D06HFSaelm+vpEDQ720mCqIeFGzog+MHkzZIkH3TQClCon3d+xqfo
6QjfGjwmb2HFa3LrQELypYTD8FTdZUmztiSAxPXWdq6cjN/9mm11lMuwusxClRoB
xZHRkCPWRJiP6oJrr1afKQ4nXDO/g46SX+KP3k0zb1cJ88HWHEc+U0HttAwD/V8H
GdIBiDgvoI/jyQ7+3okm
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:06:42 2024 by rpki-client on console-ams.rpki-client.org