Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FFD8CEEB1DF478F715D7FD8AA7F660F39267D5F4.cer
File:                     FFD8CEEB1DF478F715D7FD8AA7F660F39267D5F4.cer (raw, json)
Hash identifier:          SYPKUVB6uC3xy4Q35cnl6Hv5OslBmrZP1XFwX48NK0U=
Subject key identifier:   FF:D8:CE:EB:1D:F4:78:F7:15:D7:FD:8A:A7:F6:60:F3:92:67:D5:F4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       511AD4067B92784024BD6013AB107C6D258AF441
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/1/FFD8CEEB1DF478F715D7FD8AA7F660F39267D5F4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 07:19:26 +0000
Certificate not after:    Thu 03 Apr 2025 07:24:26 +0000
Subordinate resources:    AS: 265998
                          IP: 181.191.84.0/22
                          IP: 2804:4104::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 18:08:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:1a:d4:06:7b:92:78:40:24:bd:60:13:ab:10:7c:6d:25:8a:f4:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 07:19:26 2024 GMT
            Not After : Apr  3 07:24:26 2025 GMT
        Subject: CN=FFD8CEEB1DF478F715D7FD8AA7F660F39267D5F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:35:dd:a5:fb:8e:4b:af:5d:8b:b9:71:c7:22:
                    98:a9:dc:3d:f1:85:3a:19:4f:65:e3:ab:6f:43:20:
                    c9:d8:dc:01:12:a0:03:a2:6a:db:e9:a1:d9:a6:a7:
                    55:56:11:c4:47:44:fb:a6:0c:33:2a:9d:23:8b:bc:
                    39:ec:1a:e0:1d:7a:2e:09:24:8f:ec:99:6f:62:80:
                    22:dc:d1:ce:2a:f7:58:81:c2:fe:d1:46:12:c2:44:
                    f2:c0:1f:a3:81:47:2a:96:68:92:9d:9a:25:ae:58:
                    7c:45:9d:f9:a6:e8:fc:b4:40:3d:db:df:f3:92:49:
                    73:36:77:1b:69:fb:b0:0c:f3:00:38:25:6f:29:13:
                    95:d4:90:f1:d7:1b:5c:4c:d4:56:63:6d:9f:ce:a1:
                    7c:2c:59:67:8e:05:ad:00:17:aa:28:07:f0:ff:a8:
                    96:e3:05:fa:35:e5:6d:fa:a3:a8:d1:b6:ce:dc:ba:
                    3f:67:d0:68:f5:79:b8:98:ca:b9:0f:2c:05:8e:0e:
                    23:c5:07:9c:40:3e:60:1e:8b:70:16:c5:2b:8a:33:
                    a5:85:29:ea:10:b3:ed:81:7d:58:2e:98:ab:7b:10:
                    1d:3d:79:5b:52:15:28:98:75:f4:9b:16:62:39:be:
                    55:1e:47:e2:26:0a:f2:fc:1f:3a:34:77:8f:e8:36:
                    11:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FF:D8:CE:EB:1D:F4:78:F7:15:D7:FD:8A:A7:F6:60:F3:92:67:D5:F4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/1/FFD8CEEB1DF478F715D7FD8AA7F660F39267D5F4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.84.0/22
                IPv6:
