Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FF2AF20B38CDDACBADD03E10C296F31339478DE7.cer
File:                     FF2AF20B38CDDACBADD03E10C296F31339478DE7.cer (raw, json)
Hash identifier:          i4rFVg38nKu07pPoTr1v0N5jv+Cwa8f9U1ZITNejnCE=
Subject key identifier:   FF:2A:F2:0B:38:CD:DA:CB:AD:D0:3E:10:C2:96:F3:13:39:47:8D:E7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3E81D4C9BF9C2B0626507040DCED00C1A3A952D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/1/FF2AF20B38CDDACBADD03E10C296F31339478DE7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:29:54 +0000
Certificate not after:    Wed 02 Apr 2025 18:34:54 +0000
Subordinate resources:    AS: 270514
                          IP: 177.11.128.0/22
                          IP: 2804:6d20::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 04:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:81:d4:c9:bf:9c:2b:06:26:50:70:40:dc:ed:00:c1:a3:a9:52:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:29:54 2024 GMT
            Not After : Apr  2 18:34:54 2025 GMT
        Subject: CN=FF2AF20B38CDDACBADD03E10C296F31339478DE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:58:d8:ab:11:02:8a:e8:0c:dc:c1:7a:32:b3:
                    26:ce:2d:6b:bb:1f:3d:23:b3:9c:f3:5b:c3:1b:3d:
                    89:75:7f:d1:54:d6:1a:71:af:62:a7:c6:e3:6f:3c:
                    c5:96:4a:db:d1:12:a2:24:9f:7b:07:fc:78:7e:c9:
                    83:15:92:a2:4f:de:a6:18:0a:49:34:a2:65:3f:6d:
                    a0:bc:89:39:0b:b3:17:53:d6:c8:17:cb:f4:23:2d:
                    f2:d0:a3:ae:a8:c2:3e:c2:63:86:76:07:f4:7a:f9:
                    f1:dc:0d:31:36:ca:13:e2:9d:e9:7a:4e:d8:de:44:
                    f3:57:cc:c4:44:a4:34:3b:de:77:41:f1:d2:fa:ce:
                    cf:c5:41:af:aa:b1:d1:01:e0:40:e9:9a:01:ee:c4:
                    4d:63:6d:b0:00:d3:0d:74:d1:e3:5f:d8:44:7c:53:
                    f5:00:f1:03:05:87:b3:46:5b:30:b5:b9:33:22:86:
                    05:fb:53:5e:69:d3:ec:3f:8a:c7:0d:83:2a:20:de:
                    03:16:59:14:c9:6f:d0:7f:34:70:77:28:a9:0e:40:
                    24:e2:3f:de:30:ef:16:23:8f:09:67:60:a6:30:22:
                    b8:16:37:8b:a7:b6:13:cd:02:b5:fe:d6:a9:ba:f7:
                    76:7f:d3:b7:e5:c5:de:81:00:63:c0:c4:d7:b0:42:
                    f8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FF:2A:F2:0B:38:CD:DA:CB:AD:D0:3E:10:C2:96:F3:13:39:47:8D:E7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/1/FF2AF20B38CDDACBADD03E10C296F31339478DE7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.128.0/22
                IPv6:
                  2804:6d20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270514

