Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0FC1691CE2723B06910C8870A43212BD77573423.cer
File:                     0FC1691CE2723B06910C8870A43212BD77573423.cer (raw, json)
Hash identifier:          4pgxfJDRqFhJhHbxOi/1CiRdT6ph9koYlesG0f8TUJg=
Subject key identifier:   0F:C1:69:1C:E2:72:3B:06:91:0C:88:70:A4:32:12:BD:77:57:34:23
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3E544E2F97CBC9A5552C96BA120B44BD03E9B0EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3K7adNY6QLXq8CAHJyRfhBJmVC93XWBnvkcHP2smgFkT/1/0FC1691CE2723B06910C8870A43212BD77573423.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3K7adNY6QLXq8CAHJyRfhBJmVC93XWBnvkcHP2smgFkT/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 23:34:31 +0000
Certificate not after:    Wed 02 Apr 2025 23:39:31 +0000
Subordinate resources:    AS: 267434
                          IP: 181.191.180.0/22
                          IP: 2804:4174::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 06:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:54:4e:2f:97:cb:c9:a5:55:2c:96:ba:12:0b:44:bd:03:e9:b0:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 23:34:31 2024 GMT
            Not After : Apr  2 23:39:31 2025 GMT
        Subject: CN=0FC1691CE2723B06910C8870A43212BD77573423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c8:f1:f8:16:de:8f:1e:65:32:85:5c:1e:9a:
                    d5:56:5b:67:d8:01:af:f4:cc:01:ee:4e:a2:b8:73:
                    2b:f3:36:5e:e0:45:a0:cb:f4:8d:f6:73:9c:af:0a:
                    a3:5f:77:0c:5f:0c:4c:cb:5e:55:69:3d:48:25:7b:
                    4c:eb:6b:31:77:2d:58:b9:e6:96:ef:7c:42:15:c4:
                    a3:39:59:c4:bd:78:b9:bb:f6:74:98:b9:01:f8:db:
                    59:30:de:3c:92:65:cf:7c:4d:61:91:cc:b4:80:b1:
                    ec:71:29:2d:2e:00:17:09:3f:a1:7e:dc:dd:9b:b7:
                    d9:db:06:b7:07:48:95:89:81:16:83:b6:14:ef:0d:
                    c0:71:d5:bb:71:05:ea:cd:e3:59:89:e6:22:18:18:
                    fc:d9:7e:47:c0:9f:b7:96:82:69:9d:05:a2:fc:9d:
                    67:e0:15:81:7a:2d:14:01:b0:70:ab:9c:25:c2:9d:
                    cd:d4:97:bc:0d:e9:ee:3d:98:a6:fd:8b:10:71:03:
                    64:48:ea:2c:45:2e:e0:f5:e0:6f:45:34:35:4d:0a:
                    74:df:4d:b7:c1:6c:3b:2c:b7:63:71:2a:c2:07:e0:
                    17:14:64:a5:c8:d2:90:21:60:80:80:13:56:1b:e4:
                    d6:b5:c2:0f:3b:6a:bd:74:14:90:23:29:88:63:e0:
                    5a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0F:C1:69:1C:E2:72:3B:06:91:0C:88:70:A4:32:12:BD:77:57:34:23
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3K7adNY6QLXq8CAHJyRfhBJmVC93XWBnvkcHP2smgFkT/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3K7adNY6QLXq8CAHJyRfhBJmVC93XWBnvkcHP2smgFkT/1/0FC1691CE2723B06910C8870A43212BD77573423.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.180.0/22
                IPv6:
                  2804:4174::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267434

    Signature Algorithm: sha256WithRSAEncryption
         21:c2:75:b7:5e:d2:f0:12:80:36:03:cb:e0:d7:54:fd:03:a3:
         7a:c0:a1:fd:22:42:2a:cf:1a:d1:d6:bc:fb:2f:4a:05:82:bb:
         49:00:62:fc:36:b2:97:3e:9d:a2:d9:73:4e:25:bc:d7:52:8e:
         9e:2e:51:d0:30:1e:bb:2f:20:68:f8:ef:62:d2:6d:ba:fb:57:
         c8:69:85:94:22:5e:00:bf:a9:4f:6a:fe:84:f4:0e:d4:75:7e:
         a2:f1:83:42:89:e8:e1:84:bc:18:06:d7:2e:93:71:8d:0f:ee:
         82:0b:69:2d:7b:0b:08:65:9c:8c:dc:7f:4e:16:e0:c2:c1:14:
         20:b4:2c:ef:c2:cc:02:bd:d3:f8:13:b6:3f:ba:b9:b1:11:0f:
         50:64:19:6d:60:d9:2b:1b:4a:bc:ca:46:d5:f8:6b:6e:97:27:
         ed:7a:26:b8:d0:79:fe:d9:32:03:6b:98:96:69:59:4e:c8:a6:
         4f:e1:c9:3b:be:e2:72:18:7e:19:41:6b:27:c6:fb:d8:0c:35:
         37:6d:3d:9b:ff:61:00:e8:a9:ea:8c:c4:c7:fd:5f:93:59:45:
         7b:a7:25:ed:41:91:74:27:3d:de:3b:d2:01:ba:e2:3d:ca:86:
         6d:54:d7:32:87:43:ad:40:76:f2:ba:26:25:78:6f:45:5a:07:
         85:23:49:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 04:17:58 2024 by rpki-client on console-fra.rpki-client.org