Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer
File:                     4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer (raw, json)
Hash identifier:          8x4LIncpXe4zIgPBbtBj32dT+B7GZnk3rKSk0j+ukfo=
Subject key identifier:   4B:9B:65:30:2A:13:63:F3:DC:78:0F:F3:9C:BE:AE:B9:06:37:4E:75
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6C20DBF32FF456AEC8154D2DA9A03ABC4B0DCC06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 21:36:40 +0000
Certificate not after:    Wed 02 Apr 2025 21:41:40 +0000
Subordinate resources:    AS: 262315
                          IP: 177.124.24.0/22
                          IP: 2804:7b8::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:20:db:f3:2f:f4:56:ae:c8:15:4d:2d:a9:a0:3a:bc:4b:0d:cc:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 21:36:40 2024 GMT
            Not After : Apr  2 21:41:40 2025 GMT
        Subject: CN=4B9B65302A1363F3DC780FF39CBEAEB906374E75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e8:55:19:00:0c:49:e1:f2:80:ff:40:00:49:
                    10:87:e7:51:5c:93:67:8e:32:dd:45:09:4b:e3:9a:
                    76:29:b6:47:26:89:5e:9f:70:06:89:34:1b:be:84:
                    2f:26:88:ae:6f:8f:b7:93:00:b0:53:58:17:bb:00:
                    fb:21:10:5d:75:f5:d0:1d:61:20:53:05:b3:e3:a5:
                    00:27:83:36:8a:24:26:9c:21:9a:ae:c4:65:fd:da:
                    f6:16:b4:84:27:c2:11:9d:ab:3b:e7:c6:81:9b:e0:
                    0a:17:f7:67:66:9b:e7:8b:57:6f:00:f5:d2:36:20:
                    e4:c7:ea:43:6a:4c:2f:5e:f0:a4:e7:46:61:93:5e:
                    21:86:de:07:88:40:a0:c1:56:be:dc:77:f9:14:43:
                    ac:34:e0:2c:e0:ed:98:ba:0c:ad:95:cb:54:d8:6b:
                    04:a7:74:05:0e:22:3c:fd:f2:c6:3a:14:9b:46:f4:
                    f1:a3:d1:85:eb:72:62:85:7f:c7:c0:33:85:a8:86:
                    b2:0f:1a:8d:d9:9f:6d:81:cb:29:72:7e:b9:44:ae:
                    31:90:a4:b0:2d:0f:6c:7a:21:eb:24:2a:fc:b5:22:
                    1c:8d:20:3c:6b:13:b7:47:36:77:17:0f:b9:f4:96:
                    af:1b:db:a1:28:b2:a6:ae:4f:d1:1b:be:09:7f:0f:
                    10:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4B:9B:65:30:2A:13:63:F3:DC:78:0F:F3:9C:BE:AE:B9:06:37:4E:75
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.24.0/22
                IPv6:
                  2804:7b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262315

    Signature Algorithm: sha256WithRSAEncryption
         82:2a:a6:a3:e5:c4:f9:5c:80:c7:30:b4:e0:cd:10:37:25:b5:
         81:76:4a:09:cf:60:8d:bb:e3:ec:f7:bf:29:2f:c4:19:ca:a0:
         20:e8:f5:1a:dd:63:5a:df:e4:7c:40:9f:15:b4:67:fc:d3:aa:
         9f:86:36:64:4a:98:1c:c4:63:fb:6e:f2:ce:28:46:a1:2a:d6:
         d9:d8:d2:3f:4d:b9:93:6b:82:ae:f9:01:06:c2:0b:80:50:6a:
         2f:e9:db:52:6f:fe:f1:3f:7d:9e:3e:17:b7:6c:60:3d:bc:76:
         f8:7c:c3:e7:27:91:67:10:76:3a:1e:bf:15:04:c8:47:cd:40:
         95:97:f0:67:8f:87:45:6d:e4:8e:40:dc:3c:f9:bd:8e:3c:ab:
         a6:b0:dc:ad:a9:cc:01:5c:e4:48:e5:61:bc:79:f3:a5:11:f3:
         57:ab:09:08:80:1e:46:a2:ac:80:63:4d:2e:d6:89:7f:5c:05:
         96:63:75:54:a3:4f:2d:ee:79:1b:7a:6e:df:20:e7:f2:3b:89:
         9b:07:16:e8:ab:11:82:6a:32:e5:25:b1:a7:ff:f5:30:0a:86:
         4b:f1:be:d0:39:78:60:de:f1:ce:eb:fb:80:e6:5a:e9:5a:5e:
         1a:b4:02:7c:8f:78:c4:99:23:08:bd:44:b8:07:25:71:8f:40:
         b9:9b:d1:6e
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUbCDb8y/0Vq7IFU0tqaA6vEsNzAYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMyMTM2NDBaFw0yNTA0MDIyMTQxNDBaMDMxMTAvBgNV
BAMTKDRCOUI2NTMwMkExMzYzRjNEQzc4MEZGMzlDQkVBRUI5MDYzNzRFNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI6FUZAAxJ4fKA/0AASRCH51Fc
k2eOMt1FCUvjmnYptkcmiV6fcAaJNBu+hC8miK5vj7eTALBTWBe7APshEF119dAd
YSBTBbPjpQAngzaKJCacIZquxGX92vYWtIQnwhGdqzvnxoGb4AoX92dmm+eLV28A
9dI2IOTH6kNqTC9e8KTnRmGTXiGG3geIQKDBVr7cd/kUQ6w04Czg7Zi6DK2Vy1TY
awSndAUOIjz98sY6FJtG9PGj0YXrcmKFf8fAM4WohrIPGo3Zn22ByylyfrlErjGQ
pLAtD2x6IeskKvy1IhyNIDxrE7dHNncXD7n0lq8b26EosqauT9Ebvgl/DxBtAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRLm2UwKhNj89x4
D/Ocvq65BjdOdTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNEtt
VmR2TDFVUFZnbXp2Q3UzNEhQVDM2Y1pjS0tGcGFLSDZCemNKZVQ1V1kvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRL
bVZkdkwxVVBWZ216dkN1MzRIUFQzNmNaY0tLRnBhS0g2QnpjSmVUNVdZLzEvNEI5
QjY1MzAyQTEzNjNGM0RDNzgwRkYzOUNCRUFFQjkwNjM3NEU3NS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCsXwYMA0EAgACMAcDBQAoBAe4MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQAqzANBgkqhkiG9w0BAQsFAAOCAQEAgiqmo+XE+VyAxzC0
4M0QNyW1gXZKCc9gjbvj7Pe/KS/EGcqgIOj1Gt1jWt/kfECfFbRn/NOqn4Y2ZEqY
HMRj+27yzihGoSrW2djSP025k2uCrvkBBsILgFBqL+nbUm/+8T99nj4Xt2xgPbx2
+HzD5yeRZxB2Oh6/FQTIR81AlZfwZ4+HRW3kjkDcPPm9jjyrprDcranMAVzkSOVh
vHnzpRHzV6sJCIAeRqKsgGNNLtaJf1wFlmN1VKNPLe55G3pu3yDn8juJmwcW6KsR
gmoy5SWxp//1MAqGS/G+0Dl4YN7xzuv7gOZa6VpeGrQCfI94xJkjCL1EuAclcY9A
uZvRbg==
-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:53 2024 by rpki-client on console.sobornost.net