Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/018A78C592C05C311E7AB3FDA73A9D2663DE4AFC.cer
File:                     018A78C592C05C311E7AB3FDA73A9D2663DE4AFC.cer (raw, json)
Hash identifier:          jMrc2pJnfxoZy6n67gis6j/IDKtrSDHM0XBhug5V/rU=
Subject key identifier:   01:8A:78:C5:92:C0:5C:31:1E:7A:B3:FD:A7:3A:9D:26:63:DE:4A:FC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4FB9D156DE36E727940DC7EB47507EACEB8F5CC8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/018A78C592C05C311E7AB3FDA73A9D2663DE4AFC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 04:08:36 +0000
Certificate not after:    Thu 03 Apr 2025 04:13:36 +0000
Subordinate resources:    AS: 267596
                          IP: 45.71.20.0/22
                          IP: 2804:43e0::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jul 2024 05:09:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:b9:d1:56:de:36:e7:27:94:0d:c7:eb:47:50:7e:ac:eb:8f:5c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 04:08:36 2024 GMT
            Not After : Apr  3 04:13:36 2025 GMT
        Subject: CN=018A78C592C05C311E7AB3FDA73A9D2663DE4AFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:64:f0:00:61:be:b8:9e:31:dd:eb:33:1f:6c:
                    0b:b1:cc:cf:76:fd:cb:d0:a4:1d:1b:0a:9c:28:52:
                    56:b2:6c:92:cd:ac:51:78:72:54:cd:eb:f1:12:76:
                    20:0d:d0:a9:60:30:25:e7:e9:8e:f3:4f:c9:03:7e:
                    47:d4:3c:4a:b9:0c:a0:2e:8b:72:79:96:b0:38:f2:
                    1a:81:09:01:87:a9:d8:0d:65:57:3b:c0:0e:15:ba:
                    4f:1b:52:e5:a5:9e:dc:b8:b5:74:d3:46:7f:2b:00:
                    00:86:19:5a:64:32:59:3e:4c:c6:dd:e7:dc:01:f0:
                    7c:88:38:54:af:0f:36:d2:46:66:b0:de:10:a2:0f:
                    64:48:4b:69:fc:1b:52:62:c7:a6:34:99:a9:02:7b:
                    b3:57:f9:1c:c0:77:df:ff:b1:d6:ba:8d:77:ea:b4:
                    2f:dd:af:27:2f:c1:0c:43:38:4e:cf:51:e6:f6:88:
                    3e:fd:4e:3c:a6:ff:90:61:d8:b0:bc:81:0d:c0:85:
                    02:bf:d0:f8:d9:9e:cc:16:79:54:b6:80:37:c7:f6:
                    b7:dd:8a:d0:46:b9:f5:68:c3:c3:ff:2c:c9:d4:dd:
                    61:1a:44:f2:d0:57:3e:49:8b:1d:6a:51:81:49:7e:
                    78:d2:a1:1d:9b:d9:8d:84:5d:29:b1:64:cf:f2:0d:
                    85:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                01:8A:78:C5:92:C0:5C:31:1E:7A:B3:FD:A7:3A:9D:26:63:DE:4A:FC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/018A78C592C05C311E7AB3FDA73A9D2663DE4AFC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.20.0/22
                IPv6:
                  2804:43e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267596

    Signature Algorithm: sha256WithRSAEncryption
         3c:79:93:cd:80:1d:b3:a4:20:95:10:96:80:01:4b:c6:5e:03:
         5c:e2:b3:60:56:18:a8:7f:8a:b5:fc:12:04:e3:b1:69:8f:fd:
         15:e5:2c:6b:46:e4:33:84:b6:ab:b1:19:31:ca:13:14:5d:f0:
         6d:ee:68:99:c0:a1:30:ef:48:7a:5e:36:8e:80:d0:00:ba:64:
         45:cf:91:ee:1a:26:84:b9:93:80:d1:ac:66:4e:8b:05:f8:ba:
         b6:b9:9c:ed:8c:b4:10:4c:d4:5b:f2:4e:14:6b:36:6f:f3:9f:
         ec:0b:29:7a:41:87:f1:5f:94:6d:94:72:04:5e:bb:b5:ba:d4:
         69:ff:74:3d:98:46:26:89:f0:38:af:b4:e2:32:d2:55:c9:80:
         2f:49:04:c0:46:20:c6:65:53:66:aa:d0:5a:b5:bc:73:c1:53:
         cf:81:b1:e5:24:92:98:a8:52:a8:47:82:4b:81:64:ad:89:71:
         b8:5f:8c:b9:41:e1:24:54:f2:ca:ab:90:10:6a:2c:96:a9:c3:
         22:7f:9d:f6:ad:9a:9d:ab:64:f2:d8:23:dd:59:8e:29:c1:1e:
         9a:70:cd:60:11:b6:18:b5:b4:3d:46:93:fe:0e:d1:9b:7f:3c:
         7a:3c:59:b6:60:04:d1:2c:f0:e5:55:05:db:f1:66:2f:79:8a:
         34:ee:a3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 02:59:18 2024 by rpki-client on console-fra.rpki-client.org