Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FFCE70C498DDF303B674A6EAED25A1F918A2F7A8.cer
File:                     FFCE70C498DDF303B674A6EAED25A1F918A2F7A8.cer (raw, json)
Hash identifier:          7lFKb39kANEtsFdvdS8wxRyBghOPQd/zEhYAACddejk=
Subject key identifier:   FF:CE:70:C4:98:DD:F3:03:B6:74:A6:EA:ED:25:A1:F9:18:A2:F7:A8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4910A279FAAD05F07AE93C847E48959104FE6DC0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7EJRtnbDzWaMALwXxZwZVz4X1MCBDCyr69XTqSFNgFBW/1/FFCE70C498DDF303B674A6EAED25A1F918A2F7A8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7EJRtnbDzWaMALwXxZwZVz4X1MCBDCyr69XTqSFNgFBW/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 06:32:20 +0000
Certificate not after:    Thu 03 Apr 2025 06:37:20 +0000
Subordinate resources:    AS: 273665
                          IP: 2804:8a60::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 03:32:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:10:a2:79:fa:ad:05:f0:7a:e9:3c:84:7e:48:95:91:04:fe:6d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 06:32:20 2024 GMT
            Not After : Apr  3 06:37:20 2025 GMT
        Subject: CN=FFCE70C498DDF303B674A6EAED25A1F918A2F7A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a4:e8:43:0c:8c:5e:05:7f:75:fd:48:6c:f5:
                    de:36:d2:d5:a6:16:40:18:95:d7:27:2b:eb:a6:25:
                    bf:a7:45:5e:5a:b5:30:e4:d5:50:12:5f:a6:16:73:
                    f1:72:55:2d:ad:4b:35:88:44:7c:15:7e:db:d0:84:
                    39:6e:64:6b:f7:56:df:f6:d2:bd:df:00:1d:7c:16:
                    4d:5c:be:ee:96:a3:78:c5:9a:2d:eb:2d:92:3a:8e:
                    36:02:0a:77:00:ff:0f:5e:ed:ee:de:90:22:04:22:
                    40:3e:1f:b8:7f:4f:58:2f:b7:93:f4:fe:1d:38:c1:
                    c1:57:e2:e0:a4:74:90:4a:64:bb:cd:d4:fb:dd:7c:
                    57:1e:2b:ca:4e:ef:dd:08:4c:51:92:17:2f:9b:7c:
                    7e:6b:c7:c4:02:3e:d5:3f:9f:ed:11:e3:b9:9e:1f:
                    1f:ec:e4:bb:9d:14:c8:4c:51:3d:2e:69:6b:f4:c6:
                    f6:e6:ac:26:a5:a1:77:55:77:26:b4:72:e7:5a:29:
                    68:17:fe:0a:15:ea:ce:d8:52:0c:29:03:bc:97:bd:
                    5d:b7:4f:09:7d:5f:d2:55:7c:3b:1f:6f:70:90:51:
                    8f:88:f0:7c:a2:4e:66:9d:5a:60:3e:dc:67:32:d5:
                    83:97:7d:07:63:ff:7a:4e:fe:83:e4:9c:c8:02:28:
                    66:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FF:CE:70:C4:98:DD:F3:03:B6:74:A6:EA:ED:25:A1:F9:18:A2:F7:A8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7EJRtnbDzWaMALwXxZwZVz4X1MCBDCyr69XTqSFNgFBW/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7EJRtnbDzWaMALwXxZwZVz4X1MCBDCyr69XTqSFNgFBW/1/FFCE70C498DDF303B674A6EAED25A1F918A2F7A8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273665

