Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/32F59A098BBE3BAFB45736B5DA4B6211B4E55561.cer
File:                     32F59A098BBE3BAFB45736B5DA4B6211B4E55561.cer (raw, json)
Hash identifier:          dsux3jckIYBCL/x5Yx/Bz6kaLJomzPSIytNUOh+v+D4=
Subject key identifier:   32:F5:9A:09:8B:BE:3B:AF:B4:57:36:B5:DA:4B:62:11:B4:E5:55:61
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       51AEE9C32F7FD2BF81C23E0EE6FBFC5BECC6CAFA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/1/32F59A098BBE3BAFB45736B5DA4B6211B4E55561.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Apr 2024 00:48:22 +0000
Certificate not after:    Fri 04 Apr 2025 00:53:22 +0000
Subordinate resources:    AS: 263914
                          IP: 138.185.128.0/22
                          IP: 2804:27a4::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 05:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ae:e9:c3:2f:7f:d2:bf:81:c2:3e:0e:e6:fb:fc:5b:ec:c6:ca:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  5 00:48:22 2024 GMT
            Not After : Apr  4 00:53:22 2025 GMT
        Subject: CN=32F59A098BBE3BAFB45736B5DA4B6211B4E55561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:60:27:b1:88:bb:84:b7:a8:a0:ce:ec:7e:6e:
                    a8:8e:1c:b6:bb:58:bc:38:b3:0b:03:1f:34:14:e1:
                    90:ca:1d:fa:6f:12:2a:a9:62:7f:59:0c:6b:fe:d0:
                    22:52:81:d8:75:b0:2b:92:1b:09:c3:1e:20:c5:40:
                    56:25:0c:5a:6f:1f:ec:aa:7d:b9:66:56:e3:97:3f:
                    c7:a9:ac:14:b8:b3:7f:52:60:ba:90:3c:e8:9c:bd:
                    5d:cc:48:83:53:eb:4f:ba:46:8c:ae:4e:de:ef:2d:
                    5b:56:e6:7d:61:7e:54:0b:dc:ac:de:31:a0:ef:b3:
                    e8:6e:66:96:55:42:dd:51:d5:dc:57:14:d0:df:cc:
                    17:78:94:f7:47:9b:f3:54:28:63:44:99:dc:61:e0:
                    1a:c7:51:5f:42:5c:52:5a:3c:ab:fc:16:16:ff:f6:
                    7f:d6:1f:c0:02:b7:3a:9b:50:30:05:b1:ef:0c:0e:
                    73:d7:99:38:c8:91:26:f1:8e:60:71:fa:5f:51:86:
                    b0:20:5f:be:55:69:1e:9d:ab:e9:71:9c:8c:3d:57:
                    cd:ee:15:9e:16:46:79:17:84:14:cd:6a:36:73:00:
                    94:3d:3b:c6:3b:1f:ce:af:30:01:da:4c:a3:91:27:
                    6d:20:66:fb:52:13:cd:9e:91:2e:57:7a:ff:b7:03:
                    b2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                32:F5:9A:09:8B:BE:3B:AF:B4:57:36:B5:DA:4B:62:11:B4:E5:55:61
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/1/32F59A098BBE3BAFB45736B5DA4B6211B4E55561.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.128.0/22
                IPv6:
                  2804:27a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263914

    Signature Algorithm: sha256WithRSAEncryption
         25:14:91:7e:87:7f:05:8e:0c:2a:2b:f3:0c:32:f8:c0:08:4b:
         5a:a7:2c:13:cc:de:fc:52:dd:c6:1f:4a:cc:4b:b4:9d:80:96:
         3e:cd:87:9e:05:7f:36:25:04:00:9c:c6:e3:1f:a5:1c:20:4d:
         11:76:5e:a2:f6:86:a8:83:93:a5:9c:0a:e7:08:5e:89:25:e3:
         ec:64:17:7f:71:46:d5:a9:bd:a9:ba:fe:b5:75:37:a7:36:55:
         e8:61:9a:f7:4f:45:24:30:f5:1b:5e:fb:c5:a3:ae:af:35:ef:
         db:6b:00:69:cc:55:06:44:f7:62:61:2d:74:25:87:77:6a:4a:
         77:d8:41:a0:08:32:85:6e:03:61:90:c0:b5:84:41:16:b5:67:
         e5:00:ff:dd:9d:8b:b8:c5:b4:02:83:44:b7:21:a2:54:43:2c:
         87:ee:b3:e2:5a:4a:9b:30:71:6a:84:46:05:5d:26:10:a2:66:
         97:10:c3:52:be:39:2d:ee:c8:3a:81:85:04:87:90:41:08:92:
         10:22:5e:1b:9d:17:a9:a6:f7:38:1b:36:f0:57:ff:55:66:0a:
         4d:3a:86:9a:29:ed:95:3d:2c:4f:8d:11:64:18:54:13:2e:5d:
         de:57:a6:4a:7b:66:60:27:53:a8:ae:ce:03:3f:ca:ea:c2:93:
         e6:cb:2a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 07:40:51 2024 by rpki-client on console-ams.rpki-client.org