Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer
File:                     F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer (raw, json)
Hash identifier:          Ip7xLtommHAD41i151/fLdVNIYNjEBJLKFYU7wqBcvs=
Subject key identifier:   F5:A7:57:E4:9A:3E:E6:2B:EE:5F:32:16:3D:BC:15:42:99:BD:FB:A6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       57BB3AD8A55277BC6143255C81CDF913AAFFDA7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 01:11:58 +0000
Certificate not after:    Thu 03 Apr 2025 01:16:58 +0000
Subordinate resources:    AS: 27715
                          AS: 53244
                          IP: 177.11.80.0/22
                          IP: 177.153.0.0/16
                          IP: 179.188.0.0/16
                          IP: 186.202.0.0/16
                          IP: 187.45.192.0/18
                          IP: 189.126.96.0/19
                          IP: 191.252.0.0/16
                          IP: 200.234.192.0/19
                          IP: 201.76.32.0/19
                          IP: 2804:218::/32
                          IP: 2804:350::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 18:08:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:bb:3a:d8:a5:52:77:bc:61:43:25:5c:81:cd:f9:13:aa:ff:da:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 01:11:58 2024 GMT
            Not After : Apr  3 01:16:58 2025 GMT
        Subject: CN=F5A757E49A3EE62BEE5F32163DBC154299BDFBA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3b:28:53:23:14:53:de:6d:ab:83:07:66:2e:
                    6c:c5:bd:39:90:f5:63:95:e2:e7:2a:6b:e9:84:a4:
                    aa:d6:06:89:b1:d6:8e:7c:0e:24:ea:14:b6:b8:d2:
                    5e:d4:1f:ea:59:d6:49:57:a3:fc:6b:76:6b:ae:2a:
                    ac:c3:4c:21:bc:19:c1:68:cd:23:b8:34:5d:7e:56:
                    51:69:18:e3:0a:fb:e4:a8:43:df:d0:de:e5:45:d1:
                    fc:7e:06:b3:4b:9f:c4:51:53:62:ed:1c:6c:13:32:
                    6a:fb:80:cf:09:91:a1:ed:8a:9c:46:77:ff:4f:32:
                    c8:90:d4:9a:bd:21:72:19:f2:12:60:80:d2:e2:b0:
                    4f:52:76:b3:f0:1b:07:ac:da:80:39:52:68:c8:55:
                    6e:83:c6:1f:71:ef:2b:97:65:d3:77:c1:8a:4b:df:
                    a6:be:a3:01:0b:b2:9b:86:2b:5f:28:f7:85:58:6d:
                    c5:a9:06:b8:5d:f5:c3:95:f3:56:d8:b1:67:ce:6d:
                    82:e6:3b:a0:21:96:02:71:83:10:a8:97:ac:b8:31:
                    f6:1c:0b:34:2b:4f:5e:7b:72:3b:8a:67:c0:ee:ab:
                    90:74:83:d9:08:f8:91:0b:84:d1:4f:2e:83:b2:8b:
                    0a:79:35:d1:73:7f:07:78:5e:5b:51:89:aa:63:71:
                    a5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F5:A7:57:E4:9A:3E:E6:2B:EE:5F:32:16:3D:BC:15:42:99:BD:FB:A6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.80.0/22
                  177.153.0.0/16
                  179.188.0.0/16
                  186.202.0.0/16
                  187.45.192.0/18
                  189.126.96.0/19
