Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9493A80CAADC7A914A69771041280F1EFF1AC9E5.cer
File:                     9493A80CAADC7A914A69771041280F1EFF1AC9E5.cer (raw, json)
Hash identifier:          6V4C5+zXf7zuCmM5fn9GvX3+F7uoQfC/bFrzelZQ1+g=
Subject key identifier:   94:93:A8:0C:AA:DC:7A:91:4A:69:77:10:41:28:0F:1E:FF:1A:C9:E5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4DDCBB430788E31EE2EC75C3B6BE4EAB3550D81E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H1Thq83KXhwZRqdxmN1sACotAoSKzZG2aAG4wb5sqa9H/0/9493A80CAADC7A914A69771041280F1EFF1AC9E5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H1Thq83KXhwZRqdxmN1sACotAoSKzZG2aAG4wb5sqa9H/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 12 Sep 2024 19:00:15 +0000
Certificate not after:    Thu 11 Sep 2025 19:05:15 +0000
Subordinate resources:    AS: 61740
                          AS: 264564
                          IP: 131.72.188.0/22
                          IP: 138.36.4.0/22
                          IP: 168.232.148.0/22
                          IP: 170.81.80.0/22
                          IP: 170.245.72.0/22
                          IP: 2804:1ba0::/32
                          IP: 2804:219c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:dc:bb:43:07:88:e3:1e:e2:ec:75:c3:b6:be:4e:ab:35:50:d8:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 12 19:00:15 2024 GMT
            Not After : Sep 11 19:05:15 2025 GMT
        Subject: CN=9493A80CAADC7A914A69771041280F1EFF1AC9E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4c:6b:f8:5b:4e:7d:52:5e:d6:27:0b:16:32:
                    6e:ca:87:af:38:16:f4:0f:b9:59:fe:e4:d1:81:1c:
                    7f:78:d1:26:c9:05:16:f6:81:b0:d3:d0:6a:2b:06:
                    8c:5d:e7:4a:21:35:bc:60:71:7c:f0:e2:54:e7:e1:
                    99:b1:83:58:73:82:59:ea:70:55:61:3b:6f:53:38:
                    d4:3c:7c:11:59:d5:4f:9b:eb:4d:d3:6a:ee:88:03:
                    6f:e2:cd:c5:65:0d:8f:d7:63:b3:34:a1:39:38:fc:
                    fe:4f:8e:68:bd:40:3d:a7:ce:60:e4:2b:5b:68:af:
                    e4:02:e5:1b:d4:6e:e0:47:34:26:bd:1c:d1:16:ca:
                    ec:99:e7:91:88:a5:19:ec:14:2c:d3:69:30:4c:85:
                    96:d1:f1:b1:4b:2f:dd:d0:70:62:a5:eb:7a:f7:34:
                    f6:4c:47:eb:ad:62:5c:80:00:18:60:cc:d9:e4:63:
                    7d:e8:26:2d:f9:94:b0:a2:74:95:b0:0f:27:41:9d:
                    77:2a:a3:81:e2:30:38:46:99:4c:bc:ca:9f:b3:98:
                    5b:a8:ec:83:94:5c:ef:24:2a:b3:48:dc:aa:61:a0:
                    92:d7:79:2b:aa:cd:17:13:c6:06:a7:88:8c:ab:f4:
                    db:4c:65:9c:79:fe:28:06:fc:18:a6:bc:e6:3d:45:
                    3b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                94:93:A8:0C:AA:DC:7A:91:4A:69:77:10:41:28:0F:1E:FF:1A:C9:E5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H1Thq83KXhwZRqdxmN1sACotAoSKzZG2aAG4wb5sqa9H/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H1Thq83KXhwZRqdxmN1sACotAoSKzZG2aAG4wb5sqa9H/0/9493A80CAADC7A914A69771041280F1EFF1AC9E5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.188.0/22