    Signature Algorithm: sha256WithRSAEncryption
         06:c5:a0:65:01:02:c1:5f:5c:07:36:14:4c:93:9e:11:83:47:
         ac:ca:57:73:04:58:44:a9:58:46:9e:7c:6a:5f:74:8e:b5:18:
         b0:c5:ed:2e:23:14:bf:05:46:8f:e8:85:24:c9:2a:90:e3:96:
         9d:e6:1b:87:a3:9f:a1:78:09:4b:3b:fe:6e:19:57:11:01:8e:
         6e:b7:d5:ee:b6:d8:0a:0c:69:a5:f0:43:75:33:e9:08:80:d5:
         5a:94:5f:7a:8f:ed:e2:8b:98:cf:07:e1:2c:7c:a3:f8:1b:35:
         23:83:ff:d2:55:fb:e4:b7:81:ba:c2:64:0a:e9:7e:9b:fb:e4:
         a7:aa:7f:8b:75:42:ea:26:6c:bf:c8:09:8d:21:c8:d9:9d:1e:
         9d:f6:ee:32:00:d8:7f:32:fa:34:5a:18:be:c9:a5:ea:71:c8:
         ae:d2:b3:33:5f:59:a0:47:68:be:80:ad:70:8c:91:4e:60:c2:
         b1:df:84:d1:f0:c1:7b:6e:dd:ab:21:8f:71:95:2f:62:a1:4f:
         63:b9:09:1f:4b:13:73:11:7d:a3:d5:de:e8:f4:32:dd:ee:17:
         77:9a:64:21:0a:f0:61:f3:7a:5c:86:f9:61:32:17:6b:99:b8:
         b1:86:44:ab:2b:ab:5e:21:53:ae:f0:1d:ed:fa:c2:5e:d6:20:
         ab:f7:ef:19
-----BEGIN CERTIFICATE-----
MIIGITCCBQmgAwIBAgIUSRCiefqtBfB66TyEfkiVkQT+bcAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwNjMyMjBaFw0yNTA0MDMwNjM3MjBaMDMxMTAvBgNV
BAMTKEZGQ0U3MEM0OThEREYzMDNCNjc0QTZFQUVEMjVBMUY5MThBMkY3QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrpOhDDIxeBX91/Uhs9d420tWm
FkAYldcnK+umJb+nRV5atTDk1VASX6YWc/FyVS2tSzWIRHwVftvQhDluZGv3Vt/2
0r3fAB18Fk1cvu6Wo3jFmi3rLZI6jjYCCncA/w9e7e7ekCIEIkA+H7h/T1gvt5P0
/h04wcFX4uCkdJBKZLvN1PvdfFceK8pO790ITFGSFy+bfH5rx8QCPtU/n+0R47me
Hx/s5LudFMhMUT0uaWv0xvbmrCaloXdVdya0cudaKWgX/goV6s7YUgwpA7yXvV23
Twl9X9JVfDsfb3CQUY+I8HyiTmadWmA+3Gcy1YOXfQdj/3pO/oPknMgCKGYHAgMB
AAGjggMrMIIDJzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT/znDEmN3zA7Z0
purtJaH5GKL3qDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN0VK
UnRuYkR6V2FNQUx3WHhad1pWejRYMU1DQkRDeXI2OVhUcVNGTmdGQlcvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN0VK
UnRuYkR6V2FNQUx3WHhad1pWejRYMU1DQkRDeXI2OVhUcVNGTmdGQlcvMS9GRkNF
NzBDNDk4RERGMzAzQjY3NEE2RUFFRDI1QTFGOTE4QTJGN0E4Lm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB
Af8EETAPMA0EAgACMAcDBQAoBIpgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQt
ATANBgkqhkiG9w0BAQsFAAOCAQEABsWgZQECwV9cBzYUTJOeEYNHrMpXcwRYRKlY
Rp58al90jrUYsMXtLiMUvwVGj+iFJMkqkOOWneYbh6OfoXgJSzv+bhlXEQGObrfV
7rbYCgxppfBDdTPpCIDVWpRfeo/t4ouYzwfhLHyj+Bs1I4P/0lX75LeBusJkCul+
m/vkp6p/i3VC6iZsv8gJjSHI2Z0enfbuMgDYfzL6NFoYvsml6nHIrtKzM19ZoEdo
voCtcIyRTmDCsd+E0fDBe27dqyGPcZUvYqFPY7kJH0sTcxF9o9Xe6PQy3e4Xd5pk
IQrwYfN6XIb5YTIXa5m4sYZEqyurXiFTrvAd7frCXtYgq/fvGQ==
-----END CERTIFICATE-----
Generated at Sun Jun 2 03:39:21 2024 by rpki-client on console-ams.rpki-client.org