Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0FA35E251A905A12C2A8498910B1AD9918508B40.cer
File:                     0FA35E251A905A12C2A8498910B1AD9918508B40.cer (raw, json)
Hash identifier:          85jd/T/bnwbzekHUTXTNaplOObnZvhZipPuER0QUUVk=
Subject key identifier:   0F:A3:5E:25:1A:90:5A:12:C2:A8:49:89:10:B1:AD:99:18:50:8B:40
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       23F02F04B689CC95272C7B50E0F62316ABAC612F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Hz8fKV4iDah8e55rj9Pghr4LRkesKqS8rj6PkJxM3FWG/0/0FA35E251A905A12C2A8498910B1AD9918508B40.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Hz8fKV4iDah8e55rj9Pghr4LRkesKqS8rj6PkJxM3FWG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Nov 2024 16:43:13 +0000
Certificate not after:    Mon 17 Nov 2025 16:48:13 +0000
Subordinate resources:    AS: 274630
                          IP: 2804:9144::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f0:2f:04:b6:89:cc:95:27:2c:7b:50:e0:f6:23:16:ab:ac:61:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 18 16:43:13 2024 GMT
            Not After : Nov 17 16:48:13 2025 GMT
        Subject: CN=0FA35E251A905A12C2A8498910B1AD9918508B40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:01:36:13:3a:da:86:89:99:c8:a7:a6:2c:6b:
                    88:3f:a2:5f:2f:41:ed:74:5c:b1:ff:2f:65:99:4d:
                    df:60:fc:7e:52:b3:9f:74:6f:25:8a:60:3a:f4:60:
                    30:68:cd:da:25:7c:82:97:d8:17:65:da:ec:e4:32:
                    74:c4:6c:59:75:5e:6e:e8:4e:23:7f:f3:c9:f5:c2:
                    20:11:a8:cf:ac:d6:b2:e7:eb:39:9a:a8:0c:4c:88:
                    53:76:9a:15:1d:b2:dd:17:6e:22:f9:e2:a1:60:41:
                    d3:17:2d:c3:7a:4c:c5:0c:78:a4:0d:85:12:ac:a1:
                    9a:72:01:26:ca:27:54:c4:c2:95:3d:79:58:9f:70:
                    76:8a:5e:96:4b:bd:08:3e:a9:b6:46:46:08:08:74:
                    24:af:af:0e:66:9b:01:30:6d:d6:cd:ae:a3:c3:9a:
                    88:3e:e1:7d:3f:df:63:d3:d1:b2:49:f6:60:bc:40:
                    f4:bc:c8:82:ab:82:38:8d:76:bd:7a:ac:21:e6:bb:
                    2f:7a:3e:c5:f3:4a:08:90:f6:a4:65:00:8a:da:fb:
                    ab:84:c9:43:58:7d:a8:3e:3d:a3:90:d5:5b:ee:6c:
                    dc:13:52:1f:ea:ad:31:f9:60:ae:75:dd:f8:f9:b3:
                    6c:d2:2b:1c:49:fc:46:6b:75:b7:c4:6d:a3:8d:a1:
                    55:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0F:A3:5E:25:1A:90:5A:12:C2:A8:49:89:10:B1:AD:99:18:50:8B:40
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hz8fKV4iDah8e55rj9Pghr4LRkesKqS8rj6PkJxM3FWG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hz8fKV4iDah8e55rj9Pghr4LRkesKqS8rj6PkJxM3FWG/0/0FA35E251A905A12C2A8498910B1AD9918508B40.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9144::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  274630

    Signature Algorithm: sha256WithRSAEncryption
         22:57:bc:5a:88:21:d3:40:38:2c:44:50:bf:7f:c6:74:4f:69:
         5d:47:eb:5d:06:c9:ac:a6:af:15:4d:a9:be:37:38:42:e4:e9:
         ac:24:aa:d2:83:9c:47:27:33:2a:1e:f2:94:cb:a2:81:29:e5:
         b6:6d:7b:c7:49:4f:55:ac:a2:4e:bf:d4:19:bd:12:67:72:96:
         71:fa:dc:36:8d:a9:ff:12:31:f2:aa:83:3a:44:82:a3:ea:8e:
         95:bc:d1:f2:be:b0:de:03:33:d3:2d:e7:1e:4e:f8:84:b6:e9:
         00:18:5b:d0:0c:82:7a:e2:0a:91:ac:20:e6:c2:9d:dd:cf:d0:
         4e:5b:4e:1f:e6:ed:b5:41:f8:46:40:ea:d9:c1:70:72:39:15:
         66:25:af:36:c9:3c:24:64:20:ea:38:3b:29:85:b1:e2:ad:f0:
         3d:59:6f:3c:d4:b3:fd:30:be:d5:e0:0d:9c:d3:2f:12:fa:c8:
         47:59:07:14:c1:c9:64:c9:53:4c:ca:1b:06:34:07:f2:6c:a7:
         42:f4:13:fc:37:91:1b:eb:c9:e3:7b:9b:41:33:ef:91:9f:cd:
         9f:34:3a:32:e1:38:00:ef:9a:9b:b3:6a:38:da:d9:f2:d3:46:
         a7:9a:4e:a4:d7:ef:9f:3d:64:65:c2:72:06:ee:9b:58:1a:8d:
         77:e3:05:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:10 2024 by rpki-client on console-fra.rpki-client.org