                  138.36.4.0/22
                  168.232.148.0/22
                  170.81.80.0/22
                  170.245.72.0/22
                IPv6:
                  2804:1ba0::/32
                  2804:219c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61740
                  264564

    Signature Algorithm: sha256WithRSAEncryption
         ae:54:c2:8f:57:57:92:98:f6:f9:2f:61:3f:eb:c3:6d:b5:a7:
         60:f9:33:5a:4a:67:4c:48:2d:8d:00:51:ac:30:ce:d5:99:49:
         5a:a5:88:6b:37:ea:d5:00:a8:28:66:88:a3:01:57:38:3f:95:
         10:86:cd:60:7c:4a:08:c5:c1:86:18:c5:03:c8:e5:f9:9c:87:
         cd:7a:bd:83:0c:01:fd:18:bd:a7:73:ad:b1:19:62:1f:73:94:
         c5:3e:6a:4d:38:8a:17:a5:4a:a4:98:76:2a:4f:b9:a9:38:ae:
         b6:71:13:fe:35:4c:6a:5d:12:8f:73:6b:7a:76:da:3f:d0:58:
         ca:c8:f9:5e:0a:84:b2:8e:94:be:d7:af:b7:42:df:c6:c2:8f:
         51:54:e1:07:7d:8c:ea:50:c2:8a:4a:db:d9:7a:34:6a:0c:d4:
         f4:11:34:29:d9:e0:4a:be:56:02:51:59:e5:2e:bf:61:d4:ce:
         b5:8a:48:b6:12:cc:f8:9a:26:b0:42:6a:21:8f:06:d2:17:f9:
         7b:63:8d:4f:e5:71:e6:dc:4b:c2:ee:f8:2d:11:5f:53:dc:9f:
         0a:13:cc:8b:c3:cb:99:8d:0b:8f:99:c7:f8:ff:86:5c:93:a0:
         9d:e0:8f:c7:a1:81:fb:24:7b:e1:90:6a:e9:c1:c0:c2:49:67:
         72:42:22:23
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUTdy7QweI4x7i7HXDtr5OqzVQ2B4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA5MTIxOTAwMTVaFw0yNTA5MTExOTA1MTVaMDMxMTAvBgNV
BAMTKDk0OTNBODBDQUFEQzdBOTE0QTY5NzcxMDQxMjgwRjFFRkYxQUM5RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsTGv4W059Ul7WJwsWMm7Kh684
FvQPuVn+5NGBHH940SbJBRb2gbDT0GorBoxd50ohNbxgcXzw4lTn4Zmxg1hzglnq
cFVhO29TONQ8fBFZ1U+b603Tau6IA2/izcVlDY/XY7M0oTk4/P5Pjmi9QD2nzmDk
K1tor+QC5RvUbuBHNCa9HNEWyuyZ55GIpRnsFCzTaTBMhZbR8bFLL93QcGKl63r3
NPZMR+utYlyAABhgzNnkY33oJi35lLCidJWwDydBnXcqo4HiMDhGmUy8yp+zmFuo
7IOUXO8kKrNI3KphoJLXeSuqzRcTxganiIyr9NtMZZx5/igG/BimvOY9RTtrAgMB
AAGjggNeMIIDWjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSUk6gMqtx6kUpp
dxBBKA8e/xrJ5TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSDFU
aHE4M0tYaHdaUnFkeG1OMXNBQ290QW9TS3paRzJhQUc0d2I1c3FhOUgvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0gx
VGhxODNLWGh3WlJxZHhtTjFzQUNvdEFvU0t6WkcyYUFHNHdiNXNxYTlILzAvOTQ5
M0E4MENBQURDN0E5MTRBNjk3NzEwNDEyODBGMUVGRjFBQzlFNS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME0GCCsGAQUFBwEH
AQH/BD4wPDAkBAIAATAeAwQCg0i8AwQCiiQEAwQCqOiUAwQCqlFQAwQCqvVIMBQE
AgACMA4DBQAoBBugAwUAKAQhnDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMA8SwC
AwQJdDANBgkqhkiG9w0BAQsFAAOCAQEArlTCj1dXkpj2+S9hP+vDbbWnYPkzWkpn
TEgtjQBRrDDO1ZlJWqWIazfq1QCoKGaIowFXOD+VEIbNYHxKCMXBhhjFA8jl+ZyH
zXq9gwwB/Ri9p3OtsRliH3OUxT5qTTiKF6VKpJh2Kk+5qTiutnET/jVMal0Sj3Nr
enbaP9BYysj5XgqEso6Uvtevt0LfxsKPUVThB32M6lDCikrb2Xo0agzU9BE0Kdng
Sr5WAlFZ5S6/YdTOtYpIthLM+JomsEJqIY8G0hf5e2ONT+Vx5txLwu74LRFfU9yf
ChPMi8PLmY0Lj5nH+P+GXJOgneCPx6GB+yR74ZBq6cHAwklnckIiIw==
-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:05 2024 by rpki-client on console.sobornost.net