Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0B7D5851E99113F3832ED12CBE5DB4437990968F.cer
File:                     0B7D5851E99113F3832ED12CBE5DB4437990968F.cer (raw, json)
Hash identifier:          u9YUB/6pzUh2r0owAj2AlTnaj+8ZTDYP62rup7eO5W4=
Subject key identifier:   0B:7D:58:51:E9:91:13:F3:83:2E:D1:2C:BE:5D:B4:43:79:90:96:8F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6391F9E3FBF9F37B11A8171EF5FAF45D58AD9EBE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7dGkkyBprDPFgs6zzv3a6wVAssBKUmqX57byAR3DygK/1/0B7D5851E99113F3832ED12CBE5DB4437990968F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7dGkkyBprDPFgs6zzv3a6wVAssBKUmqX57byAR3DygK/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 10:07:55 +0000
Certificate not after:    Thu 03 Apr 2025 10:12:55 +0000
Subordinate resources:    AS: 271600
                          IP: 200.24.120.0/22
                          IP: 2804:7e10::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jul 2024 05:09:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:91:f9:e3:fb:f9:f3:7b:11:a8:17:1e:f5:fa:f4:5d:58:ad:9e:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 10:07:55 2024 GMT
            Not After : Apr  3 10:12:55 2025 GMT
        Subject: CN=0B7D5851E99113F3832ED12CBE5DB4437990968F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:da:31:d7:76:9f:a0:80:84:a1:0a:86:78:0f:
                    99:ad:69:36:0b:2e:b6:aa:15:75:a9:6c:a0:2e:b4:
                    95:a1:0d:e7:4b:c5:65:97:34:56:d3:4f:40:82:bb:
                    9e:41:51:8b:90:91:4d:21:7d:98:8a:73:aa:05:19:
                    44:4e:8f:50:02:1e:e9:1f:88:2c:a2:8d:47:90:9d:
                    64:cb:d6:f3:00:d7:80:06:c1:d1:27:9a:60:92:37:
                    6b:24:53:79:29:2f:cc:66:0b:23:07:a1:95:a2:9c:
                    ce:91:1d:09:69:6e:9c:a4:45:70:9e:9e:7b:0f:ef:
                    9c:af:fd:ee:ce:c7:d6:75:d0:ff:a0:fd:06:aa:49:
                    36:f1:b5:91:c5:ce:0c:97:d5:b7:52:07:6a:4d:6e:
                    45:a7:21:0d:07:a3:3f:72:9b:4f:ad:f8:e2:4a:08:
                    98:27:b0:25:48:fe:2f:d3:cb:5d:e0:2a:b2:28:90:
                    1d:2d:c6:cd:d7:82:02:5b:ed:aa:cd:5d:ab:24:39:
                    97:f4:fa:0d:98:5b:b9:cd:9c:5d:f8:c5:bc:24:1c:
                    33:14:d9:1d:99:40:55:41:9a:00:09:c0:f4:6a:77:
                    5f:d4:00:63:2e:91:87:ee:18:6d:0c:27:17:92:b0:
                    6f:b4:91:65:39:13:5b:26:a1:d4:e1:91:60:69:56:
                    94:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0B:7D:58:51:E9:91:13:F3:83:2E:D1:2C:BE:5D:B4:43:79:90:96:8F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7dGkkyBprDPFgs6zzv3a6wVAssBKUmqX57byAR3DygK/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7dGkkyBprDPFgs6zzv3a6wVAssBKUmqX57byAR3DygK/1/0B7D5851E99113F3832ED12CBE5DB4437990968F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.120.0/22
                IPv6:
                  2804:7e10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271600

    Signature Algorithm: sha256WithRSAEncryption
         68:12:5e:25:13:e2:c6:53:45:e7:7f:95:1a:e8:c3:55:8f:7b:
         35:ce:57:08:48:16:60:3c:94:a7:a8:57:a1:6f:82:10:01:00:
         ae:7d:b1:17:c5:69:54:61:18:4d:2c:b9:81:cf:8d:31:50:04:
         a2:8e:a0:d6:8c:05:a9:fa:ce:b1:65:7b:9a:34:a6:e9:be:38:
         a0:4f:4e:48:b0:33:e5:84:a3:04:f8:66:cf:dc:5c:75:df:7e:
         65:90:e1:22:a6:ea:0e:61:39:b1:7f:88:93:37:ae:bf:2a:8a:
         bf:ee:bb:a5:30:ce:7a:63:5e:03:ee:46:78:36:98:14:30:e8:
         4e:24:fa:4b:31:fe:e6:37:a7:ae:73:83:e3:bd:ec:c7:af:ec:
         e8:5b:44:ae:2d:46:c0:68:e8:bb:7b:eb:d7:3f:61:28:11:94:
         72:33:22:f8:be:ad:e8:30:97:aa:cc:df:53:26:74:eb:a7:25:
         6b:f7:57:b0:a7:04:16:ea:16:ac:08:58:8b:3c:b3:65:bc:a3:
         cb:da:1d:1b:20:fc:df:5d:53:f5:fa:1f:14:28:9d:69:91:f5:
         52:17:02:67:a0:b1:71:17:c5:a3:59:7c:cb:dd:61:4b:4f:ec:
         91:df:6a:91:b3:d3:55:55:13:ff:ab:f3:e2:02:f5:5c:17:53:
         46:e4:a6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 02:59:18 2024 by rpki-client on console-fra.rpki-client.org