    Signature Algorithm: sha256WithRSAEncryption
         d9:39:50:b7:91:7f:20:44:79:d0:4d:d2:82:a5:0b:72:6a:ed:
         54:50:1f:6c:65:4e:43:e4:10:f7:ec:4b:0e:ca:4e:e9:1f:5d:
         11:85:8d:9a:05:fa:4b:6f:88:a7:ca:f9:62:1d:c6:6c:38:02:
         fb:a2:2f:e6:a6:fc:37:46:b9:33:a5:f0:0e:64:c1:11:29:d9:
         bc:5c:c2:e1:c9:4c:ea:2e:49:56:49:01:66:76:d4:a3:08:ec:
         ea:7e:71:69:f1:e7:53:ab:ee:14:79:3e:d5:b0:79:e1:a3:b8:
         d4:a5:4b:96:ed:85:ab:dc:2c:f5:97:07:c0:5a:93:90:fe:ff:
         3f:1c:76:4b:24:ac:60:01:71:78:ef:08:54:97:e6:d1:66:c8:
         0a:74:6e:6a:43:10:e0:55:f1:14:7a:80:d9:1c:24:d9:53:52:
         1d:5f:a4:5f:f5:69:d0:b4:a6:07:10:84:71:19:83:3a:cb:3f:
         4f:f4:e4:c7:68:3d:42:47:b6:7d:a9:49:d4:1f:4d:02:31:34:
         31:80:24:62:2e:7f:b6:73:3a:ea:36:c0:58:d6:70:de:24:b5:
         e7:41:91:c6:71:11:13:12:a8:19:7c:45:2e:92:6e:84:e7:3d:
         b3:eb:39:7b:39:f6:b3:13:7e:21:5e:45:e6:ad:31:c3:ef:54:
         b9:fa:03:c8
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUPoHUyb+cKwYmUHBA3O0AwaOpUtYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMxODI5NTRaFw0yNTA0MDIxODM0NTRaMDMxMTAvBgNV
BAMTKEZGMkFGMjBCMzhDRERBQ0JBREQwM0UxMEMyOTZGMzEzMzk0NzhERTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwWNirEQKK6AzcwXoysybOLWu7
Hz0js5zzW8MbPYl1f9FU1hpxr2KnxuNvPMWWStvREqIkn3sH/Hh+yYMVkqJP3qYY
Ckk0omU/baC8iTkLsxdT1sgXy/QjLfLQo66owj7CY4Z2B/R6+fHcDTE2yhPinel6
TtjeRPNXzMREpDQ73ndB8dL6zs/FQa+qsdEB4EDpmgHuxE1jbbAA0w100eNf2ER8
U/UA8QMFh7NGWzC1uTMihgX7U15p0+w/iscNgyog3gMWWRTJb9B/NHB3KKkOQCTi
P94w7xYjjwlnYKYwIrgWN4unthPNArX+1qm693Z/07flxd6BAGPAxNewQviBAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT/KvILOM3ay63Q
PhDClvMTOUeN5zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNWFS
c2VITVQ3Ykh0TlBpYVB2OFJGYUN3NWtSRTFXRzl5c2pDR0tORWJ3dHAvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVh
UnNlSE1UN2JIdE5QaWFQdjhSRmFDdzVrUkUxV0c5eXNqQ0dLTkVid3RwLzEvRkYy
QUYyMEIzOENEREFDQkFERDAzRTEwQzI5NkYzMTMzOTQ3OERFNy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCsQuAMA0EAgACMAcDBQAoBG0gMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQgsjANBgkqhkiG9w0BAQsFAAOCAQEA2TlQt5F/IER50E3S
gqULcmrtVFAfbGVOQ+QQ9+xLDspO6R9dEYWNmgX6S2+Ip8r5Yh3GbDgC+6Iv5qb8
N0a5M6XwDmTBESnZvFzC4clM6i5JVkkBZnbUowjs6n5xafHnU6vuFHk+1bB54aO4
1KVLlu2Fq9ws9ZcHwFqTkP7/Pxx2SySsYAFxeO8IVJfm0WbICnRuakMQ4FXxFHqA
2Rwk2VNSHV+kX/Vp0LSmBxCEcRmDOss/T/Tkx2g9Qke2falJ1B9NAjE0MYAkYi5/
tnM66jbAWNZw3iS150GRxnERExKoGXxFLpJuhOc9s+s5ezn2sxN+IV5F5q0xw+9U
ufoDyA==
-----END CERTIFICATE-----
Generated at Sun Jun 2 01:36:55 2024 by rpki-client on console-ams.rpki-client.org