                  2804:4104::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265998

    Signature Algorithm: sha256WithRSAEncryption
         08:ad:34:5f:72:71:2f:d7:c0:7c:fd:7c:74:71:e6:e2:49:63:
         94:c7:4a:88:d1:d7:3f:1c:d3:80:c4:55:0c:a7:21:bc:56:a2:
         02:cd:08:ac:2e:9c:40:f5:38:69:ae:9d:01:9a:6c:be:a4:76:
         99:39:2d:ce:e6:02:f0:7c:27:a7:96:77:7c:c1:6b:5d:6d:da:
         ae:aa:01:5b:72:d0:c6:c1:9a:80:06:c9:6f:81:d0:34:d1:a5:
         7c:31:a5:d7:52:57:6e:16:b2:12:2d:cc:43:e6:95:95:8e:54:
         af:b7:dc:16:2a:d7:7f:68:8e:5a:e3:9e:84:c1:27:09:50:bd:
         3c:f9:30:ef:57:5a:75:1b:1a:b8:aa:1d:7e:30:da:fe:39:33:
         70:77:53:21:44:40:92:e7:a5:44:ca:c4:7d:e9:1a:4f:99:b6:
         8a:4b:f8:4a:b9:08:27:19:cb:78:9a:bc:b6:1b:36:97:dc:08:
         d9:4f:a6:9f:8a:e8:13:4d:09:62:7f:fb:b9:76:00:d2:c2:4e:
         49:34:18:44:ff:69:db:be:78:4e:6d:89:8c:30:0e:f6:8f:64:
         f0:4e:44:d4:44:74:df:57:d2:a0:00:4b:77:23:54:0b:7d:7a:
         4c:63:ae:52:c9:48:df:dd:f6:4f:b0:32:93:da:bc:c0:a4:03:
         58:56:a5:cf
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUURrUBnuSeEAkvWATqxB8bSWK9EEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwNzE5MjZaFw0yNTA0MDMwNzI0MjZaMDMxMTAvBgNV
BAMTKEZGRDhDRUVCMURGNDc4RjcxNUQ3RkQ4QUE3RjY2MEYzOTI2N0Q1RjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Nd2l+45Lr12LuXHHIpip3D3x
hToZT2Xjq29DIMnY3AESoAOiatvpodmmp1VWEcRHRPumDDMqnSOLvDnsGuAdei4J
JI/smW9igCLc0c4q91iBwv7RRhLCRPLAH6OBRyqWaJKdmiWuWHxFnfmm6Py0QD3b
3/OSSXM2dxtp+7AM8wA4JW8pE5XUkPHXG1xM1FZjbZ/OoXwsWWeOBa0AF6ooB/D/
qJbjBfo15W36o6jRts7cuj9n0Gj1ebiYyrkPLAWODiPFB5xAPmAei3AWxSuKM6WF
KeoQs+2BfVgumKt7EB09eVtSFSiYdfSbFmI5vlUeR+ImCvL8Hzo0d4/oNhHBAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT/2M7rHfR49xXX
/Yqn9mDzkmfV9DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRGt4
UWg4eFVrbkQ1akdEcmRMSE1IZXFlZHlGbUt1UEtKVWFDeXN1ZXhYUVAvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Rr
eFFoOHhVa25ENWpHRHJkTEhNSGVxZWR5Rm1LdVBLSlVhQ3lzdWV4WFFQLzEvRkZE
OENFRUIxREY0NzhGNzE1RDdGRDhBQTdGNjYwRjM5MjY3RDVGNC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCtb9UMA0EAgACMAcDBQAoBEEEMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQPDjANBgkqhkiG9w0BAQsFAAOCAQEACK00X3JxL9fAfP18
dHHm4kljlMdKiNHXPxzTgMRVDKchvFaiAs0IrC6cQPU4aa6dAZpsvqR2mTktzuYC
8Hwnp5Z3fMFrXW3arqoBW3LQxsGagAbJb4HQNNGlfDGl11JXbhayEi3MQ+aVlY5U
r7fcFirXf2iOWuOehMEnCVC9PPkw71dadRsauKodfjDa/jkzcHdTIURAkuelRMrE
fekaT5m2ikv4SrkIJxnLeJq8ths2l9wI2U+mn4roE00JYn/7uXYA0sJOSTQYRP9p
2754Tm2JjDAO9o9k8E5E1ER031fSoABLdyNUC316TGOuUslI3932T7Ayk9q8wKQD
WFalzw==
-----END CERTIFICATE-----
Generated at Tue Jun 18 16:14:14 2024 by rpki-client on console-fra.rpki-client.org