Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E4341DCAE98C4F2AAF19C717D6FB4C0B43E9BA29.cer
File:                     E4341DCAE98C4F2AAF19C717D6FB4C0B43E9BA29.cer (raw, json)
Hash identifier:          VXF1O9ElMKQNF27oQUSocWAuEGgkOgyMEmBXfnyMzhw=
Subject key identifier:   E4:34:1D:CA:E9:8C:4F:2A:AF:19:C7:17:D6:FB:4C:0B:43:E9:BA:29
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2DCBF536B8E521BE76468C7E10427AA873E808B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/E4341DCAE98C4F2AAF19C717D6FB4C0B43E9BA29.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 09 Aug 2024 19:27:39 +0000
Certificate not after:    Fri 08 Aug 2025 19:32:39 +0000
Subordinate resources:    AS: 262407
                          IP: 138.0.92.0/22
                          IP: 177.38.144.0/21
                          IP: 189.76.240.0/20
                          IP: 2804:3f4::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:cb:f5:36:b8:e5:21:be:76:46:8c:7e:10:42:7a:a8:73:e8:08:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  9 19:27:39 2024 GMT
            Not After : Aug  8 19:32:39 2025 GMT
        Subject: CN=E4341DCAE98C4F2AAF19C717D6FB4C0B43E9BA29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fd:b4:23:3c:4b:28:4b:3c:b3:1c:b7:11:23:
                    59:a7:66:84:5e:65:57:7b:27:8e:90:b9:57:8e:09:
                    bd:d4:9f:e4:1a:72:61:74:d9:fe:28:a6:74:bc:ee:
                    41:2f:4c:ca:80:f9:85:79:4f:72:8b:34:1b:12:8f:
                    67:2e:d0:82:56:48:b9:bb:20:e2:47:d4:c7:49:18:
                    03:8e:5b:d1:c4:97:1d:4c:a0:54:bd:b7:d2:c5:83:
                    ed:f5:3f:a7:58:1d:6a:d0:4a:7b:c2:c7:db:02:72:
                    97:2f:bf:55:4e:35:36:b8:70:c4:63:ae:9a:e7:3e:
                    4e:bb:60:07:ad:c2:c6:c9:e3:30:ba:6d:88:73:ea:
                    f7:1f:f6:8f:0f:75:53:34:ef:3d:b0:b7:99:b7:d4:
                    23:70:8a:08:c4:de:e8:db:c2:72:d8:fd:6d:14:59:
                    62:c0:49:d7:4d:3c:ca:00:70:e4:35:a2:35:6a:b2:
                    88:f9:16:75:2e:49:1f:e4:0e:6d:10:49:20:c8:d9:
                    94:ec:69:2d:3b:07:fd:5e:33:1b:4f:77:45:15:b1:
                    a4:dc:b9:d6:62:ea:0b:75:ce:73:30:b8:96:7f:71:
                    36:2b:e4:9f:e0:72:98:0a:a3:de:60:c8:db:62:67:
                    83:32:87:4a:80:b5:bb:a5:e0:42:b0:51:87:18:07:
                    5e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E4:34:1D:CA:E9:8C:4F:2A:AF:19:C7:17:D6:FB:4C:0B:43:E9:BA:29
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/E4341DCAE98C4F2AAF19C717D6FB4C0B43E9BA29.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.92.0/22
                  177.38.144.0/21
                  189.76.240.0/20
                IPv6:
