Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0911F3F0D22D3DF877B191C4EAD82C266C7FABED.cer
File:                     0911F3F0D22D3DF877B191C4EAD82C266C7FABED.cer (raw, json)
Hash identifier:          sFz9KhIK2wQgQwLD/+DujbGSgZiatlVnDt1SYPoPFgU=
Subject key identifier:   09:11:F3:F0:D2:2D:3D:F8:77:B1:91:C4:EA:D8:2C:26:6C:7F:AB:ED
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       571510FFDA4CE32561D10BAF7C3002CD49C4C9E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/1/0911F3F0D22D3DF877B191C4EAD82C266C7FABED.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 09:57:22 +0000
Certificate not after:    Thu 03 Apr 2025 10:02:22 +0000
Subordinate resources:    AS: 265008
                          IP: 170.0.60.0/22
                          IP: 2804:3158::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 12:57:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:15:10:ff:da:4c:e3:25:61:d1:0b:af:7c:30:02:cd:49:c4:c9:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 09:57:22 2024 GMT
            Not After : Apr  3 10:02:22 2025 GMT
        Subject: CN=0911F3F0D22D3DF877B191C4EAD82C266C7FABED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9e:a5:63:f0:5c:7c:e5:df:12:1e:e2:98:9f:
                    32:55:88:41:15:1f:33:43:ac:a7:e9:01:da:ee:21:
                    34:e6:bd:c1:15:b0:5e:c9:d5:37:66:89:b8:fa:9f:
                    51:7e:6b:e6:04:61:9d:23:a9:7f:db:48:82:05:50:
                    69:72:b5:9d:e7:c4:26:8a:7a:b0:6c:da:61:59:e1:
                    da:95:bc:da:2f:98:48:71:67:7b:19:36:f3:5a:86:
                    0a:9b:a3:86:da:26:c9:6c:ed:c5:fa:10:a5:2a:93:
                    ec:b1:08:5d:93:c4:a3:1e:37:10:ff:86:73:62:e6:
                    14:c8:30:64:f3:6d:fc:ab:30:d4:40:8b:f5:dd:50:
                    69:3a:cd:5d:43:56:ad:e1:8d:14:5d:96:d6:a2:db:
                    a9:63:e7:54:c7:d1:7e:24:9f:d5:85:af:cc:b8:73:
                    60:71:fd:5a:fd:08:cb:30:e7:c0:bb:85:10:ba:2a:
                    9d:9b:3a:5a:c0:72:f7:34:2a:f3:e9:c3:46:cf:41:
                    9f:16:c0:76:7a:90:f1:d2:70:ef:fa:74:5f:63:a5:
                    b3:ee:56:a6:41:18:d5:e5:f0:6f:5b:e4:53:26:53:
                    2a:bd:22:66:f5:c5:82:55:7f:cd:b4:55:15:a4:99:
                    00:e3:57:eb:48:68:40:9c:f0:04:73:82:85:13:39:
                    10:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                09:11:F3:F0:D2:2D:3D:F8:77:B1:91:C4:EA:D8:2C:26:6C:7F:AB:ED
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/1/0911F3F0D22D3DF877B191C4EAD82C266C7FABED.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.60.0/22
                IPv6:
                  2804:3158::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265008

    Signature Algorithm: sha256WithRSAEncryption
         6b:3a:4f:3b:2c:b2:cb:27:7e:13:f9:34:6c:dd:54:39:53:bd:
         63:b2:9e:ee:d9:b5:a2:da:8b:f1:1c:27:cc:78:58:4f:ce:b0:
         f0:53:c6:d7:bb:a2:66:ad:e5:f1:9b:01:ba:92:86:ad:8f:92:
         cc:82:b8:fc:d7:b4:dd:43:9a:b9:9c:c1:09:cd:da:29:80:7d:
         49:26:d4:27:7c:fe:ef:6e:f0:8d:1a:65:a9:60:6e:d3:04:3d:
         67:07:6a:e8:27:4e:83:e2:d7:7e:21:90:b9:89:7c:81:41:b8:
         62:09:56:99:ff:80:bc:53:75:ca:b0:c7:fb:12:f0:0d:d0:92:
         ca:f6:5f:2e:a1:a0:d3:12:d2:37:51:b4:41:2b:ae:69:28:4c:
         26:b9:6b:53:40:05:b4:0a:63:4a:40:0d:97:0a:a5:f7:6e:50:
         c3:86:cb:7b:70:e1:3d:0d:7c:c6:62:9d:2d:7e:b8:7a:67:6f:
         26:d8:bd:f0:eb:b9:16:08:44:ef:dc:38:38:06:ba:93:0c:94:
         53:f8:f4:af:84:b8:34:65:9e:6c:d3:b7:7a:94:bd:75:96:9f:
         af:3f:fa:6a:10:e8:f9:16:a2:af:8b:0b:e3:f6:da:ce:56:1c:
         c3:c1:01:5b:8d:16:69:1e:19:2a:50:86:a1:41:17:33:22:0d:
         0a:de:2a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 14:01:55 2024 by rpki-client on console-ams.rpki-client.org