Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.cer
File:                     06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.cer (raw, json)
Hash identifier:          TuyXghXKeRFdtQjI4wo04MeROHv+w/Cci3L9NhctocM=
Subject key identifier:   06:18:5E:1A:AA:BD:EA:E4:2E:58:12:9B:DE:A4:CF:EC:F0:C8:F7:CB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6D7DE7395C12B12F6482226A09EC9E7D33F92B27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:27:52 +0000
Certificate not after:    Wed 02 Apr 2025 18:32:52 +0000
Subordinate resources:    AS: 52708
                          IP: 138.118.100.0/22
                          IP: 177.84.40.0/22
                          IP: 2804:2504::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:7d:e7:39:5c:12:b1:2f:64:82:22:6a:09:ec:9e:7d:33:f9:2b:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:27:52 2024 GMT
            Not After : Apr  2 18:32:52 2025 GMT
        Subject: CN=06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ba:79:51:f3:04:71:dc:f9:8e:56:b5:e1:11:
                    92:8d:50:65:49:e0:82:bf:82:dc:a4:a8:c1:32:a7:
                    58:bb:6b:ca:a8:7b:31:fd:71:d0:0e:38:7c:e9:42:
                    b4:fb:f7:80:11:d1:17:17:de:37:ed:f6:bd:a0:c2:
                    c8:67:22:b3:9e:e4:c9:7f:4b:98:4c:e5:34:5a:90:
                    06:43:0e:15:26:98:f4:82:ad:f5:97:20:dc:3c:0d:
                    fc:aa:57:51:0c:bf:71:32:ad:5d:04:9d:73:6b:8f:
                    f7:e8:81:83:f0:fb:96:13:61:6d:67:9b:fe:e1:d8:
                    12:66:23:4a:fd:50:64:bc:10:9e:6c:f0:57:37:1e:
                    c0:a4:48:af:82:bf:9e:7b:1e:71:f5:5b:b3:2e:65:
                    cc:e5:cc:9a:d8:65:37:76:47:6a:17:e7:c1:06:09:
                    0a:df:72:0b:6c:eb:0f:a8:58:5e:55:6b:4c:c5:4c:
                    5b:06:2e:43:a4:bd:73:61:ef:c9:80:6e:cb:19:7c:
                    2b:45:39:3b:f7:c9:50:99:ea:38:2e:0e:d9:3b:08:
                    c0:10:22:2f:31:a3:39:70:59:fc:db:0a:49:8b:96:
                    cf:0d:11:c9:dc:74:fe:dc:1f:a0:ad:22:b9:47:05:
                    24:b5:cb:12:f4:e7:e1:a6:c8:6a:f3:40:3f:0d:17:
                    66:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                06:18:5E:1A:AA:BD:EA:E4:2E:58:12:9B:DE:A4:CF:EC:F0:C8:F7:CB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.100.0/22
                  177.84.40.0/22
                IPv6:
                  2804:2504::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52708

    Signature Algorithm: sha256WithRSAEncryption
         bf:a7:db:c0:0c:22:f8:5b:fe:b6:d7:40:c5:44:4f:95:37:7d:
         eb:5a:eb:4b:bf:92:87:97:26:5c:0c:ca:28:c4:21:e9:04:c3:
         5d:c6:c3:d9:66:71:ce:bc:0a:c5:74:63:d6:11:16:87:1e:0a:
         ee:1f:a7:59:e4:f2:e5:9e:06:6f:44:07:e0:eb:f4:28:65:b4:
         a2:61:bb:91:ef:07:89:c8:75:9c:a5:7f:ad:8d:52:df:f9:4f:
         e9:9d:08:1e:cb:6c:29:0b:64:c8:02:a1:da:7b:95:9d:8f:5c:
         da:3f:46:9f:0a:1b:00:25:5f:83:15:77:f1:b5:ca:72:06:ce:
         17:fa:df:d1:e5:b7:c6:1d:27:f3:69:d4:d7:85:4c:68:3f:e7:
         cf:39:85:9e:ed:ab:b2:bd:e3:89:1c:2e:be:a1:db:d7:8e:94:
         62:06:7f:08:31:83:29:6a:a9:e9:4a:79:86:0d:80:30:2f:e0:
         1f:46:04:c5:2e:ea:ce:1c:e6:b3:46:50:99:cb:40:2d:9e:30:
         ab:48:ff:48:47:35:2c:bd:20:15:03:dd:12:3e:44:b0:55:0d:
         11:3d:ed:bf:97:cd:34:91:94:6d:e6:d0:c0:f0:08:f2:e3:65:
         e7:0f:58:f8:b5:d6:fa:da:42:f1:d8:39:22:21:6c:6e:0c:22:
         2e:d4:d1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:12 2024 by rpki-client on console-fra.rpki-client.org