Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.cer
File:                     2A0183D32B891D785CDF1CC86CFD0AE9460250B1.cer (raw, json)
Hash identifier:          D4VNZXy1syW5SxGXlenmSoCH5CXtPMFzQBbQtUeAnic=
Subject key identifier:   2A:01:83:D3:2B:89:1D:78:5C:DF:1C:C8:6C:FD:0A:E9:46:02:50:B1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       119165717F69597964AA46738D72A16717F9F15B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 07:57:50 +0000
Certificate not after:    Thu 03 Apr 2025 08:02:50 +0000
Subordinate resources:    AS: 270991
                          IP: 187.103.16.0/22
                          IP: 2804:7498::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:91:65:71:7f:69:59:79:64:aa:46:73:8d:72:a1:67:17:f9:f1:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 07:57:50 2024 GMT
            Not After : Apr  3 08:02:50 2025 GMT
        Subject: CN=2A0183D32B891D785CDF1CC86CFD0AE9460250B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:52:85:c1:93:a9:07:ea:41:99:c2:6a:12:ce:
                    a3:fc:75:cd:ae:b9:b1:3d:64:bb:c1:76:ef:bc:d3:
                    e0:a2:95:69:60:01:f4:48:9b:f8:a1:eb:07:54:97:
                    91:43:33:77:87:ce:bd:a8:f7:68:42:98:8b:eb:0a:
                    6f:05:8e:d2:e4:8d:d3:8b:b7:52:60:bf:c0:ae:b7:
                    46:4a:62:96:df:3b:12:a8:7e:11:ec:3a:76:3e:e7:
                    3c:0b:38:77:f4:fa:66:6e:c5:10:53:d0:60:5e:29:
                    fe:17:c6:83:23:57:1a:aa:1f:fa:ec:23:c2:46:ba:
                    ab:58:5a:6e:74:ae:85:89:08:a0:d0:d4:f8:63:dd:
                    41:4c:2a:62:5c:30:9d:5a:49:60:3c:b9:17:e1:87:
                    1c:5e:1c:ee:ea:44:d3:ff:ff:e0:c4:32:45:6a:07:
                    80:5b:e6:3b:6b:ec:14:b6:5a:39:87:03:78:3d:c2:
                    36:5f:62:63:0f:ee:7b:d8:1e:9f:35:31:f7:73:a6:
                    e6:c7:76:9a:47:68:90:0c:24:96:50:15:cd:82:84:
                    e7:9e:30:4a:84:d3:25:21:26:59:1a:93:e2:45:18:
                    ef:2d:6d:8f:e1:12:30:a1:d5:bb:2b:62:0d:96:02:
                    c3:f4:3f:53:f0:33:21:10:55:3d:c1:a2:97:b9:3f:
                    92:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2A:01:83:D3:2B:89:1D:78:5C:DF:1C:C8:6C:FD:0A:E9:46:02:50:B1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.16.0/22
                IPv6:
                  2804:7498::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270991

    Signature Algorithm: sha256WithRSAEncryption
         aa:31:f1:ed:ac:d6:49:c8:fb:8d:5f:ef:87:0e:6f:2a:88:94:
         6c:7b:7e:85:72:31:b3:bd:c3:0b:34:b6:2c:51:d3:0e:da:89:
         27:4f:f0:43:e9:c4:e3:4c:40:54:27:c9:66:ab:55:24:7b:b7:
         d9:e3:23:ab:84:26:04:80:23:8b:52:a5:c7:0f:39:d8:47:23:
         cf:06:92:0a:ba:67:dd:b7:0a:94:53:44:c4:c5:cc:52:9f:bc:
         93:a9:a6:8c:8d:09:0a:49:db:9e:96:c9:57:d4:4c:07:93:94:
         61:c5:c7:e7:7c:24:6b:08:e6:ba:01:b6:97:4f:e8:19:30:b3:
         f5:d3:f2:57:da:f9:42:55:90:f7:2c:fd:84:e4:e6:91:80:c2:
         26:94:c4:18:0f:5b:d2:05:5a:6a:0a:17:9c:84:63:f9:d5:87:
         c5:bd:41:ce:0f:19:b7:8d:26:07:81:e7:bc:c2:75:d9:a7:41:
         4c:f0:5a:36:6e:e4:c5:44:dc:55:6a:09:3b:c0:60:1a:33:5f:
         23:2d:e8:4c:3c:00:19:d1:4d:85:fd:03:64:3e:7f:f0:b5:69:
         4c:3e:6c:3b:25:6e:23:64:72:1e:2a:a5:4d:88:d7:27:17:ca:
         f9:bf:8d:37:93:c8:16:ba:cf:5a:ca:ff:ef:7b:05:1d:2d:8f:
         3a:51:be:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:21 2024 by rpki-client on console-fra.rpki-client.org