Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0E455BD601128E5D432F9B2640842BE59B81B6FB.cer
File:                     0E455BD601128E5D432F9B2640842BE59B81B6FB.cer (raw, json)
Hash identifier:          tERBq9iUQPov+PEyVP059I2t9Ll1X+qve5ZvVieQcX8=
Subject key identifier:   0E:45:5B:D6:01:12:8E:5D:43:2F:9B:26:40:84:2B:E5:9B:81:B6:FB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1456ED4276073F3C7BF8B3260D7298DEEE3E710E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/1/0E455BD601128E5D432F9B2640842BE59B81B6FB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 22:15:05 +0000
Certificate not after:    Wed 02 Apr 2025 22:20:05 +0000
Subordinate resources:    AS: 269608
                          IP: 45.190.20.0/22
                          IP: 2804:6728::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 02:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:56:ed:42:76:07:3f:3c:7b:f8:b3:26:0d:72:98:de:ee:3e:71:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 22:15:05 2024 GMT
            Not After : Apr  2 22:20:05 2025 GMT
        Subject: CN=0E455BD601128E5D432F9B2640842BE59B81B6FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:dd:c9:1b:b8:ef:43:53:7f:10:0a:97:68:08:
                    35:f9:f2:37:10:ba:a6:75:86:c4:ee:f4:47:8b:8f:
                    0d:3e:9b:28:8f:42:1c:1d:d4:e3:63:08:67:a1:44:
                    df:29:1a:0a:3c:00:3d:fd:82:ff:f3:56:96:c6:db:
                    74:80:16:df:ad:39:74:3d:4c:41:df:12:48:44:55:
                    18:52:29:55:c7:21:6a:e2:c8:31:c1:3a:e0:b0:98:
                    c7:99:cf:61:0f:c8:23:07:33:18:eb:00:ad:3a:79:
                    73:00:dd:01:48:f9:23:87:9d:83:76:59:ee:ac:1d:
                    a4:50:c5:a1:31:79:44:09:85:f4:5d:f1:f9:52:91:
                    4f:2d:10:e1:68:6f:09:6a:d0:e3:5a:5b:96:1a:13:
                    1d:37:49:53:ad:cd:5d:97:e0:3b:d1:98:ed:fc:ad:
                    ac:14:fb:42:9d:0a:80:56:4d:5a:b3:63:28:80:15:
                    c5:a7:e1:ae:13:56:4c:1e:6d:de:80:82:8a:53:99:
                    11:60:46:53:0c:f1:32:49:ac:0e:51:fe:9e:28:9c:
                    47:f9:89:b5:da:d8:56:52:be:5b:21:37:a7:25:69:
                    08:31:f0:0d:99:d0:19:21:5e:8f:59:76:61:13:0b:
                    41:06:66:c0:d5:a4:ef:f8:c6:23:0c:00:01:9c:d1:
                    a3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0E:45:5B:D6:01:12:8E:5D:43:2F:9B:26:40:84:2B:E5:9B:81:B6:FB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/1/0E455BD601128E5D432F9B2640842BE59B81B6FB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.20.0/22
                IPv6:
                  2804:6728::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269608

    Signature Algorithm: sha256WithRSAEncryption
         59:07:cd:55:fa:6c:0d:77:59:95:aa:a9:bd:3d:c3:64:b5:07:
         32:4a:71:a4:58:a7:ba:b2:cc:cd:5f:e3:26:41:12:76:f7:41:
         39:32:82:41:a8:3a:38:2b:cd:1b:5c:63:b3:b7:50:c8:70:82:
         07:e8:f2:4b:f2:16:a8:45:85:15:09:e0:4d:a1:90:b4:b2:69:
         f7:dc:de:cd:0a:7f:70:6b:f4:d4:46:c6:54:a9:71:3d:46:e4:
         32:94:ff:b2:a5:f4:b6:69:d9:3a:72:7d:ce:d4:e0:8c:d2:f1:
         f7:f7:3c:e2:36:66:26:e2:7d:52:b8:bf:21:f0:93:2b:d3:33:
         31:19:4e:c8:24:65:46:08:1b:c2:21:d9:bd:38:fa:f4:07:c1:
         ca:9e:f0:75:5a:4d:07:b9:76:63:18:03:40:b9:00:73:38:a4:
         60:7e:a2:c1:0e:03:80:36:fc:34:c6:0e:fc:39:46:2b:38:50:
         dc:a5:80:88:1a:4e:d4:1f:83:02:a5:fe:28:c3:3f:9b:3d:f7:
         1f:fc:2a:4b:45:74:6e:63:3c:66:2a:31:7f:27:92:56:9f:33:
         b8:7f:fe:8e:b2:92:87:d3:79:76:45:92:08:a5:4b:ed:7a:27:
         61:58:68:0a:f8:cb:98:b3:1b:50:84:94:d9:5c:28:d5:f2:47:
         40:af:5d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:06:29 2024 by rpki-client on console-fra.rpki-client.org