Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC.cer
File:                     140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC.cer (raw, json)
Hash identifier:          vqQXxl7GACgtSGPcxxdpHgBClEhlyJWC91NOhBkMLdc=
Subject key identifier:   14:03:50:F9:D3:C4:A0:5B:A9:0C:9F:CF:9A:5C:6D:0F:E2:DC:98:BC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       366B4F0C69A0ED8516FC2D53A345719AE6EB7074
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 May 2024 13:58:15 +0000
Certificate not after:    Tue 06 May 2025 14:03:15 +0000
Subordinate resources:    AS: 270439
                          IP: 200.11.120.0/22
                          IP: 2804:6c00::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:6b:4f:0c:69:a0:ed:85:16:fc:2d:53:a3:45:71:9a:e6:eb:70:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  7 13:58:15 2024 GMT
            Not After : May  6 14:03:15 2025 GMT
        Subject: CN=140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fb:3c:a7:fd:58:28:1d:b3:4f:9b:00:56:95:
                    57:e1:4e:3a:37:df:06:07:31:99:95:e5:1c:de:ad:
                    75:f3:4e:bf:1f:82:56:03:b8:b6:42:d1:ad:26:cb:
                    a1:7a:f3:cc:40:5c:b2:47:51:9a:8b:aa:90:bb:25:
                    df:c1:ee:83:85:b8:5b:a8:18:00:7b:a2:8b:7a:8c:
                    eb:39:64:0f:3b:82:a0:96:57:ec:69:32:cb:d1:7d:
                    05:ea:bc:50:26:34:b7:7f:95:31:92:e2:23:26:36:
                    18:cf:3b:1e:64:0f:24:72:89:5f:20:e8:26:21:4f:
                    a1:e1:b7:75:40:eb:02:62:6a:27:ec:19:89:05:a2:
                    d8:6c:0c:bb:24:41:f5:8b:a1:56:8d:d8:4d:93:7f:
                    5b:7d:07:dc:b3:22:27:11:ee:94:69:de:f3:9d:c5:
                    b9:a0:e0:9c:31:34:0d:42:25:9b:76:4a:50:00:50:
                    6d:28:d6:ea:4d:36:4e:05:27:53:bc:bd:f2:5d:a0:
                    b6:18:cf:90:2c:06:f8:e1:68:9d:8d:c3:43:6e:33:
                    f7:aa:97:6e:c5:af:41:5e:37:3b:1e:21:ad:34:49:
                    50:e8:2f:82:f7:36:71:24:58:58:f9:35:91:9a:88:
                    34:25:a9:12:c9:ca:be:6b:a8:36:d3:00:7d:4e:ee:
                    88:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                14:03:50:F9:D3:C4:A0:5B:A9:0C:9F:CF:9A:5C:6D:0F:E2:DC:98:BC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.11.120.0/22
                IPv6:
                  2804:6c00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270439

    Signature Algorithm: sha256WithRSAEncryption
         85:d8:7d:34:d7:74:09:68:b0:91:93:c8:11:24:62:e4:31:0a:
         e6:cf:5e:dd:92:e1:13:26:38:c9:ef:da:3a:68:f5:12:3e:6c:
         31:8b:11:fb:16:15:26:20:44:43:d1:34:f5:e1:9e:e1:be:58:
         f2:e5:74:c6:54:7b:fe:4f:a1:57:26:d4:d5:3c:e3:07:07:b5:
         6b:77:f6:f6:fc:bd:b7:a2:b5:8e:1a:c8:75:be:b9:43:aa:22:
         a3:b9:86:b1:24:e2:4f:4e:02:5e:17:78:49:06:e2:6a:db:7c:
         cf:49:7c:a6:9a:64:67:ff:b7:53:61:70:83:f3:32:5b:c2:21:
         a3:36:6a:b7:66:73:06:8d:50:8a:ff:ad:11:16:15:cf:7e:c8:
         8e:37:c4:98:a7:14:94:7c:21:94:10:40:e6:0a:35:57:12:6e:
         2c:cc:cb:bf:fa:60:75:d8:3d:05:36:54:04:93:de:09:30:7d:
         78:2d:9e:02:18:76:3a:02:ca:94:be:2d:cb:4d:96:10:cf:8c:
         2e:30:df:61:2d:ba:f5:b7:3c:33:43:c9:7b:d4:8a:f5:e6:18:
         c9:26:1a:8c:ce:ce:3a:ec:05:70:fa:1a:9b:3b:fb:b9:08:75:
         d2:f7:39:2c:87:e9:88:b5:c9:a6:ec:94:19:75:3f:7c:50:aa:
         3a:c7:7e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:18 2024 by rpki-client on console-ams.rpki-client.org