Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.cer
File:                     1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.cer (raw, json)
Hash identifier:          9sTFHw1R44FamZoDHSlXXFV/b+P6Y1dK5kI9YQ2UeI8=
Subject key identifier:   16:72:A6:AC:5D:FB:E8:5B:7B:10:CF:C8:AD:AC:DF:6B:BA:08:A4:CC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4881CF03892F6FD818E3AFC81A456B51FE1D30F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 12:09:45 +0000
Certificate not after:    Thu 03 Apr 2025 12:14:45 +0000
Subordinate resources:    AS: 271002
                          IP: 177.223.144.0/22
                          IP: 2804:74c4::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 20:55:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:81:cf:03:89:2f:6f:d8:18:e3:af:c8:1a:45:6b:51:fe:1d:30:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 12:09:45 2024 GMT
            Not After : Apr  3 12:14:45 2025 GMT
        Subject: CN=1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2e:e3:09:41:72:44:65:d3:d0:11:02:61:1a:
                    49:25:47:d0:2a:5e:a5:3d:c3:6e:af:ef:09:cd:2d:
                    9b:4f:03:f6:9c:63:d4:74:38:cc:36:05:17:0d:7f:
                    5f:01:e8:e4:18:9b:e8:cc:b7:1a:87:9d:e2:5e:1d:
                    7f:9f:67:54:cc:aa:b0:de:92:0e:28:81:92:5b:7f:
                    29:ba:84:3d:47:78:c5:25:d8:0d:e7:20:bb:f9:bd:
                    97:5d:cd:d9:a9:3c:44:e9:14:2a:83:e5:ce:48:5b:
                    b6:58:5d:e4:f2:8f:45:b2:4f:4d:08:bc:4a:f0:d9:
                    c6:b0:f1:44:18:13:2c:1d:7c:86:3f:0f:32:38:94:
                    df:e9:1a:58:20:2b:db:1e:76:80:52:aa:61:5d:90:
                    40:2e:cf:70:2f:0e:b5:5d:2f:c1:9a:1b:76:e7:3d:
                    d1:48:9e:24:f4:6e:61:91:39:85:ee:13:9a:4c:ec:
                    d8:c6:49:7c:a7:12:ea:81:4f:1a:ed:78:1a:b3:33:
                    41:87:33:b7:93:67:fb:46:b2:82:37:7f:4c:2c:1e:
                    d0:6d:33:1d:3c:49:c7:96:0b:aa:18:30:ce:1e:41:
                    58:81:70:9a:0a:d5:6d:42:df:a6:81:05:d6:87:5d:
                    b8:60:3a:9b:2d:26:55:cf:e7:9d:cb:50:28:6b:fb:
                    75:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                16:72:A6:AC:5D:FB:E8:5B:7B:10:CF:C8:AD:AC:DF:6B:BA:08:A4:CC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.144.0/22
                IPv6:
                  2804:74c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271002

    Signature Algorithm: sha256WithRSAEncryption
         34:cb:41:2a:c8:e8:bf:4c:e2:75:9c:33:e0:6a:17:00:90:4e:
         4c:d7:fe:f3:99:03:fd:b8:d8:5a:22:d3:94:79:e9:9b:26:2a:
         7a:6e:65:9f:6d:a9:6d:39:1d:43:8a:e0:9b:43:b6:b2:bc:77:
         c9:d4:f2:3c:5f:a1:e3:9e:56:a9:18:7d:9f:ef:b8:2a:80:00:
         92:96:3a:f2:44:9b:76:9f:1f:74:4d:15:64:f7:84:00:87:80:
         54:a4:13:7d:29:e5:2f:0f:00:40:54:ee:eb:00:70:00:f0:16:
         94:34:46:29:dd:63:1d:eb:3e:a7:85:43:93:c1:15:c2:94:b8:
         89:c3:b2:33:69:bc:66:71:2b:22:6f:97:43:1f:e5:50:0d:df:
         8c:6c:24:29:30:c3:30:48:52:7a:dc:ab:54:3c:1e:26:e3:b9:
         31:6e:3e:11:2d:25:bb:14:09:13:1d:4f:91:56:6c:19:d3:45:
         7e:7d:35:61:2a:e0:a5:c4:dc:a0:83:5d:11:80:3a:2d:29:ce:
         cc:2c:3d:b0:c4:5a:da:1f:ad:fc:d3:90:9e:e5:ce:07:13:e9:
         5e:1d:2f:7d:b6:c6:5c:24:27:f4:74:93:d0:3b:e0:7b:12:64:
         bb:a6:40:89:0b:3c:37:aa:47:a7:a5:5f:86:ba:0d:1b:92:1b:
         93:7d:0e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 20:44:14 2024 by rpki-client on console-fra.rpki-client.org