Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer
File:                     0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer (raw, json)
Hash identifier:          ZnZe7r1umY9zTukvXMtYmlrmmRuzpJxnl0sSQNCRc/k=
Subject key identifier:   0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3204582953C86B66A8E9F77B69D355D1D61E6236
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:26:01 +0000
Certificate not after:    Wed 02 Apr 2025 18:31:01 +0000
Subordinate resources:    AS: 265425
                          IP: 168.195.28.0/22
                          IP: 2804:33ec::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 03:32:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:04:58:29:53:c8:6b:66:a8:e9:f7:7b:69:d3:55:d1:d6:1e:62:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:26:01 2024 GMT
            Not After : Apr  2 18:31:01 2025 GMT
        Subject: CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:99:b2:ee:9b:12:84:6c:34:7c:a8:40:2a:52:
                    84:e8:6b:67:4e:ef:a4:b8:b8:cf:79:9a:50:8e:3a:
                    cc:e4:7a:74:23:f3:ca:9a:e5:a9:2e:82:62:95:00:
                    1d:50:11:9b:a5:b4:37:d1:9d:ea:e6:67:d5:5f:8d:
                    45:15:68:62:99:a2:94:fc:ab:f3:58:78:8c:05:ca:
                    05:b1:18:44:a0:d9:fa:5e:0a:46:34:4d:cb:f9:79:
                    f1:6b:81:09:4e:9e:1a:38:74:7e:f9:b0:10:8d:8f:
                    57:f0:43:85:74:8a:f7:a8:6f:76:ba:31:23:c0:ae:
                    f7:68:39:29:c0:c0:b1:b4:62:a2:f2:b6:41:3b:9d:
                    b0:23:c4:10:83:28:12:ea:b4:8a:17:9e:47:6d:c7:
                    d6:5a:6d:c2:1a:e4:a6:b0:99:d7:3e:7a:2a:83:73:
                    fd:6c:ca:7e:d2:51:28:cb:f6:8e:0e:f8:6f:40:cc:
                    6c:ca:e8:a4:bc:5b:85:15:fe:38:ed:ab:fd:bc:58:
                    63:5d:f4:f9:ff:0b:ad:f5:69:52:0a:7d:55:86:12:
                    cc:5d:4a:d4:0f:40:0c:99:56:cc:97:d2:ce:8d:6b:
                    56:38:ee:c7:48:0b:3d:8e:fc:d6:96:d0:32:7a:15:
                    d0:8d:f9:77:72:21:6c:10:10:63:d2:c5:1f:fb:96:
                    fd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.28.0/22
                IPv6:
                  2804:33ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265425

    Signature Algorithm: sha256WithRSAEncryption
         b1:23:68:3d:2c:d5:d5:55:f7:59:d2:3d:da:43:e2:88:aa:ef:
         c0:d3:a9:a9:ca:17:a0:81:21:d8:37:49:5a:48:5d:5e:f5:1b:
         85:4d:56:ba:df:6b:a9:8b:a3:11:23:31:9c:73:d2:32:e2:83:
         cc:14:4a:b2:a2:a5:b4:00:a3:3d:d3:e2:6e:40:05:83:01:d2:
         6c:50:bc:81:18:23:b8:e9:da:8f:18:c7:ec:86:16:2c:88:09:
         b2:3c:51:cc:bd:6c:bc:09:2e:52:91:b4:eb:a2:b1:09:71:69:
         53:58:63:1f:44:52:ed:a3:a9:12:fb:80:40:8e:03:2b:0c:28:
         58:92:78:3c:db:fa:84:56:05:0b:22:ac:12:56:01:a6:43:36:
         b9:8e:d1:66:c4:d0:96:38:4c:57:12:2c:e5:42:22:c1:e6:54:
         8b:34:c1:c3:69:ba:a5:ac:81:1e:c0:f7:76:29:25:ba:05:71:
         a6:fb:04:b8:7a:a2:9d:18:a2:35:5f:e7:29:27:39:34:ce:2c:
         84:20:46:d7:b1:e5:56:96:92:ec:f6:1c:07:88:a4:28:f5:d1:
         66:18:35:ec:33:7b:36:9f:25:19:3e:94:6e:a5:de:5e:cf:73:
         b7:51:0d:4b:e0:bc:f6:81:f7:44:dd:a8:23:4b:de:6d:56:98:
         82:27:43:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:35:11 2024 by rpki-client on console-fra.rpki-client.org