Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer
File:                     16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer (raw, json)
Hash identifier:          WBAeUdTYU1i1Yzn+UnUhBJu606/2YH8+a0BnXiND/CU=
Subject key identifier:   16:F8:1D:F0:63:19:D0:1E:B6:76:C8:B7:D6:8D:31:AD:36:64:B3:B9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3124FD008A7B2A0F817ADFC3177D42BDC7167A54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 10:20:18 +0000
Certificate not after:    Thu 03 Apr 2025 10:25:18 +0000
Subordinate resources:    AS: 270359
                          IP: 190.89.76.0/22
                          IP: 2804:6acc::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 23:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:24:fd:00:8a:7b:2a:0f:81:7a:df:c3:17:7d:42:bd:c7:16:7a:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 10:20:18 2024 GMT
            Not After : Apr  3 10:25:18 2025 GMT
        Subject: CN=16F81DF06319D01EB676C8B7D68D31AD3664B3B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2a:a1:67:b7:7a:7b:dc:95:4c:f4:cf:38:8e:
                    85:73:fb:0d:c9:62:06:16:ca:9b:d0:98:33:75:62:
                    6a:21:b1:21:92:6e:85:f0:cc:38:0d:54:d6:cd:25:
                    db:06:1d:79:c9:a2:1b:43:44:82:1a:84:87:ca:a3:
                    2b:51:1e:7f:12:85:84:57:9b:07:78:cb:58:17:9b:
                    7a:87:40:d4:84:a6:c7:7d:8a:f2:21:08:55:08:98:
                    cd:2d:b6:1d:93:d1:74:15:e1:d4:43:b7:08:a3:4c:
                    61:fe:44:e2:9d:1f:12:32:3d:54:7b:15:32:91:b8:
                    42:4d:d4:c3:0c:e2:1b:41:98:ea:1b:dd:13:ec:db:
                    1a:92:df:f7:49:43:bb:03:28:97:e6:2c:c1:f3:e6:
                    6c:2f:80:e1:dc:22:95:2e:a4:d8:1c:79:d8:2c:5a:
                    04:19:65:c0:3f:95:1a:d6:3b:d2:5c:c3:2b:1c:9e:
                    79:40:c2:cf:28:06:9b:73:32:3a:28:39:67:02:f4:
                    41:3e:b9:f9:a5:64:96:96:df:8e:81:3d:24:e0:6b:
                    a5:04:9e:9f:5c:93:ac:fb:99:c1:b3:fb:36:db:f7:
                    39:6c:ff:b2:10:c2:0c:40:d4:5a:8e:85:2c:02:41:
                    ed:19:30:31:c5:72:bd:fb:a6:39:05:8f:e9:58:1b:
                    54:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                16:F8:1D:F0:63:19:D0:1E:B6:76:C8:B7:D6:8D:31:AD:36:64:B3:B9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.76.0/22
                IPv6:
                  2804:6acc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270359

    Signature Algorithm: sha256WithRSAEncryption
         76:fe:09:65:0d:ac:19:dc:3c:41:d3:82:a6:cd:54:df:31:f5:
         1e:53:02:e4:0e:9c:0f:ef:e6:df:ee:62:30:db:9b:0d:b0:98:
         1b:8c:e7:75:21:68:fc:63:5d:75:9d:17:8d:4b:46:a2:88:6b:
         a8:ac:6d:dc:23:8b:03:5a:55:25:76:d0:bf:69:71:65:f4:6a:
         a4:c2:07:cc:44:af:24:a6:b8:31:9b:e0:b1:58:f7:ed:08:4c:
         b3:c9:02:dc:b2:69:49:e2:c2:39:d6:45:e9:a6:c9:62:93:a2:
         64:2c:4b:d5:3a:b4:7a:83:08:63:5c:fa:83:3f:06:41:d6:26:
         1e:f1:46:95:16:1d:94:39:ad:14:9c:11:0e:08:8f:df:6f:93:
         24:8b:b9:45:f0:19:3a:ec:af:cd:97:4a:9d:7a:bd:cf:b9:dd:
         a3:ff:9f:ba:52:00:69:90:45:59:22:ec:ea:b5:53:ec:6d:c1:
         61:1d:f5:6d:a3:ac:8b:ae:4a:63:8a:8c:e4:c9:a9:7b:44:ac:
         f7:15:d5:56:70:bd:63:2c:9a:d2:9b:b1:90:88:fd:b8:1c:a4:
         db:10:a7:fd:2f:20:77:2f:85:54:48:ec:91:09:c0:04:50:12:
         a0:2f:89:14:db:18:40:d1:b7:9e:be:31:84:0e:2e:ff:52:b7:
         97:73:4c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 00:29:06 2024 by rpki-client on console-ams.rpki-client.org