Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2F962990D08F38EAEAD892BB35125EE477497FD2.cer
File:                     2F962990D08F38EAEAD892BB35125EE477497FD2.cer (raw, json)
Hash identifier:          NBAg6Pwbwvq4E1VzOthNqRnk9QKZ46BhQc3GkmQFisc=
Subject key identifier:   2F:96:29:90:D0:8F:38:EA:EA:D8:92:BB:35:12:5E:E4:77:49:7F:D2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0320C21DCAE1C371AE39E3098F702BC7E4257855
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/1/2F962990D08F38EAEAD892BB35125EE477497FD2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 01:34:39 +0000
Certificate not after:    Thu 03 Apr 2025 01:39:39 +0000
Subordinate resources:    AS: 264086
                          IP: 143.208.24.0/22
                          IP: 2804:2aa4::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 03:32:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:20:c2:1d:ca:e1:c3:71:ae:39:e3:09:8f:70:2b:c7:e4:25:78:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 01:34:39 2024 GMT
            Not After : Apr  3 01:39:39 2025 GMT
        Subject: CN=2F962990D08F38EAEAD892BB35125EE477497FD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e4:1e:c8:a4:38:b4:21:9c:73:45:24:c2:95:
                    33:9b:e8:bc:94:0a:d2:50:db:a0:5f:c4:2a:f4:e7:
                    a0:37:be:82:fb:5c:0e:08:5e:21:9d:5b:05:35:50:
                    9e:c8:81:04:93:e0:e6:18:ce:dd:7c:0b:76:c4:19:
                    c4:9b:33:bb:8c:ef:e3:01:86:71:29:de:8b:25:b8:
                    00:51:8d:62:4b:18:d8:28:91:4a:22:35:fb:44:8f:
                    86:5d:e2:2a:94:79:24:28:25:cc:0a:c0:80:a9:38:
                    37:1f:c0:d0:07:8b:e1:86:fd:7c:ff:b0:03:c5:5f:
                    6e:a7:e9:ef:62:ab:99:75:0b:98:7a:91:fe:48:fc:
                    67:53:a4:d7:48:30:a2:c0:21:b0:3e:0e:d3:29:9f:
                    23:19:8b:5e:d9:68:71:94:b2:81:74:32:d5:9d:db:
                    89:cc:1f:b2:23:9a:50:d2:57:c9:30:5e:fe:5c:ea:
                    5b:4d:38:0c:d9:c5:d0:dd:2b:36:b0:ca:55:f7:19:
                    64:a6:74:8f:b4:0d:83:d5:dd:7f:82:a0:67:57:06:
                    05:de:f6:23:f3:bf:9d:eb:5e:ee:78:87:49:fb:da:
                    d5:74:71:3b:63:ea:42:af:0b:5e:10:e8:e8:bb:c7:
                    f7:66:a6:9f:1d:e5:0c:13:fa:77:56:2a:fc:2e:ca:
                    99:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2F:96:29:90:D0:8F:38:EA:EA:D8:92:BB:35:12:5E:E4:77:49:7F:D2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/1/2F962990D08F38EAEAD892BB35125EE477497FD2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.24.0/22
                IPv6:
                  2804:2aa4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264086

    Signature Algorithm: sha256WithRSAEncryption
         74:02:81:7f:ce:61:92:03:eb:8d:3f:80:61:90:37:87:45:27:
         8f:8d:2d:40:41:a3:ad:fe:e2:0e:00:4f:5d:45:15:97:bc:a5:
         c6:7a:bd:6a:7a:ae:2e:33:ab:be:3d:0d:31:89:2d:68:4f:d5:
         a3:90:6b:c4:c1:28:c6:e5:04:7f:0b:7b:87:74:23:d3:4b:81:
         e7:e2:ef:f9:ec:39:14:4f:42:28:f8:a8:6c:3c:f2:ad:9e:e2:
         71:04:de:b7:19:37:77:50:3f:83:e6:4f:01:eb:13:11:a1:61:
         ee:30:70:f5:26:d6:a7:85:3e:e7:ba:67:2a:58:92:a8:17:f2:
         a5:0a:3e:2e:2d:6d:d6:fe:26:50:d9:2b:d1:90:d9:7a:83:a4:
         fa:9f:1a:d9:2b:06:70:25:fd:32:ab:e0:34:5d:01:e2:57:ae:
         ac:f2:d4:78:e5:b3:1a:b7:bf:d7:52:9a:4f:47:b4:ec:1f:77:
         2a:e0:2a:01:76:36:59:fa:48:9d:2a:d6:1c:d8:3b:1b:2e:c6:
         4e:78:4d:08:f4:97:5d:2b:ac:e9:00:e1:24:32:c5:d5:4d:44:
         e4:46:4b:f2:33:e9:94:20:ea:0c:63:96:cb:41:be:42:5c:ae:
         7e:1c:95:a7:32:d3:03:5c:b7:ff:39:1f:fc:8b:9a:35:4d:93:
         ec:18:f9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:35:13 2024 by rpki-client on console-fra.rpki-client.org