Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/03D348CD504673CC24A6139BE73024EECBC0A420.cer
File:                     03D348CD504673CC24A6139BE73024EECBC0A420.cer (raw, json)
Hash identifier:          lkKSC85Vm1O7/Sy4NAoNE8kYJIndSOYsr2ApDTr/PN4=
Subject key identifier:   03:D3:48:CD:50:46:73:CC:24:A6:13:9B:E7:30:24:EE:CB:C0:A4:20
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7F85781BD499EDF7B5C60AA66DC3DAE66D42C57B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FeywamAHtTsbtFhzLP8A1es3tq9ZLpGaxSwmc8Yw4uhN/1/03D348CD504673CC24A6139BE73024EECBC0A420.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FeywamAHtTsbtFhzLP8A1es3tq9ZLpGaxSwmc8Yw4uhN/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 13:36:58 +0000
Certificate not after:    Thu 03 Apr 2025 13:41:58 +0000
Subordinate resources:    AS: 271441
                          IP: 181.233.92.0/22
                          IP: 2804:7b94::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:85:78:1b:d4:99:ed:f7:b5:c6:0a:a6:6d:c3:da:e6:6d:42:c5:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 13:36:58 2024 GMT
            Not After : Apr  3 13:41:58 2025 GMT
        Subject: CN=03D348CD504673CC24A6139BE73024EECBC0A420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b7:24:c4:9d:8f:0c:4f:84:f1:b1:44:3e:b3:
                    7a:6b:dc:54:f4:a7:44:fe:e9:5a:29:80:34:86:56:
                    db:15:92:f0:6e:7d:71:fe:09:91:4c:4c:9d:27:0e:
                    9f:04:cb:b8:c8:40:64:46:e2:ac:e8:b3:42:30:26:
                    18:c5:2c:d4:eb:41:91:7b:01:ba:6e:bb:7e:26:f5:
                    f3:5f:a6:12:60:bc:3e:56:64:05:9b:b2:9d:fa:70:
                    a9:73:7e:92:12:00:3f:3f:2a:d4:ac:01:06:ce:7e:
                    4b:ac:4b:0e:b0:61:17:e2:31:80:94:c8:5a:c5:12:
                    71:e3:6b:40:34:97:39:af:3e:83:2f:a8:2c:fc:0b:
                    ba:8b:13:73:81:32:2b:32:43:ba:9c:41:5b:0a:d6:
                    5d:71:40:cc:a3:37:42:4b:19:ad:77:23:36:c4:a7:
                    96:f5:89:9a:64:87:a7:5d:d6:7d:fd:81:aa:12:ea:
                    56:56:58:2b:0e:76:ad:6e:af:5a:7a:5c:9d:8b:87:
                    85:69:89:d1:92:b4:21:e6:6a:73:80:0c:77:17:8c:
                    fa:3d:f6:09:40:0b:f5:2a:16:11:92:84:34:eb:d2:
                    1b:cc:53:f2:eb:8f:1f:a5:d6:e3:f6:04:d3:64:37:
                    9a:98:48:1d:c1:c5:2e:30:c6:ee:ef:ed:2d:0d:11:
                    51:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                03:D3:48:CD:50:46:73:CC:24:A6:13:9B:E7:30:24:EE:CB:C0:A4:20
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FeywamAHtTsbtFhzLP8A1es3tq9ZLpGaxSwmc8Yw4uhN/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FeywamAHtTsbtFhzLP8A1es3tq9ZLpGaxSwmc8Yw4uhN/1/03D348CD504673CC24A6139BE73024EECBC0A420.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.92.0/22
                IPv6:
                  2804:7b94::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271441

    Signature Algorithm: sha256WithRSAEncryption
         b3:30:3c:de:3a:8e:41:c2:10:b2:01:c6:64:57:8b:b9:97:2b:
         2c:f6:5c:b8:10:bb:a5:02:1e:cb:11:b4:fd:87:75:c2:3d:8a:
         84:83:20:ea:c0:95:ca:7a:0d:b7:b5:49:3b:67:00:ab:30:0c:
         14:7f:38:45:0c:fc:5b:d2:18:86:c8:12:dc:90:a5:2d:44:0c:
         83:ac:f4:83:d6:27:7c:18:23:f5:df:c4:61:b4:41:56:9b:a8:
         fd:0f:4a:59:6c:74:e2:ba:f3:30:0d:80:19:11:ea:61:9b:e0:
         82:9c:43:27:e8:a7:1f:28:7f:5b:fa:4d:a7:86:25:8f:fe:8e:
         eb:dd:c7:f7:94:34:9e:b8:27:62:fc:1f:45:f3:63:84:58:f8:
         59:df:42:bd:fa:97:36:fb:d4:c1:66:1a:82:ae:b4:98:db:30:
         9c:57:7f:37:b9:67:52:dd:46:ef:b4:57:5f:6f:1b:3d:c7:09:
         75:1b:67:d3:08:e0:e9:1a:5f:07:06:6f:81:a1:15:21:fa:50:
         d0:43:24:db:11:31:8e:75:e9:dd:c9:22:ae:f8:ea:0c:83:00:
         20:ce:c0:10:ab:fe:25:a9:e7:19:c4:1c:48:84:8d:b7:f7:5b:
         33:a4:97:08:36:e2:09:77:08:36:74:ac:65:f5:02:01:69:e2:
         a2:57:e5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:12 2024 by rpki-client on console-fra.rpki-client.org