Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.cer
File:                     16BC000CB0A478A70E4FBA552217F242CDF07AE9.cer (raw, json)
Hash identifier:          PniEbMTG8HvhtVhwX70d5hTatdD+PEiq+xLhM7hagxA=
Subject key identifier:   16:BC:00:0C:B0:A4:78:A7:0E:4F:BA:55:22:17:F2:42:CD:F0:7A:E9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7CC2EDF49029029EBDE75319D3E5A97F8CD53E45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 18:20:57 +0000
Certificate not after:    Thu 03 Apr 2025 18:25:57 +0000
Subordinate resources:    AS: 264479
                          IP: 45.165.90.0/23
                          IP: 131.255.120.0/22
                          IP: 138.117.32.0/22
                          IP: 2804:203c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 01:38:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c2:ed:f4:90:29:02:9e:bd:e7:53:19:d3:e5:a9:7f:8c:d5:3e:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 18:20:57 2024 GMT
            Not After : Apr  3 18:25:57 2025 GMT
        Subject: CN=16BC000CB0A478A70E4FBA552217F242CDF07AE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:42:8f:bc:ad:66:41:05:cc:0f:28:25:d4:38:
                    c4:0d:35:6a:39:64:63:94:ac:06:c8:e3:17:0e:89:
                    ab:d4:89:a3:46:a4:ea:2e:b3:40:97:45:db:ca:aa:
                    ae:96:df:b7:ab:ad:40:d2:b8:72:8e:16:69:a8:49:
                    9e:c3:eb:b6:55:f6:f9:95:72:ee:47:a2:c8:28:af:
                    e9:f1:a7:8f:c1:59:07:6b:6b:89:05:eb:86:76:5f:
                    2a:2a:b1:bb:91:fd:07:93:eb:b7:d9:6f:44:79:12:
                    01:c1:93:b8:80:fd:e5:f2:f1:53:47:57:e4:e8:55:
                    80:bb:09:13:49:3d:90:80:3a:be:10:b7:6f:0a:da:
                    78:25:ca:b3:6b:3c:80:7f:63:fe:32:db:17:31:64:
                    e8:7e:71:ff:57:22:a1:f5:e1:28:58:3e:a1:8a:b1:
                    3d:c6:b1:23:c0:fd:02:12:43:2c:bb:ce:8a:d7:a5:
                    0a:15:ea:10:fc:6a:cf:b8:22:5c:c5:97:73:d3:23:
                    c6:de:01:ed:94:3d:3e:28:6b:a0:5a:6d:38:81:8a:
                    ca:da:bd:9b:db:85:f2:0a:2d:9c:ae:9e:a5:77:6c:
                    e4:32:f0:32:a3:a6:34:40:17:66:1f:02:43:b4:a5:
                    0f:c4:60:3d:72:5e:a4:2a:cc:e3:69:70:1e:d7:7f:
                    e3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                16:BC:00:0C:B0:A4:78:A7:0E:4F:BA:55:22:17:F2:42:CD:F0:7A:E9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.90.0/23
                  131.255.120.0/22
                  138.117.32.0/22
                IPv6:
                  2804:203c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264479

    Signature Algorithm: sha256WithRSAEncryption
         19:be:8b:cc:95:65:19:36:25:9f:2a:36:5f:d0:04:eb:cb:65:
         81:67:52:2e:cf:a9:9d:ce:f7:22:9e:bd:1e:1d:ba:fa:ca:2a:
         65:af:df:f2:f6:dd:07:26:e3:20:b3:8f:db:d5:13:3c:7c:63:
         40:0c:8e:84:e5:d7:fc:d0:71:40:e5:4e:c4:e0:87:4c:8c:49:
         12:8d:69:e8:5d:9e:8b:d1:8d:86:4f:60:f1:9e:3f:6f:2a:ca:
         f9:df:ad:ac:f6:d0:4e:70:94:fc:4f:24:7b:17:a8:d0:df:b8:
         02:46:ae:7c:d1:4e:51:5b:5f:d3:a4:c9:38:24:ce:87:00:05:
         14:f5:91:be:12:f1:d7:80:ac:cf:5b:c2:4e:ba:3b:d6:d4:35:
         4e:6e:df:0d:bc:e5:fc:51:b0:36:d5:36:22:c5:ea:c3:67:4a:
         c6:fb:5a:5e:13:01:87:9d:73:fe:28:38:46:8c:e7:f6:ac:85:
         b3:e7:2a:5f:f8:9f:cc:ed:31:2a:7e:43:31:b3:bb:93:4f:1c:
         73:43:4e:99:3b:d4:8f:fd:0e:99:7a:06:68:9e:da:ee:40:f8:
         1a:ee:88:f2:0a:6f:ac:a5:74:69:c6:ad:70:cd:6d:4a:81:51:
         df:bc:77:6a:5e:8f:ad:43:8c:85:4e:16:a3:3c:0a:72:32:bc:
         5b:a3:8f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:00:54 2024 by rpki-client on console-ams.rpki-client.org