Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/421315A955B12A05BBC6E72A2627E4B0F90C83D7.cer
File:                     421315A955B12A05BBC6E72A2627E4B0F90C83D7.cer (raw, json)
Hash identifier:          4Eq4xY3uJgUgh95PX0/N8GkbW6GrhVKCYHS+6YuH9No=
Subject key identifier:   42:13:15:A9:55:B1:2A:05:BB:C6:E7:2A:26:27:E4:B0:F9:0C:83:D7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4DD1918F79332A20F8AD04ECC79D199A3F6A1855
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/1/421315A955B12A05BBC6E72A2627E4B0F90C83D7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 03:43:09 +0000
Certificate not after:    Thu 03 Apr 2025 03:48:09 +0000
Subordinate resources:    AS: 268878
                          IP: 45.174.16.0/22
                          IP: 2804:5bf0::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 06:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d1:91:8f:79:33:2a:20:f8:ad:04:ec:c7:9d:19:9a:3f:6a:18:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 03:43:09 2024 GMT
            Not After : Apr  3 03:48:09 2025 GMT
        Subject: CN=421315A955B12A05BBC6E72A2627E4B0F90C83D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e6:f4:cf:b6:55:d6:50:f2:93:4c:7a:28:3c:
                    14:5b:22:c0:4d:58:79:9a:a9:00:d5:c5:ad:e1:0d:
                    7c:42:c4:2e:3d:95:fc:94:ba:07:b2:84:2f:43:5e:
                    3b:44:75:18:2b:f5:c3:d8:92:53:a5:99:11:10:c7:
                    2d:7e:dc:1b:5e:55:78:c0:33:04:8f:42:32:2c:cc:
                    06:5c:f2:2f:49:f6:73:ed:d3:b0:54:97:8a:3d:ba:
                    dd:2a:9d:05:88:1b:7f:70:28:ac:f9:af:78:41:a2:
                    2a:7e:1e:11:b4:7d:ce:7d:ce:8b:e1:6a:4a:8a:0e:
                    cb:f6:81:e0:de:6c:52:d3:06:05:6e:41:9b:f7:62:
                    74:be:f1:70:e0:21:d0:82:b0:59:16:5c:2a:03:6f:
                    88:da:e6:dd:5d:5b:f9:3b:80:30:47:a1:e0:0e:8d:
                    82:b5:ff:c3:d4:38:45:1e:cc:53:0a:60:da:e3:50:
                    f2:55:51:53:63:11:e0:9a:00:49:3b:73:61:f0:be:
                    5c:ae:56:07:fa:95:05:85:3b:fb:d3:b0:ce:67:76:
                    27:5b:3e:50:1f:02:14:4c:a7:a3:88:bc:f0:e5:20:
                    67:6f:17:ac:de:e9:16:6e:97:da:2a:ea:cf:20:c5:
                    97:31:7d:42:a3:ea:f1:46:56:e1:3f:4d:3a:38:c9:
                    02:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                42:13:15:A9:55:B1:2A:05:BB:C6:E7:2A:26:27:E4:B0:F9:0C:83:D7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/1/421315A955B12A05BBC6E72A2627E4B0F90C83D7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.16.0/22
                IPv6:
                  2804:5bf0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268878

    Signature Algorithm: sha256WithRSAEncryption
         38:a7:ee:86:92:69:f3:5c:fc:91:8e:de:09:bb:5b:b2:15:51:
         3d:2e:b5:f5:2d:6c:6e:50:c3:de:28:5c:0f:c0:40:dc:c3:d7:
         44:e3:6a:b6:2a:e5:6e:52:d3:b2:9f:5e:0e:5e:8d:5b:3e:53:
         b4:0a:91:6a:9c:96:b9:e5:fe:01:52:04:b2:8c:86:e1:23:05:
         17:e0:4f:60:a9:84:60:f7:29:df:cf:52:77:30:34:f2:28:fb:
         ab:e5:2f:48:15:b3:57:e2:68:1e:96:50:eb:b5:1d:70:72:3d:
         46:d4:b9:33:fb:20:e5:54:09:5b:97:fa:db:27:2f:36:e0:46:
         aa:13:81:97:7f:0c:be:a2:0c:fb:63:34:e0:c0:d1:86:e5:7b:
         3f:f8:2d:42:b3:6f:99:d5:79:02:15:a0:28:b9:24:89:7e:3a:
         a4:63:f2:15:16:a7:55:47:94:cb:4d:1f:03:f9:db:e0:6f:df:
         fc:d0:76:bf:d7:5a:f6:2f:36:ac:35:5c:2c:e8:dc:a3:22:f8:
         f4:29:94:17:5a:f9:63:39:c6:b8:02:52:5c:ba:0f:d1:d6:52:
         fa:c2:2c:3a:8b:82:ff:82:41:f5:65:a5:1f:a3:06:69:3e:2d:
         6a:9f:3e:c0:c2:89:5e:4c:28:0b:31:ab:87:fb:57:27:e2:e9:
         ca:7e:97:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 04:18:02 2024 by rpki-client on console-fra.rpki-client.org