                  191.252.0.0/16
                  200.234.192.0/19
                  201.76.32.0/19
                IPv6:
                  2804:218::/32
                  2804:350::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27715
                  53244

    Signature Algorithm: sha256WithRSAEncryption
         50:f9:86:1e:d0:33:76:fd:c0:f1:9d:55:db:90:c7:f8:68:21:
         a9:e7:2b:b2:71:7b:38:c3:12:ef:99:0e:2b:bb:90:01:43:be:
         03:a9:67:f9:c1:44:8b:10:3e:26:2d:bf:58:8f:3a:91:43:e2:
         1e:de:40:16:f1:41:43:fe:7f:f1:86:fb:1e:6e:6a:70:8f:47:
         90:c6:88:4f:49:73:10:47:42:59:e8:4b:d1:c4:bc:42:25:ef:
         73:01:f0:67:75:8e:78:a6:45:50:79:71:ea:16:8f:c9:b7:eb:
         48:11:e0:fc:02:b6:2d:cd:db:bd:72:b7:46:c2:0a:e3:e8:97:
         ee:fc:04:8b:e9:8e:5c:7d:52:28:ff:a8:85:25:43:09:9f:56:
         34:af:e9:aa:3f:1c:75:f1:9e:b2:44:e7:a7:15:78:b7:41:e2:
         ad:9f:72:cb:70:7b:c7:81:ed:ca:ba:31:c9:ae:15:e9:b1:9b:
         6f:3a:72:5b:1f:a2:eb:27:d8:44:b6:69:02:03:93:15:58:a9:
         7d:13:af:52:e7:ff:68:c8:d6:99:d7:1a:1c:cf:d7:05:d1:ed:
         72:c1:36:f0:da:35:9a:b3:f1:62:0e:f9:8b:9b:94:1c:89:b2:
         1a:99:14:f5:3c:82:9f:36:33:c9:6b:fa:fa:86:35:e5:00:1f:
         3a:2d:9a:e6
-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgIUV7s62KVSd7xhQyVcgc35E6r/2n4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwMTExNThaFw0yNTA0MDMwMTE2NThaMDMxMTAvBgNV
BAMTKEY1QTc1N0U0OUEzRUU2MkJFRTVGMzIxNjNEQkMxNTQyOTlCREZCQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlOyhTIxRT3m2rgwdmLmzFvTmQ
9WOV4ucqa+mEpKrWBomx1o58DiTqFLa40l7UH+pZ1klXo/xrdmuuKqzDTCG8GcFo
zSO4NF1+VlFpGOMK++SoQ9/Q3uVF0fx+BrNLn8RRU2LtHGwTMmr7gM8JkaHtipxG
d/9PMsiQ1Jq9IXIZ8hJggNLisE9SdrPwGwes2oA5UmjIVW6Dxh9x7yuXZdN3wYpL
36a+owELspuGK18o94VYbcWpBrhd9cOV81bYsWfObYLmO6AhlgJxgxCol6y4MfYc
CzQrT157cjuKZ8Duq5B0g9kI+JELhNFPLoOyiwp5NdFzfwd4XltRiapjcaWdAgMB
AAGjggNxMIIDbTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT1p1fkmj7mK+5f
MhY9vBVCmb37pjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR0M5
N29FTEN6VzI4RXl1Z0phQVZIVXFoTmVvTjFZbXZNUXlIVE0zRGE3UWcvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dD
OTdvRUxDelcyOEV5dWdKYUFWSFVxaE5lb04xWW12TVF5SFRNM0RhN1FnLzEvRjVB
NzU3RTQ5QTNFRTYyQkVFNUYzMjE2M0RCQzE1NDI5OUJERkJBNi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEH
AQH/BFIwUDA4BAIAATAyAwQCsQtQAwMAsZkDAwCzvAMDALrKAwQGuy3AAwQFvX5g
AwMAv/wDBAXI6sADBAXJTCAwFAQCAAIwDgMFACgEAhgDBQAoBANQMB4GCCsGAQUF
BwEIAQH/BA8wDaALMAkCAmxDAgMAz/wwDQYJKoZIhvcNAQELBQADggEBAFD5hh7Q
M3b9wPGdVduQx/hoIannK7JxezjDEu+ZDiu7kAFDvgOpZ/nBRIsQPiYtv1iPOpFD
4h7eQBbxQUP+f/GG+x5uanCPR5DGiE9JcxBHQlnoS9HEvEIl73MB8Gd1jnimRVB5
ceoWj8m360gR4PwCti3N271yt0bCCuPol+78BIvpjlx9Uij/qIUlQwmfVjSv6ao/
HHXxnrJE56cVeLdB4q2fcstwe8eB7cq6McmuFemxm286clsfousn2ES2aQIDkxVY
qX0Tr1Ln/2jI1pnXGhzP1wXR7XLBNvDaNZqz8WIO+YublByJshqZFPU8gp82M8lr
+vqGNeUAHzotmuY=
-----END CERTIFICATE-----
Generated at Tue Jun 18 17:34:31 2024 by rpki-client on console-ams.rpki-client.org