Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
File:                     FF5D171186C7F92AA82E56A3848B9D1390938458.cer (raw, json)
Hash identifier:          kQI1sqYDJTWyZz9mOglQR+KP/lEjXPZbkjvn6H4eTRs=
Subject key identifier:   FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       719F04BD6DD74D5039A6ABF8D05D51B7A2736FE4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 29 May 2024 18:08:41 +0000
Certificate not after:    Wed 28 May 2025 18:13:41 +0000
Subordinate resources:    AS: 28635
                          AS: 52547
                          AS: 52609
                          AS: 52682
                          AS: 61794
                          AS: 262526
                          AS: 264487
                          AS: 266130
                          IP: 45.6.108.0/22
                          IP: 45.174.156.0/22
                          IP: 131.255.112.0/22
                          IP: 168.228.36.0/22
                          IP: 170.233.52.0/22
                          IP: 177.67.192.0/21
                          IP: 177.152.176.0/21
                          IP: 177.200.176.0/20
                          IP: 177.221.192.0/19
                          IP: 179.189.48.0/20
                          IP: 200.11.8.0/21
                          IP: 201.71.128.0/18
                          IP: 201.140.220.0/22
                          IP: 2804:598::/32
                          IP: 2804:e28::/32
                          IP: 2804:1408::/32
                          IP: 2804:196c::/32
                          IP: 2804:2058::/32
                          IP: 2804:2d90::/32
                          IP: 2804:30bc::/32
                          IP: 2804:3b1c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Jul 2024 20:04:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:9f:04:bd:6d:d7:4d:50:39:a6:ab:f8:d0:5d:51:b7:a2:73:6f:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 29 18:08:41 2024 GMT
            Not After : May 28 18:13:41 2025 GMT
        Subject: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c0:d9:d2:08:3c:af:7a:a5:cd:e0:d2:62:e9:
                    8d:37:c6:6d:c3:6a:bb:34:1e:d8:a5:30:c1:ad:a6:
                    35:b2:25:7f:9e:e8:09:69:3b:be:8e:67:77:58:c6:
                    4e:4d:df:dd:6d:8d:47:b6:1f:01:8c:3a:5a:1b:9d:
                    79:86:09:ff:04:4b:09:99:08:2a:a4:bc:b5:12:cb:
                    5d:d4:52:21:91:8e:5e:64:3d:da:f3:06:1a:c0:45:
                    0c:e8:6e:da:d9:0d:5d:6e:93:e1:3a:2c:80:2e:e1:
                    cf:7d:81:02:43:29:e7:4a:26:2c:2d:f9:40:b7:60:
                    b9:24:32:a6:78:7b:0a:74:c6:30:7c:7f:55:2a:02:
                    b7:e9:8d:40:f2:6a:b2:2e:a7:ab:2e:83:18:5e:86:
                    73:b0:93:ab:72:7b:94:03:d5:23:d2:64:54:64:da:
                    bc:30:fd:d5:5a:6f:70:5a:d0:a8:9a:dd:7c:4f:48:
                    0d:2a:ed:60:f3:e0:e3:ec:50:04:1c:54:56:28:e3:
                    c5:c4:a2:75:35:0a:ea:32:85:16:02:71:1f:8b:7c:
                    77:98:4b:1f:73:ea:bf:bb:5d:b8:42:0f:26:dc:9d:
                    b2:eb:f5:fc:a5:11:e4:46:22:65:60:eb:34:eb:27:
                    9f:bc:da:95:48:3c:04:e2:2f:59:a0:c6:05:08:4b:
                    25:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.108.0/22
                  45.174.156.0/22
                  131.255.112.0/22
                  168.228.36.0/22
                  170.233.52.0/22
                  177.67.192.0/21
                  177.152.176.0/21
                  177.200.176.0/20
