Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0B47F19EDA3877EE438A7AC26BB3850860C342BB.cer
File:                     0B47F19EDA3877EE438A7AC26BB3850860C342BB.cer (raw, json)
Hash identifier:          aOQ97SP5wZgfQxMv/SolS2KEUy8piGwdT31JnOKfVjU=
Subject key identifier:   0B:47:F1:9E:DA:38:77:EE:43:8A:7A:C2:6B:B3:85:08:60:C3:42:BB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5EF146FDC681485F2C73946D96D212D889B2EC17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/0B47F19EDA3877EE438A7AC26BB3850860C342BB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 27 May 2024 12:41:05 +0000
Certificate not after:    Mon 26 May 2025 12:46:05 +0000
Subordinate resources:    AS: 28300
                          IP: 177.223.160.0/19
                          IP: 179.97.224.0/19
                          IP: 179.107.160.0/19
                          IP: 189.28.160.0/20
                          IP: 2804:2ac::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Jun 2024 06:05:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:f1:46:fd:c6:81:48:5f:2c:73:94:6d:96:d2:12:d8:89:b2:ec:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 27 12:41:05 2024 GMT
            Not After : May 26 12:46:05 2025 GMT
        Subject: CN=0B47F19EDA3877EE438A7AC26BB3850860C342BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:96:77:20:ff:35:76:09:11:2f:32:64:8e:4e:
                    b1:3a:50:39:bf:6b:47:ea:bd:c2:43:10:88:ab:84:
                    7d:92:1d:68:8a:6e:50:fe:08:66:c8:e7:6a:e4:f0:
                    3e:3f:0f:df:15:19:df:a9:92:e1:86:7d:62:b7:56:
                    ec:11:b8:9c:70:2b:d0:5c:35:a2:4d:25:53:f7:ff:
                    b6:f3:df:68:21:b1:2e:09:d7:c8:a4:75:a4:26:68:
                    f7:17:bb:75:bd:57:c1:07:e1:e1:d6:f6:e2:10:e8:
                    75:fa:51:a5:8a:65:ac:a1:9f:29:51:b1:00:aa:da:
                    50:aa:58:b1:db:ca:ab:4e:30:de:b9:5e:ff:e7:1b:
                    2b:b9:dc:5e:a0:1c:30:14:78:19:8f:70:e9:a7:d5:
                    3c:2e:b5:b1:dd:a0:f7:6f:1e:50:f8:35:a6:1f:1d:
                    b6:1f:93:cf:ff:a7:e7:77:0e:08:02:e8:86:18:50:
                    ed:91:3e:f2:ff:21:74:ce:c2:49:07:17:f5:b5:24:
                    ca:e3:41:8d:a3:cd:7c:94:c2:c6:8f:80:e6:45:a9:
                    2b:2b:c1:00:87:38:b6:e4:ba:1c:9a:89:4e:66:df:
                    bf:af:83:91:7b:aa:95:d3:83:fe:99:73:4f:8d:4c:
                    00:6c:87:b8:7c:05:04:f8:a1:a6:a0:42:4f:9b:9d:
                    37:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0B:47:F1:9E:DA:38:77:EE:43:8A:7A:C2:6B:B3:85:08:60:C3:42:BB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/0B47F19EDA3877EE438A7AC26BB3850860C342BB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.160.0/19
                  179.97.224.0/19
                  179.107.160.0/19
                  189.28.160.0/20
                IPv6:
                  2804:2ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28300

    Signature Algorithm: sha256WithRSAEncryption
         0b:af:00:96:a1:fb:14:34:f8:cc:42:c9:6b:69:32:84:cd:3a:
         a8:4d:a3:52:62:ca:28:d0:6b:27:44:21:cc:43:c2:29:2d:03:
         dc:9d:48:04:15:81:4b:dd:98:6a:25:10:5d:ed:ea:24:8b:72:
         b0:a5:5a:ba:a1:d6:33:73:94:fd:92:d3:a9:48:0e:ca:a1:0e:
         5b:9b:6c:c5:5c:74:89:f5:fb:46:08:12:98:6e:8f:98:a8:45:
         e5:57:53:f7:22:88:1a:f3:cb:86:f2:ac:3f:85:e9:ca:b3:4d:
         f2:a6:23:7b:aa:2b:b4:a6:2c:04:8b:a8:7d:c7:c0:8a:12:ef:
         69:5b:7b:8c:db:cd:4a:d9:65:c4:b2:71:5f:4b:a1:68:91:0d:
         2c:56:3b:1f:7c:18:fa:05:74:5b:e6:95:a4:40:2b:7b:5a:20:
         f1:68:3d:f6:fb:e3:2b:6e:88:82:d4:14:8f:c9:ca:55:01:77:
         47:64:9c:9b:fd:e9:12:28:f6:8c:80:2a:59:45:bb:1c:c5:08:
         d5:4f:ce:9c:ee:ee:08:c8:39:4b:db:0c:a0:cd:ac:76:94:8c:
         28:fa:86:5a:cf:89:8a:17:20:4f:4b:fd:0b:50:5f:fd:50:50:
         59:cc:64:7b:ee:b2:1f:e4:57:b9:c1:53:3e:5b:a6:38:61:89:
         b8:c8:19:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 06:03:30 2024 by rpki-client on console-fra.rpki-client.org