Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.cer
File:                     0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.cer (raw, json)
Hash identifier:          PwT4FqsYlPdnLjYI2+5YXXp+pGfV77dtyAH3hJO52TE=
Subject key identifier:   0B:14:1C:05:E0:CD:60:AB:E1:A3:CD:F3:C3:C6:4C:FB:94:D0:67:51
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2C103DB4B2162E1C671572E2D68653D34F3A2B91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6UZysAyTjx2NJrkHbunyrSpdEkCM69Efmns52PN6QHvC/1/0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6UZysAyTjx2NJrkHbunyrSpdEkCM69Efmns52PN6QHvC/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Apr 2024 04:52:40 +0000
Certificate not after:    Fri 04 Apr 2025 04:57:40 +0000
Subordinate resources:    AS: 270785
                          IP: 189.51.160.0/22
                          IP: 2804:7160::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 23:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:10:3d:b4:b2:16:2e:1c:67:15:72:e2:d6:86:53:d3:4f:3a:2b:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  5 04:52:40 2024 GMT
            Not After : Apr  4 04:57:40 2025 GMT
        Subject: CN=0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:19:68:3a:6b:fa:08:43:cf:35:af:17:24:8c:
                    73:6b:f9:42:74:77:f6:e2:8b:80:68:fd:a7:90:40:
                    a4:45:83:44:55:bd:90:e2:b0:99:75:eb:0b:58:3f:
                    4e:e0:e6:ac:fb:ff:a2:1f:02:58:f1:71:70:a4:fc:
                    3c:73:29:81:39:6e:1f:c4:48:a0:93:ca:cc:42:c8:
                    f0:cd:2c:a5:00:8a:d9:5f:2f:b0:e7:92:dc:b9:7f:
                    48:b5:b8:51:be:d5:46:32:e7:1a:e7:04:f9:cb:a3:
                    b6:8f:69:df:29:a3:ad:39:a9:4a:de:3a:2a:7d:04:
                    c2:00:15:cd:4b:0a:38:b0:29:dd:9b:d0:26:33:ec:
                    5a:9f:88:ac:06:2f:3b:1d:5c:5e:6f:33:39:a2:99:
                    b2:79:80:68:4b:96:5f:c0:f7:f7:ec:07:9c:e6:36:
                    a8:7d:93:a8:5a:6a:ad:57:30:27:82:87:8c:51:4a:
                    9d:f8:de:3a:25:3f:5a:dc:c3:ab:09:e3:60:48:87:
                    08:95:dd:a4:48:b0:63:2a:e4:ef:7d:a5:99:ab:34:
                    01:b5:a7:31:cc:84:d9:fe:9f:94:10:e3:5e:d4:15:
                    28:87:38:8d:85:ef:ea:6e:2e:2c:31:21:71:43:ef:
                    a3:38:49:8b:4b:a4:55:5c:82:1d:d3:7e:e7:9d:65:
                    02:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0B:14:1C:05:E0:CD:60:AB:E1:A3:CD:F3:C3:C6:4C:FB:94:D0:67:51
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6UZysAyTjx2NJrkHbunyrSpdEkCM69Efmns52PN6QHvC/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6UZysAyTjx2NJrkHbunyrSpdEkCM69Efmns52PN6QHvC/1/0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.160.0/22
                IPv6:
                  2804:7160::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270785

    Signature Algorithm: sha256WithRSAEncryption
         20:fa:f1:ac:94:7c:c0:1e:e3:c7:50:9e:2d:0a:b2:ad:28:0c:
         3b:e3:93:14:29:63:2b:70:73:b1:85:64:7f:24:b0:d7:01:33:
         e1:4a:d5:67:c7:48:d3:77:b1:ae:72:f1:b5:75:0b:84:c2:a3:
         0f:d4:86:af:12:11:44:b5:be:3d:b4:ee:45:6e:cc:1d:d7:d3:
         4f:43:f3:d6:4b:15:5e:de:7b:a4:2b:03:d4:e2:d7:8d:e7:e9:
         64:44:6c:c8:ee:06:f8:ec:32:aa:e8:f3:c7:ea:8f:cf:e6:2f:
         b1:5a:cb:d9:ed:b3:d3:b8:4b:57:d5:06:3c:5e:02:f8:73:f7:
         19:a4:ac:43:ff:f2:4e:32:2c:22:21:76:d3:d8:2d:b5:a1:88:
         27:ca:3e:5a:bc:69:a4:d1:86:f4:b8:88:98:4c:4b:cf:33:bd:
         e2:a8:81:e6:7b:e6:92:04:ff:3a:a1:f4:ad:69:b0:64:b2:9d:
         28:9e:ec:15:86:61:11:62:04:d1:fc:4b:e5:8f:ba:9d:cc:de:
         bc:01:0d:25:06:f1:6f:a5:1c:3f:f7:4f:93:b4:0a:48:22:47:
         fd:0c:9b:d3:bf:a6:86:16:f5:cb:c8:3d:2f:cd:61:67:b5:66:
         fb:e7:80:ed:67:0f:72:0c:db:99:1a:98:6e:95:78:c1:9f:ab:
         60:bb:57:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:43:25 2024 by rpki-client on console-fra.rpki-client.org