Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D979354501F8AFD5B6D16AACA9B87F348276D2FA.cer
File:                     D979354501F8AFD5B6D16AACA9B87F348276D2FA.cer (raw, json)
Hash identifier:          45HTZ2BdHBdrADYR2bA0RDQ68tTeG7arHqknrn6Ih2w=
Subject key identifier:   D9:79:35:45:01:F8:AF:D5:B6:D1:6A:AC:A9:B8:7F:34:82:76:D2:FA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       23F4C1689CAAF8E17745445087125A88B02B6406
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/1/D979354501F8AFD5B6D16AACA9B87F348276D2FA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 20 Apr 2024 18:34:04 +0000
Certificate not after:    Sat 19 Apr 2025 18:39:04 +0000
Subordinate resources:    AS: 262908
                          IP: 168.196.56.0/22
                          IP: 177.38.24.0/21
                          IP: 177.52.56.0/22
                          IP: 177.91.136.0/22
                          IP: 2804:3c8::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 06:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f4:c1:68:9c:aa:f8:e1:77:45:44:50:87:12:5a:88:b0:2b:64:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 20 18:34:04 2024 GMT
            Not After : Apr 19 18:39:04 2025 GMT
        Subject: CN=D979354501F8AFD5B6D16AACA9B87F348276D2FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:88:76:54:26:a2:26:17:08:ff:dc:a2:01:d8:
                    da:36:aa:44:29:79:a2:4a:b6:23:08:15:38:93:67:
                    c5:31:f7:9b:cb:50:87:35:02:f7:20:e7:8c:63:bf:
                    10:2f:83:c6:c2:b1:ca:c8:33:f1:0e:25:33:a8:55:
                    be:04:1d:7d:95:51:c6:a1:94:c6:e8:af:c6:13:3c:
                    f5:f3:9f:1a:a5:54:d8:1c:d9:62:d0:c6:8d:34:71:
                    13:fa:79:61:27:15:c8:45:42:04:99:26:f7:ab:3b:
                    95:a9:0f:ee:c7:c7:7d:9d:66:43:56:2f:83:66:4f:
                    ba:51:f3:b2:5d:87:bc:b2:b0:a8:be:dd:19:aa:39:
                    95:30:66:5c:31:07:6b:ff:a1:98:ac:91:8c:48:7c:
                    b1:5b:27:8a:98:d6:f6:59:93:b7:70:f9:5e:d0:d2:
                    e1:86:b5:5a:3d:52:d1:ea:6f:82:0a:71:bf:7c:dd:
                    f9:be:fa:b1:97:47:b9:e7:cf:8b:61:bd:6e:48:3f:
                    1b:3f:ef:81:23:1e:10:e0:1b:f1:38:c3:fe:4a:fb:
                    90:fd:fc:07:69:e2:72:30:48:e1:c3:d7:7c:fb:4e:
                    fd:46:f5:e3:46:dc:5d:71:aa:d8:34:0b:3f:03:8d:
                    c7:45:19:e8:5d:c7:7b:95:c7:2c:2f:ec:df:ac:3a:
                    9e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D9:79:35:45:01:F8:AF:D5:B6:D1:6A:AC:A9:B8:7F:34:82:76:D2:FA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/1/D979354501F8AFD5B6D16AACA9B87F348276D2FA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.56.0/22
                  177.38.24.0/21
                  177.52.56.0/22
                  177.91.136.0/22
                IPv6:
                  2804:3c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262908

    Signature Algorithm: sha256WithRSAEncryption
         60:44:a3:fc:63:49:90:12:39:ba:7f:69:d8:29:bf:29:c3:d2:
         26:f1:f5:a8:0c:fb:c5:af:11:c7:1d:b3:1b:5d:4c:a6:b0:14:
         e7:6b:f8:c0:90:95:2d:2e:0d:79:d4:af:de:2f:19:1f:43:94:
         6b:de:c9:3d:7f:f1:71:fd:e8:4d:1b:e3:2e:6c:bc:c4:50:9e:
         17:75:5c:27:30:8b:83:19:a6:ad:12:59:48:87:10:de:bc:f1:
         ea:7b:32:31:2b:1a:e9:af:64:ee:dc:7a:2c:21:1a:fe:a3:d9:
         e0:34:85:46:30:da:7d:93:1b:45:b8:0a:d0:c9:c1:27:48:61:
         49:cd:2a:a4:40:77:94:b2:a7:c9:53:40:f7:41:9f:90:f1:07:
         a5:4a:71:d2:f7:56:1a:b8:b0:99:0b:59:b8:29:43:a6:bd:6e:
         11:3c:4f:93:03:c7:99:0f:01:51:77:81:b2:77:58:20:16:51:
         6e:30:86:31:f6:ff:e4:b8:7c:56:49:16:fb:e8:ec:fd:ee:c8:
         e9:46:48:19:0f:02:f6:f1:a2:ab:6b:0e:b5:80:f3:ae:08:93:
         8b:3f:1e:bd:96:b4:bf:ec:7c:35:90:ac:0f:9c:43:6e:5c:c5:
         aa:46:2d:6e:72:2a:d4:fc:dc:44:f8:b9:a2:d9:81:8e:5d:db:
         99:7b:55:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 04:18:10 2024 by rpki-client on console-fra.rpki-client.org