                  2804:3f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262407

    Signature Algorithm: sha256WithRSAEncryption
         aa:c6:75:2c:2d:44:32:b7:22:a3:47:f0:19:b2:65:fc:a9:3b:
         fe:e3:b2:20:33:c4:bb:fc:15:8b:87:05:77:cb:57:0b:5d:24:
         b0:d5:c6:18:60:d8:7c:c8:1a:1d:9b:13:3e:be:71:f2:b1:e1:
         a7:2b:b3:42:60:8a:89:3f:0d:65:b6:0c:92:0f:d9:e9:5e:11:
         a3:32:d2:2d:13:4f:d6:25:00:a3:c8:5c:7c:69:75:93:28:24:
         4c:3a:fd:54:24:8b:85:e7:b8:81:c1:05:52:34:38:9a:15:33:
         bb:72:30:fc:48:f5:63:ac:ca:a2:12:ca:da:64:1b:38:e2:79:
         eb:99:d9:f1:65:22:56:35:5c:87:ea:c6:ba:82:63:af:76:56:
         ac:20:0b:db:e1:fc:fd:c2:c0:66:f0:54:b2:48:cf:da:85:f9:
         17:64:53:66:79:17:18:dd:61:a8:d0:0d:5a:6c:4f:7e:a5:34:
         93:9b:72:7d:fc:c8:9d:49:61:1b:7e:11:b0:ea:de:78:39:63:
         a3:dd:6b:25:7d:00:f8:99:55:c2:be:f0:18:c4:a4:02:f2:03:
         c0:59:ba:11:a3:c5:bc:c5:b0:3c:51:ee:e7:01:aa:e4:50:4b:
         17:90:ad:bd:e5:8d:95:7e:7e:f6:ba:cb:0f:bc:60:9d:2e:21:
         ab:d0:3b:a0
-----BEGIN CERTIFICATE-----
MIIGPDCCBSSgAwIBAgIULcv1NrjlIb52Rox+EEJ6qHPoCLEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA4MDkxOTI3MzlaFw0yNTA4MDgxOTMyMzlaMDMxMTAvBgNV
BAMTKEU0MzQxRENBRTk4QzRGMkFBRjE5QzcxN0Q2RkI0QzBCNDNFOUJBMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj/bQjPEsoSzyzHLcRI1mnZoRe
ZVd7J46QuVeOCb3Un+QacmF02f4opnS87kEvTMqA+YV5T3KLNBsSj2cu0IJWSLm7
IOJH1MdJGAOOW9HElx1MoFS9t9LFg+31P6dYHWrQSnvCx9sCcpcvv1VONTa4cMRj
rprnPk67YAetwsbJ4zC6bYhz6vcf9o8PdVM07z2wt5m31CNwigjE3ujbwnLY/W0U
WWLASddNPMoAcOQ1ojVqsoj5FnUuSR/kDm0QSSDI2ZTsaS07B/1eMxtPd0UVsaTc
udZi6gt1znMwuJZ/cTYr5J/gcpgKo95gyNtiZ4Myh0qAtbul4EKwUYcYB17NAgMB
AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTkNB3K6YxPKq8Z
xxfW+0wLQ+m6KTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQmF4
dDlpZTZZRHA4MWlncmRjbzVYR2VkbXhzZ1l0dUhhMlAxV2RiVFpYSEUvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Jh
eHQ5aWU2WURwODFpZ3JkY281WEdlZG14c2dZdHVIYTJQMVdkYlRaWEhFLzAvRTQz
NDFEQ0FFOThDNEYyQUFGMTlDNzE3RDZGQjRDMEI0M0U5QkEyOS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH
AQH/BCswKTAYBAIAATASAwQCigBcAwQDsSaQAwQEvUzwMA0EAgACMAcDBQAoBAP0
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQBBzANBgkqhkiG9w0BAQsFAAOCAQEA
qsZ1LC1EMrcio0fwGbJl/Kk7/uOyIDPEu/wVi4cFd8tXC10ksNXGGGDYfMgaHZsT
Pr5x8rHhpyuzQmCKiT8NZbYMkg/Z6V4RozLSLRNP1iUAo8hcfGl1kygkTDr9VCSL
hee4gcEFUjQ4mhUzu3Iw/Ej1Y6zKohLK2mQbOOJ565nZ8WUiVjVch+rGuoJjr3ZW
rCAL2+H8/cLAZvBUskjP2oX5F2RTZnkXGN1hqNANWmxPfqU0k5tyffzInUlhG34R
sOreeDljo91rJX0A+JlVwr7wGMSkAvIDwFm6EaPFvMWwPFHu5wGq5FBLF5CtveWN
lX5+9rrLD7xgnS4hq9A7oA==
-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:19 2024 by rpki-client on console.sobornost.net