Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0BFDC3A598A7E4C26811166F6E8FA25023A020F3.cer
File:                     0BFDC3A598A7E4C26811166F6E8FA25023A020F3.cer (raw, json)
Hash identifier:          80KnvtpqcY/yraDQ9d59cuWpjKj5a41GdlvD90dXL84=
Subject key identifier:   0B:FD:C3:A5:98:A7:E4:C2:68:11:16:6F:6E:8F:A2:50:23:A0:20:F3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7CE6C6EC2742A18F1D22A327DFDDAEC57E14DC6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/1/0BFDC3A598A7E4C26811166F6E8FA25023A020F3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 15:20:07 +0000
Certificate not after:    Thu 03 Apr 2025 15:25:07 +0000
Subordinate resources:    AS: 262742
                          IP: 177.104.32.0/19
                          IP: 2801:a4::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:e6:c6:ec:27:42:a1:8f:1d:22:a3:27:df:dd:ae:c5:7e:14:dc:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 15:20:07 2024 GMT
            Not After : Apr  3 15:25:07 2025 GMT
        Subject: CN=0BFDC3A598A7E4C26811166F6E8FA25023A020F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:46:c3:93:de:19:6b:4f:9f:2b:71:f0:bf:46:
                    c2:d7:ab:88:66:f4:cb:73:0f:36:34:72:77:be:72:
                    55:c5:b1:10:88:bc:2f:49:10:c7:73:fa:80:91:4c:
                    d8:c3:82:86:9b:5f:54:6f:6d:72:38:19:51:cb:08:
                    f6:1a:56:55:37:e8:3f:f2:6b:64:22:bd:51:61:e6:
                    8d:06:02:8f:52:d9:e1:02:1e:26:b9:89:42:5e:1b:
                    ed:67:7c:29:de:fc:c6:09:05:c5:65:8c:22:08:cc:
                    d2:f3:27:25:3f:9b:39:8f:4c:c0:ac:3e:8d:d8:b9:
                    7b:e0:d3:92:fc:5c:a0:dc:a8:66:1c:83:16:bc:48:
                    14:0f:36:26:ab:c2:30:4f:b0:f5:3a:b0:e9:93:a9:
                    a8:38:84:a0:06:7f:f1:aa:de:e3:49:e5:2d:a7:7e:
                    0f:33:d7:c6:e0:98:02:22:07:bd:c7:f7:0a:d0:7a:
                    f9:f7:32:a8:8a:5d:50:b6:33:d1:16:c4:b2:16:3b:
                    ce:2a:08:d9:8c:44:e3:a1:52:26:b6:c2:a7:a0:a3:
                    87:10:90:ce:de:3b:55:fe:3e:fb:b0:2c:f9:97:ed:
                    0d:70:84:90:fb:a0:65:38:bb:59:d3:2b:27:98:04:
                    cf:2d:a1:23:ff:9d:1f:eb:56:ce:dc:86:82:2b:b7:
                    de:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0B:FD:C3:A5:98:A7:E4:C2:68:11:16:6F:6E:8F:A2:50:23:A0:20:F3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/1/0BFDC3A598A7E4C26811166F6E8FA25023A020F3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.32.0/19
                IPv6:
                  2801:a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262742

    Signature Algorithm: sha256WithRSAEncryption
         24:9d:6e:ae:83:be:e1:60:12:bb:ef:5f:e2:9c:62:b0:0e:b6:
         18:73:1f:1d:6d:57:4d:5b:67:34:ce:57:82:72:ea:32:fd:16:
         13:78:ef:3b:2f:16:55:7d:79:19:f0:46:cd:7e:b3:2f:64:56:
         98:b8:df:9d:6b:03:ff:53:64:56:2a:4b:b3:30:5f:5e:5b:20:
         82:70:8f:36:a8:83:c7:7f:e6:38:61:1d:fb:70:9d:dc:ad:6e:
         be:86:f5:44:1f:b8:de:c6:2b:a8:a3:58:24:ea:60:ea:59:ce:
         49:5d:02:f3:7f:b0:2c:32:04:8a:4e:7f:25:65:4f:20:e1:1a:
         a3:2d:69:06:4b:3c:e9:6a:da:0f:1b:5c:1d:61:7a:ec:a3:fe:
         d6:48:7b:d0:d5:ee:a3:be:40:b2:a7:70:db:3c:b5:f2:11:9e:
         b3:af:79:1c:37:5a:8e:81:7f:ed:f0:dc:bc:93:2f:79:86:d3:
         fe:39:7b:eb:10:a9:2b:70:d5:f9:9d:ff:ba:f2:eb:87:90:48:
         a2:90:d1:4e:35:97:3b:4a:ad:44:a0:e8:5f:f1:d3:8b:0b:d4:
         80:05:62:62:20:2e:14:f9:81:25:a6:98:e0:6b:d3:a2:04:fc:
         29:30:22:ae:40:41:e3:35:ac:a8:ef:4f:18:b2:64:00:5b:3d:
         44:83:0c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:51 2024 by rpki-client on console-ams.rpki-client.org