Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/344CBA05B0788F63198ADAAB801BD06F775E3484.cer
File:                     344CBA05B0788F63198ADAAB801BD06F775E3484.cer (raw, json)
Hash identifier:          JPYc5x7/0KHGlOqzKlsQ/2C1CXVUmRZnusHr5xP99oQ=
Subject key identifier:   34:4C:BA:05:B0:78:8F:63:19:8A:DA:AB:80:1B:D0:6F:77:5E:34:84
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       59D786A39949093C0B5A57DF8691D8C26B7B951C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/1/344CBA05B0788F63198ADAAB801BD06F775E3484.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 16:58:05 +0000
Certificate not after:    Thu 03 Apr 2025 17:03:05 +0000
Subordinate resources:    AS: 262436
                          IP: 177.52.32.0/22
                          IP: 177.52.164.0/22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d7:86:a3:99:49:09:3c:0b:5a:57:df:86:91:d8:c2:6b:7b:95:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 16:58:05 2024 GMT
            Not After : Apr  3 17:03:05 2025 GMT
        Subject: CN=344CBA05B0788F63198ADAAB801BD06F775E3484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:25:a4:d0:be:8f:c0:ef:03:4a:42:1c:ba:3f:
                    27:82:0d:28:81:6e:41:3e:10:53:5d:fe:e6:28:12:
                    71:46:b1:be:ad:50:20:2e:8d:99:63:d3:23:4f:bb:
                    9f:66:5d:eb:f3:2f:c1:dd:9d:e8:b7:1a:a5:33:20:
                    83:9e:fe:ae:28:1a:41:48:98:7d:78:ea:d6:82:8a:
                    12:d1:18:b4:fe:37:17:aa:61:b1:c1:1f:11:7d:0f:
                    03:54:10:91:16:6b:28:fa:91:4b:3c:bd:44:63:6c:
                    ee:9e:49:7c:0d:d2:d7:27:9c:2d:28:2d:d1:b7:4d:
                    af:dc:6b:a2:ca:38:ba:57:a8:80:c1:c4:cc:b6:d6:
                    b9:cc:14:3f:1c:bb:76:4e:b5:56:e1:89:17:03:4f:
                    21:93:ce:84:f9:a3:00:98:1a:c2:6b:3b:67:44:a1:
                    30:d0:7e:6c:2e:a7:68:ec:e8:09:56:24:af:82:e6:
                    a6:5a:8c:c8:01:16:88:4a:b9:92:5f:1a:a4:b0:db:
                    fb:97:33:0a:c7:d1:44:95:f0:64:a3:5a:5d:bc:53:
                    64:b8:e2:ff:ed:3c:cc:97:9e:34:aa:56:57:71:19:
                    67:50:71:d3:47:72:55:91:be:53:6a:6e:39:84:eb:
                    5d:e5:0b:c7:f8:bf:a3:53:8e:91:16:2d:37:2b:16:
                    fd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                34:4C:BA:05:B0:78:8F:63:19:8A:DA:AB:80:1B:D0:6F:77:5E:34:84
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/1/344CBA05B0788F63198ADAAB801BD06F775E3484.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.32.0/22
                  177.52.164.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262436

    Signature Algorithm: sha256WithRSAEncryption
         91:cd:ff:5b:15:18:cf:84:6d:10:e5:65:3e:64:b6:1f:ee:04:
         10:e9:14:a7:03:c8:27:d5:2e:b2:dd:fe:1f:d3:78:cd:b5:ad:
         39:21:cd:a1:50:72:09:52:1a:4c:b1:5e:49:ec:ba:92:ac:ca:
         3a:4a:fd:59:75:2b:9d:50:e0:a6:5a:a4:fa:69:a4:fb:e1:87:
         a8:9c:68:6d:3f:0f:03:9d:f5:12:de:1b:22:e3:b6:24:e7:45:
         e0:66:0d:87:6b:51:ed:ad:cd:20:0d:83:d7:22:f7:19:27:31:
         a9:98:ba:a0:30:14:44:d6:88:91:16:30:88:e0:54:cb:71:77:
         e5:24:17:1a:bb:ad:04:8c:99:a0:33:53:04:94:d2:f8:dd:9c:
         0a:9c:a4:27:e6:eb:5d:58:c1:a5:81:36:4c:c9:cf:1a:76:07:
         2e:2b:63:85:9b:22:2a:91:86:3a:f0:1b:62:fa:49:7e:d2:4e:
         93:7a:dd:7a:eb:16:48:01:ab:50:15:96:d8:77:34:77:6f:37:
         65:a0:a7:43:58:5b:05:17:e2:86:53:06:32:2d:23:8d:85:df:
         8a:e1:df:0c:b2:a0:4a:09:66:e9:2c:e9:84:f5:5c:8f:b0:20:
         74:46:0a:b7:3b:53:ae:ba:df:d2:de:5a:19:3a:0f:28:ff:bd:
         8c:ec:e5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:06:00 2024 by rpki-client on console-ams.rpki-client.org