Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.cer
File:                     0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.cer (raw, json)
Hash identifier:          CYQpETfbIUjdlt0GynhPlGwqmZ341JWFLHNsK/rcQas=
Subject key identifier:   0D:74:BF:A3:D0:BD:CC:2C:C6:2E:DD:9E:FB:11:FC:02:83:74:37:65
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       404AC1C4F113CEF4C52BE2B85841A7EBF9CB68A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:25:17 +0000
Certificate not after:    Wed 02 Apr 2025 18:30:17 +0000
Subordinate resources:    AS: 61779
                          IP: 201.148.220.0/22
                          IP: 2801:80:ae0::/48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Jun 2024 18:10:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:4a:c1:c4:f1:13:ce:f4:c5:2b:e2:b8:58:41:a7:eb:f9:cb:68:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:25:17 2024 GMT
            Not After : Apr  2 18:30:17 2025 GMT
        Subject: CN=0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a7:fb:61:5b:29:94:04:30:7e:8e:17:e0:d2:
                    6c:11:de:b3:6a:e3:ba:c0:15:64:e3:5f:a2:86:5d:
                    29:8a:98:b6:c7:f7:65:f9:df:f6:b9:a3:c0:96:7e:
                    85:7e:22:2f:2a:64:d6:2c:66:6b:1b:82:73:47:d7:
                    b1:36:1e:f8:10:20:58:f7:1a:b3:e6:c3:2e:ee:ce:
                    18:89:f8:22:72:0a:ad:6f:e7:99:58:18:2f:56:05:
                    97:cc:7a:35:2e:6c:83:cd:00:d4:54:98:71:e3:21:
                    ee:52:7f:be:67:7c:c0:29:3c:7d:e0:33:6e:30:78:
                    ca:2e:7b:5a:fa:12:ae:b0:66:2b:8a:a3:a3:75:f1:
                    19:d8:5f:8c:6d:04:8b:54:d4:fa:29:14:45:4d:56:
                    4a:6d:fa:07:43:a1:f4:29:be:56:23:95:f5:4e:3e:
                    14:cb:92:a3:a5:a1:2b:3a:91:6b:98:4d:0b:be:36:
                    da:b9:81:0a:b3:c4:b9:3d:9a:be:40:68:48:17:5b:
                    eb:f8:3a:e5:62:34:6e:d4:4b:5c:7c:ad:b8:4c:ed:
                    87:dc:89:88:b4:74:14:35:aa:86:a3:e7:b3:47:b2:
                    90:3d:e6:18:8b:60:1a:1f:84:d2:b5:19:aa:6b:45:
                    2a:a6:25:67:df:1f:13:b3:02:a6:27:ef:aa:71:1d:
                    f9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0D:74:BF:A3:D0:BD:CC:2C:C6:2E:DD:9E:FB:11:FC:02:83:74:37:65
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.220.0/22
                IPv6:
                  2801:80:ae0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61779

    Signature Algorithm: sha256WithRSAEncryption
         3e:d5:78:90:c0:73:33:b9:b8:e6:33:4a:0f:42:49:20:27:b5:
         69:c8:a2:35:bd:73:70:28:47:c2:0e:da:f2:e0:df:cf:74:e3:
         c3:10:78:5c:78:2f:34:90:bd:fa:f6:18:1a:bf:30:6a:5c:96:
         e3:36:35:98:91:2a:63:63:a5:c0:50:9d:ae:b6:26:2f:4e:92:
         22:19:cf:09:e9:26:e5:3a:9d:b6:10:94:f6:98:ee:58:d1:c2:
         8c:10:5c:80:dc:9d:26:52:62:db:07:ed:db:32:2b:e5:26:c3:
         ed:e7:9c:7d:85:0f:e7:ac:0b:da:2c:dc:01:fb:7c:42:61:30:
         e5:7a:6a:40:83:c2:c5:57:2d:9b:be:80:04:09:7e:d7:bc:56:
         35:8c:61:45:22:af:e6:e4:d6:c7:c2:3c:e8:b7:d5:e8:a5:e9:
         a4:78:d1:87:6d:bd:ea:2f:33:59:0a:f2:54:9c:b7:10:12:70:
         b7:e1:e5:a0:5f:75:0e:3c:7f:ef:ec:a0:5a:c2:8e:89:4c:29:
         35:5f:cb:e0:c3:83:e2:ee:73:01:21:25:56:bd:5c:a5:e6:60:
         3c:8f:a3:88:b7:29:a7:ea:0a:bc:43:26:67:5f:b1:9c:9c:52:
         6e:3d:e8:1a:ff:9e:7d:35:80:a9:1e:dd:0a:63:ba:08:96:eb:
         b6:1d:70:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 15:56:10 2024 by rpki-client on console-fra.rpki-client.org