                  177.221.192.0/19
                  179.189.48.0/20
                  200.11.8.0/21
                  201.71.128.0/18
                  201.140.220.0/22
                IPv6:
                  2804:598::/32
                  2804:e28::/32
                  2804:1408::/32
                  2804:196c::/32
                  2804:2058::/32
                  2804:2d90::/32
                  2804:30bc::/32
                  2804:3b1c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28635
                  52547
                  52609
                  52682
                  61794
                  262526
                  264487
                  266130

    Signature Algorithm: sha256WithRSAEncryption
         1e:49:0c:e4:e0:62:3c:2d:85:59:0c:13:bb:7f:aa:75:ff:53:
         26:7d:98:c5:d0:32:1b:46:81:76:7a:95:a1:64:4d:82:b0:db:
         38:b4:7d:67:ce:1d:22:98:2a:3f:9d:c6:dc:5b:8e:e6:5d:9c:
         9c:a4:2d:a1:60:87:f4:31:d2:b4:52:5f:cd:aa:15:9b:f1:85:
         ca:33:71:1b:36:4e:7f:8b:88:4b:aa:e4:36:99:5b:01:b4:d4:
         8a:76:fc:67:39:e9:ca:fc:81:19:33:e5:b2:7b:59:4f:2c:3f:
         48:65:72:6c:8f:5f:ea:a6:1b:e9:88:67:29:87:3a:db:fa:87:
         d7:ac:f0:e8:9e:ce:0e:32:8f:5c:0b:05:0f:d3:8f:31:6d:b1:
         1b:63:f3:37:6f:a7:b6:41:48:97:da:cf:27:3a:b3:8f:27:cf:
         8b:51:6d:cb:09:0a:e4:8a:a7:a6:a7:cd:51:df:5c:6d:c0:9d:
         54:94:78:2e:db:c1:66:07:db:37:49:1c:05:8e:b0:89:be:18:
         43:0b:f5:40:bd:43:db:1a:6b:6c:9f:0f:77:a3:da:b1:43:07:
         5b:48:1a:65:dd:7e:6d:3d:a1:63:6a:61:11:f5:aa:5b:e9:81:
         73:56:e7:f1:f0:85:8f:9a:f9:0f:9a:89:23:55:01:9d:5b:8e:
         cf:c3:4b:f4
-----BEGIN CERTIFICATE-----
MIIGzjCCBbagAwIBAgIUcZ8EvW3XTVA5pqv40F1Rt6Jzb+QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA1MjkxODA4NDFaFw0yNTA1MjgxODEzNDFaMDMxMTAvBgNV
BAMTKEZGNUQxNzExODZDN0Y5MkFBODJFNTZBMzg0OEI5RDEzOTA5Mzg0NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcwNnSCDyveqXN4NJi6Y03xm3D
ars0HtilMMGtpjWyJX+e6AlpO76OZ3dYxk5N391tjUe2HwGMOlobnXmGCf8ESwmZ
CCqkvLUSy13UUiGRjl5kPdrzBhrARQzobtrZDV1uk+E6LIAu4c99gQJDKedKJiwt
+UC3YLkkMqZ4ewp0xjB8f1UqArfpjUDyarIup6sugxhehnOwk6tye5QD1SPSZFRk
2rww/dVab3Ba0Kia3XxPSA0q7WDz4OPsUAQcVFYo48XEonU1CuoyhRYCcR+LfHeY
Sx9z6r+7XbhCDybcnbLr9fylEeRGImVg6zTrJ5+82pVIPATiL1mgxgUISyU5AgMB
AAGjggPYMIID1DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT/XRcRhsf5Kqgu
VqOEi50TkJOEWDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRFZh
Qk5wY01LenE3REJ6eEFOVVBmUUNnSFNEMUUzemF1VFhDc2NWaVc0SDQvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RW
YUJOcGNNS3pxN0RCenhBTlVQZlFDZ0hTRDFFM3phdVRYQ3NjVmlXNEg0LzAvRkY1
RDE3MTE4NkM3RjkyQUE4MkU1NkEzODQ4QjlEMTM5MDkzODQ1OC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGpBggrBgEFBQcB
BwEB/wSBmTCBljBUBAIAATBOAwQCLQZsAwQCLa6cAwQCg/9wAwQCqOQkAwQCquk0
AwQDsUPAAwQDsZiwAwQEsciwAwQFsd3AAwQEs70wAwQDyAsIAwQGyUeAAwQCyYzc
MD4EAgACMDgDBQAoBAWYAwUAKAQOKAMFACgEFAgDBQAoBBlsAwUAKAQgWAMFACgE
LZADBQAoBDC8AwUAKAQ7HDA8BggrBgEFBQcBCAEB/wQtMCugKTAnAgJv2wIDAM1D
AgMAzYECAwDNygIDAPFiAgMEAX4CAwQJJwIDBA+SMA0GCSqGSIb3DQEBCwUAA4IB
AQAeSQzk4GI8LYVZDBO7f6p1/1MmfZjF0DIbRoF2epWhZE2CsNs4tH1nzh0imCo/
ncbcW47mXZycpC2hYIf0MdK0Ul/NqhWb8YXKM3EbNk5/i4hLquQ2mVsBtNSKdvxn
OenK/IEZM+Wye1lPLD9IZXJsj1/qphvpiGcphzrb+ofXrPDons4OMo9cCwUP048x
bbEbY/M3b6e2QUiX2s8nOrOPJ8+LUW3LCQrkiqemp81R31xtwJ1UlHgu28FmB9s3
SRwFjrCJvhhDC/VAvUPbGmtsnw93o9qxQwdbSBpl3X5tPaFjamER9apb6YFzVufx
8IWPmvkPmokjVQGdW47Pw0v0
-----END CERTIFICATE-----
Generated at Sun Jun 30 19:52:58 2024 by rpki-client on console-ams.rpki-client.org