Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2114671409937E8AC7FE751CB57FECC986B196C5.cer
File:                     2114671409937E8AC7FE751CB57FECC986B196C5.cer (raw, json)
Hash identifier:          AMMfdUTO7td9+kFotiOcxN+btn/eULt6e1SH7ltGUPA=
Subject key identifier:   21:14:67:14:09:93:7E:8A:C7:FE:75:1C:B5:7F:EC:C9:86:B1:96:C5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2E0A72BACF4D41A2898301325C58FD90A9F2D0DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/1/2114671409937E8AC7FE751CB57FECC986B196C5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 16:12:53 +0000
Certificate not after:    Thu 03 Apr 2025 16:17:53 +0000
Subordinate resources:    AS: 270932
                          IP: 138.59.36.0/22
                          IP: 2804:73b4::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 04:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:0a:72:ba:cf:4d:41:a2:89:83:01:32:5c:58:fd:90:a9:f2:d0:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 16:12:53 2024 GMT
            Not After : Apr  3 16:17:53 2025 GMT
        Subject: CN=2114671409937E8AC7FE751CB57FECC986B196C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:df:43:7f:9f:ff:cf:35:d2:3e:0c:6e:c2:80:
                    02:01:1f:11:df:e1:81:b1:36:a2:9f:fb:15:e0:08:
                    8d:e1:5f:2a:f1:bd:53:01:16:6a:bd:28:d1:c9:5b:
                    12:df:5e:61:b5:ee:d7:c3:83:e9:07:c9:7f:a5:95:
                    1f:0a:fa:95:8c:83:c6:42:99:5b:4f:01:d0:1b:aa:
                    a6:4a:22:70:ed:6d:c7:61:50:ea:9c:08:46:9b:a3:
                    a5:09:7c:7e:58:8d:cf:6d:1a:60:15:30:21:94:78:
                    cb:90:04:cf:c1:a0:a2:89:3e:29:76:5a:a0:31:4b:
                    4b:30:3f:9e:1f:bb:14:98:31:25:8d:40:5c:b3:b7:
                    6e:f3:65:31:d5:10:75:3e:10:fc:1d:e5:7e:e8:1c:
                    fc:fb:08:29:95:72:5e:0b:19:2d:ab:3b:24:f9:86:
                    a5:b0:5a:3d:95:db:6f:eb:e0:85:3c:9a:81:be:81:
                    16:6b:be:c6:25:d2:fc:bf:d9:b7:a8:b6:31:65:53:
                    70:b1:c4:79:3d:63:2c:64:e7:05:cb:c5:dd:9f:12:
                    1c:fe:3b:b7:8e:7b:33:fe:57:3a:08:44:df:b6:7f:
                    d4:1b:07:df:ac:b5:3c:1d:84:59:d0:97:0a:b3:02:
                    a1:16:2b:58:8f:04:02:bc:0b:98:0b:45:df:af:d5:
                    8c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                21:14:67:14:09:93:7E:8A:C7:FE:75:1C:B5:7F:EC:C9:86:B1:96:C5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/1/2114671409937E8AC7FE751CB57FECC986B196C5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.36.0/22
                IPv6:
                  2804:73b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270932

    Signature Algorithm: sha256WithRSAEncryption
         13:ee:31:55:75:6c:89:df:6c:89:f7:32:0f:5b:7d:55:52:24:
         08:94:aa:21:89:f7:79:27:ab:88:10:50:08:fd:2e:2c:b3:c6:
         14:97:ec:8f:07:3a:78:d0:94:4c:44:09:76:51:de:d0:b1:6f:
         a7:40:88:35:18:52:c4:5c:90:ec:02:dc:86:81:d1:a7:b6:81:
         96:8d:45:b2:9f:07:ba:c6:aa:f6:09:15:a7:1b:00:9e:53:f7:
         60:7c:68:36:4d:39:ca:02:db:66:aa:31:b6:f3:5d:33:ed:03:
         78:11:b7:95:fa:52:ca:07:96:2c:81:ed:93:50:06:92:f3:1e:
         a8:94:3c:b6:b5:57:f0:60:70:59:64:12:e1:2f:3c:d0:4f:99:
         a6:1f:d4:01:d4:d7:4a:ec:72:06:b4:e3:f4:10:a2:fb:52:b2:
         49:da:d6:b9:0b:8c:69:0f:c7:58:55:9d:b1:0c:81:61:a1:f5:
         34:88:a2:b9:43:69:f2:b3:eb:d5:0b:fe:07:63:da:17:0b:31:
         13:cd:5d:98:54:d2:73:1f:61:3f:72:3d:4b:7b:8f:59:a1:23:
         08:61:d8:fe:24:53:e8:a4:98:ab:73:04:e6:20:6d:17:51:cf:
         a2:44:76:55:62:9c:de:b7:68:34:79:df:a6:98:23:c2:ae:92:
         e3:d3:2e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:36:30 2024 by rpki-client on console-ams.rpki-client.org