Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
File:                     3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer (raw, json)
Hash identifier:          H8vquL4IAmYJTQSvJIErgaYPPAkVQCAUXuCJFfi7CTY=
Subject key identifier:   35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5E446F5AE4AFD7C4613870AE3C0FA5923D7E8DD4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 01:47:33 +0000
Certificate not after:    Thu 03 Apr 2025 01:52:33 +0000
Subordinate resources:    AS: 52545
                          IP: 131.72.48.0/22
                          IP: 168.121.168.0/22
                          IP: 170.82.168.0/22
                          IP: 179.107.80.0/22
                          IP: 2804:e1c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jul 2024 05:09:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:44:6f:5a:e4:af:d7:c4:61:38:70:ae:3c:0f:a5:92:3d:7e:8d:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 01:47:33 2024 GMT
            Not After : Apr  3 01:52:33 2025 GMT
        Subject: CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a7:43:57:a1:15:e1:ea:97:2b:33:51:06:fa:
                    ae:0a:83:4f:3f:e8:32:6a:11:5d:f1:40:19:e1:c5:
                    68:6d:39:e2:68:1f:2f:d0:7d:f9:63:aa:0a:8a:f6:
                    cd:6c:bd:03:37:ca:04:a5:2f:5d:ba:f3:c4:8e:31:
                    95:51:b0:a9:fd:ed:42:af:8f:fe:57:b1:64:41:a5:
                    ad:d7:6a:91:f5:0a:35:a3:d0:1a:f7:bc:91:3e:31:
                    f6:46:58:61:3b:e5:06:fd:4c:44:50:78:36:c4:8a:
                    2d:0c:0d:8b:65:1b:a6:90:f8:6e:cc:c2:57:79:02:
                    03:d0:4e:fa:68:60:d7:26:c3:60:72:9d:18:d2:c0:
                    ef:6c:24:c0:e1:0b:9b:99:90:07:48:d5:d5:80:9a:
                    00:78:52:91:56:3b:cc:db:94:7a:7f:b3:9d:77:dd:
                    3c:78:34:3e:0b:00:b3:24:24:1a:fe:e0:c9:33:98:
                    16:30:0f:b9:9d:34:64:dc:82:52:b2:a9:2f:16:ba:
                    65:c5:4e:a0:f0:f0:d2:b4:21:3a:df:3d:35:ff:81:
                    16:97:71:17:a3:b0:4b:2e:15:02:b7:1b:ce:f7:e0:
                    29:0f:90:d6:d9:99:2e:a5:42:65:12:91:0b:9b:9f:
                    31:68:8e:f4:4f:f4:4e:62:4d:b3:8e:cd:6f:39:c0:
                    6c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.48.0/22
                  168.121.168.0/22
                  170.82.168.0/22
                  179.107.80.0/22
                IPv6:
                  2804:e1c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52545

    Signature Algorithm: sha256WithRSAEncryption
         c2:8e:36:50:2b:d8:99:4c:26:ee:e3:9e:b3:61:d5:4b:c9:98:
         64:07:84:6b:31:db:d0:d5:f3:04:cf:ab:b8:42:ac:11:92:cd:
         93:7d:49:14:74:2a:11:7c:e5:9e:e5:36:1a:12:0b:bf:39:65:
         39:fa:9d:56:b1:e0:df:df:74:73:f0:5e:7c:08:49:99:2b:44:
         1c:f9:be:65:65:ad:1d:b0:22:15:b2:c8:aa:0e:51:b9:a8:0f:
         ce:9a:d2:b6:11:eb:1d:73:f8:3f:29:c6:f7:00:57:a1:23:9d:
         df:14:51:78:8a:fd:68:3b:6e:c8:9a:db:0a:aa:49:e8:08:c5:
         b1:9c:ff:96:58:40:ba:d4:c5:71:39:c1:8c:2c:1d:da:e6:ef:
         41:d2:3d:71:4c:61:56:2e:1c:d6:88:28:66:a6:7a:89:46:88:
         66:91:e5:5e:06:db:d8:45:17:7f:79:8b:90:37:58:09:f6:07:
         3b:ad:c7:d4:d9:46:a9:33:12:47:7c:1b:6e:ca:1e:e6:85:5e:
         6a:87:4b:1d:c5:60:d9:64:33:cc:20:60:70:94:68:a8:1b:07:
         e7:e4:49:b6:44:c2:bb:ae:f6:c4:8a:76:b6:e8:71:e2:a7:68:
         ad:b4:3b:8c:8d:0b:44:05:21:37:3f:cc:14:33:5f:2c:ef:d5:
         b6:6e:c2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 03:56:50 2024 by rpki-client on console-ams.rpki-client.org