Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1E25984D718583699E6F98027D46C4F064FED1A8.cer
File:                     1E25984D718583699E6F98027D46C4F064FED1A8.cer (raw, json)
Hash identifier:          dT8CpbLbxknTcaEF9lEPfrBt/RwJd2UaGH0RsTuOXC0=
Subject key identifier:   1E:25:98:4D:71:85:83:69:9E:6F:98:02:7D:46:C4:F0:64:FE:D1:A8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       09C0854EA0371FCA15910A532381C77D491581DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/1E25984D718583699E6F98027D46C4F064FED1A8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 15 May 2024 15:04:42 +0000
Certificate not after:    Wed 14 May 2025 15:09:42 +0000
Subordinate resources:    AS: 263676
                          IP: 191.241.176.0/21
                          IP: 2804:1170::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 03:32:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:c0:85:4e:a0:37:1f:ca:15:91:0a:53:23:81:c7:7d:49:15:81:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 15 15:04:42 2024 GMT
            Not After : May 14 15:09:42 2025 GMT
        Subject: CN=1E25984D718583699E6F98027D46C4F064FED1A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:dc:33:f0:cc:85:4d:d0:86:3a:3c:0b:01:fb:
                    b4:3e:0b:da:a6:0c:57:87:27:56:3a:00:42:48:f9:
                    98:4d:ea:cd:cf:ea:17:84:23:00:48:fb:3a:98:2e:
                    4b:6c:f7:29:69:9b:ed:28:2d:cf:bf:df:ac:1d:61:
                    84:33:16:61:ca:34:b3:18:1d:e9:d5:6f:9b:7c:06:
                    58:09:9e:2d:df:ae:3a:f5:3e:fe:f9:af:86:24:11:
                    36:14:19:db:4e:e7:60:05:6d:41:2f:2e:ae:07:da:
                    1d:7a:fb:0a:89:4b:8a:8d:c0:27:14:ec:10:e8:39:
                    26:57:c2:d4:b5:e9:02:84:0d:0b:2e:3a:5e:5b:5e:
                    1b:a4:b8:68:40:61:6f:b2:f1:1b:64:c3:fb:e5:5e:
                    a4:98:8f:1a:57:73:29:cb:84:0b:c9:1e:47:84:ca:
                    af:6a:32:75:eb:fb:e4:c7:dd:aa:51:6b:11:3b:5e:
                    02:87:cf:a1:fb:8d:ce:84:56:3a:0c:cf:24:d9:85:
                    e4:12:be:83:00:c8:4d:34:1c:17:e3:fb:33:32:39:
                    42:c3:e3:ff:f0:51:54:31:29:db:c6:f2:bd:8c:3a:
                    37:ee:86:fc:b5:d1:0b:bd:5e:61:36:1a:7e:6f:3a:
                    8a:b4:23:d0:5b:a5:77:9f:9f:05:78:3d:f4:a7:5e:
                    5f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1E:25:98:4D:71:85:83:69:9E:6F:98:02:7D:46:C4:F0:64:FE:D1:A8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/1E25984D718583699E6F98027D46C4F064FED1A8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.176.0/21
                IPv6:
                  2804:1170::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263676

    Signature Algorithm: sha256WithRSAEncryption
         48:b3:07:e4:86:d4:c3:4f:39:f9:24:5c:83:8d:f3:97:61:e1:
         10:62:19:1b:59:b2:31:16:e3:72:be:58:d3:38:80:13:7b:da:
         c6:0f:6d:9b:b9:8e:0a:2e:5b:31:44:61:3e:a4:f9:3e:dd:6f:
         c6:3e:a9:85:df:14:ae:9f:47:aa:6d:6e:c6:a8:cd:f0:c2:d6:
         c8:26:01:84:cd:f7:43:82:de:d8:56:57:1b:e0:32:4b:05:7e:
         d1:4b:7d:f4:52:77:86:f4:6c:7b:df:e9:7f:bc:a7:7f:79:69:
         30:f6:2f:b0:30:50:b5:b7:63:0d:b4:69:60:5a:1a:0c:c3:36:
         f2:46:a7:bb:eb:34:dc:e2:ed:1d:f4:94:20:35:c8:e6:3f:a7:
         1c:3e:d6:19:e8:f7:13:80:e4:70:36:94:58:a4:b1:37:48:d3:
         24:24:4c:68:8f:60:36:b4:ed:9a:21:2c:eb:67:aa:a9:07:4e:
         b8:b6:85:b6:ae:e8:01:4b:ee:17:a7:b6:dd:5d:8b:7a:f9:61:
         81:9d:72:5e:70:c0:3a:dd:e8:96:cf:f2:81:3b:00:9a:41:54:
         07:e3:05:be:ba:32:2e:22:71:d9:22:4c:86:89:c8:37:d5:3d:
         b5:d1:13:86:39:97:36:fa:f5:c9:66:93:5a:24:89:5a:a1:44:
         70:b9:08:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:35:12 2024 by rpki-client on console-fra.rpki-client.org