Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BA9C8AE4CFCE7D900B77A32AAE8AB549D301426F.cer
File:                     BA9C8AE4CFCE7D900B77A32AAE8AB549D301426F.cer (raw, json)
Hash identifier:          X+rzFiF/JeaiGPlNZiOel3VrdfbpQaX/eRs/MQ8hQTM=
Subject key identifier:   BA:9C:8A:E4:CF:CE:7D:90:0B:77:A3:2A:AE:8A:B5:49:D3:01:42:6F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4B0362D192308445BF6AAF4D2B213D376B07C3DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/1/BA9C8AE4CFCE7D900B77A32AAE8AB549D301426F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 01:54:52 +0000
Certificate not after:    Thu 03 Apr 2025 01:59:52 +0000
Subordinate resources:    AS: 268258
                          IP: 45.237.8.0/22
                          IP: 2804:4e64::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 22:39:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:03:62:d1:92:30:84:45:bf:6a:af:4d:2b:21:3d:37:6b:07:c3:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 01:54:52 2024 GMT
            Not After : Apr  3 01:59:52 2025 GMT
        Subject: CN=BA9C8AE4CFCE7D900B77A32AAE8AB549D301426F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0a:74:d8:e3:29:fe:0c:2a:7e:4c:7b:06:d8:
                    c7:4d:34:1f:8c:66:ad:b7:65:c0:07:37:76:21:bd:
                    b1:bd:04:f9:27:b1:98:94:28:39:a9:1a:d3:f9:84:
                    0f:06:ee:46:a3:5f:e9:bb:f3:94:15:f5:98:a9:eb:
                    83:0d:06:f8:7d:3d:19:f3:d0:2a:cb:e6:81:c5:8b:
                    8f:d0:f7:1e:68:6e:45:9e:12:d5:da:5c:8b:87:97:
                    aa:16:3f:bb:39:ac:ae:1e:6c:40:cc:5f:13:ab:91:
                    bc:16:1f:89:a9:fd:7c:b5:f5:68:dd:fb:67:69:4e:
                    8d:46:9b:6b:a7:f2:a6:ab:30:4a:a8:ca:86:83:91:
                    e0:1b:12:df:bc:e6:8c:27:ac:93:76:8c:6f:4d:25:
                    99:d9:ce:91:34:ec:8b:4e:27:14:35:1b:2e:c4:2d:
                    59:b5:37:72:df:ce:c2:61:48:5d:90:16:e0:b9:7e:
                    dd:4e:90:c4:9d:f8:55:06:af:6e:7d:94:84:0e:c7:
                    f4:1b:20:47:6f:e8:d2:8d:1f:af:45:c4:10:6f:da:
                    98:fa:0f:ff:f6:7b:89:fe:4c:02:f2:2d:69:0e:ba:
                    1e:8f:65:2f:99:24:5a:ca:36:e5:c8:50:28:d9:e2:
                    00:fd:e3:5f:6b:e6:6c:a6:bc:d4:50:f6:ce:f6:a1:
                    00:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BA:9C:8A:E4:CF:CE:7D:90:0B:77:A3:2A:AE:8A:B5:49:D3:01:42:6F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/1/BA9C8AE4CFCE7D900B77A32AAE8AB549D301426F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.8.0/22
                IPv6:
                  2804:4e64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268258

    Signature Algorithm: sha256WithRSAEncryption
         85:f6:f4:9a:69:7f:47:0f:ac:16:27:d3:5b:9b:ba:55:e7:77:
         2c:96:65:48:0f:88:9f:e1:1e:c5:38:e5:06:25:68:a6:8e:27:
         62:51:1e:74:37:2a:80:55:c6:cc:e7:ba:91:42:30:69:8b:21:
         c3:56:d8:26:9b:ba:62:9a:a7:1c:9a:24:f0:c6:b1:ba:b5:7f:
         46:26:94:6d:5c:81:a0:ac:79:10:d7:e6:02:a6:52:e2:9c:0f:
         12:aa:6f:90:93:59:d1:9e:61:7f:7c:da:37:96:c7:33:c1:de:
         e6:49:be:e1:04:af:a2:27:5c:fc:2f:d4:f9:2e:36:ca:f9:48:
         ea:66:b4:3f:78:e6:ac:2e:df:6a:03:e0:b8:2e:0b:a3:06:e6:
         59:26:02:b5:de:c2:30:a1:4d:ee:0c:79:91:0e:21:57:f6:84:
         48:87:9c:cc:b2:7f:07:d7:25:cb:9b:22:2f:46:12:94:cc:78:
         ee:11:01:82:e1:34:49:39:60:76:ee:01:07:81:ee:6f:85:16:
         b9:cf:14:38:28:79:9d:d1:d4:ec:a2:ab:f8:67:87:78:cd:1b:
         e7:bb:1c:ae:55:5a:95:56:2c:35:b8:26:07:34:53:46:94:37:
         80:80:59:05:5b:de:ae:ac:94:17:50:8d:1a:44:cb:1a:09:72:
         63:46:0d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 22:09:42 2024 by rpki-client on console-fra.rpki-client.org