Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.cer
File:                     35B6F2D2CE1FB89018FE70909C3AD22EE4659218.cer (raw, json)
Hash identifier:          t8UwYTUR9eZiUAnDxE1QkRza4EZ74Y8Z3orMbOmfby8=
Subject key identifier:   35:B6:F2:D2:CE:1F:B8:90:18:FE:70:90:9C:3A:D2:2E:E4:65:92:18
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       369D68F7287A81A633BA2789FDEA74BD0A89EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 02:12:27 +0000
Certificate not after:    Thu 03 Apr 2025 02:17:27 +0000
Subordinate resources:    AS: 272535
                          IP: 201.94.152.0/22
                          IP: 2804:82b4::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:9d:68:f7:28:7a:81:a6:33:ba:27:89:fd:ea:74:bd:0a:89:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 02:12:27 2024 GMT
            Not After : Apr  3 02:17:27 2025 GMT
        Subject: CN=35B6F2D2CE1FB89018FE70909C3AD22EE4659218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f7:31:c6:34:71:70:91:56:90:99:28:de:bc:
                    de:1f:4e:76:61:52:b5:eb:03:8a:db:1d:2f:a6:82:
                    81:4c:75:75:b7:05:0c:0d:35:e2:b0:78:a1:26:e1:
                    42:22:44:01:b9:ee:d5:f9:95:db:a9:18:31:e0:82:
                    b0:cc:cd:73:81:d8:b0:bc:d4:23:33:1b:51:84:83:
                    d6:e2:9a:ab:65:14:b2:04:ed:fe:0a:f9:e0:16:82:
                    3f:a1:f8:0b:76:d5:39:2e:43:de:7b:53:f5:0f:36:
                    9f:a0:e6:9f:8c:e7:82:bf:f0:a3:db:cf:fa:4c:78:
                    99:4b:cc:f4:36:f3:6e:f1:e1:6d:5b:d8:7d:15:02:
                    ba:76:14:4b:21:ea:a1:b1:76:47:27:ad:d9:99:96:
                    d5:78:93:cb:35:39:24:ef:e9:81:a7:3f:b9:1a:5e:
                    dc:2a:e5:50:1d:56:37:b5:ab:b1:8e:0a:1d:9f:96:
                    0e:04:85:97:d3:09:88:c1:3f:e6:ed:06:fb:2e:20:
                    2c:53:26:2c:c6:72:91:13:fc:fb:21:85:32:ff:b7:
                    8d:43:b7:b7:54:9a:49:75:f4:81:ca:4a:74:ac:34:
                    ea:38:bc:09:f6:6b:3a:27:af:76:a5:89:a6:53:2e:
                    51:17:49:cd:fd:34:4d:59:7b:ac:bd:ce:ee:1a:f0:
                    d4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                35:B6:F2:D2:CE:1F:B8:90:18:FE:70:90:9C:3A:D2:2E:E4:65:92:18
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.94.152.0/22
                IPv6:
                  2804:82b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272535

    Signature Algorithm: sha256WithRSAEncryption
         56:cd:6a:cb:a5:58:58:55:30:b5:bf:14:3a:3f:a4:f5:21:30:
         f6:9e:9f:bb:f0:c9:7d:9d:a5:f6:30:a6:73:7b:d7:a6:7e:6e:
         4a:7c:d0:da:dc:bd:1b:7f:ba:3a:9f:9a:4a:5f:3c:3f:67:5b:
         d8:8d:20:90:8c:3d:ee:be:19:a0:d7:21:04:a3:a8:60:d2:28:
         b9:03:59:e0:ac:d6:3b:44:37:c4:0d:d4:5f:65:8c:51:18:32:
         ba:0f:96:04:cf:dd:f2:0d:0c:6c:7f:cf:8d:a5:c8:62:14:a7:
         c2:ce:27:a7:9a:38:82:2c:f8:9a:8f:6b:38:43:09:3a:d4:73:
         b0:6e:83:f4:90:6f:3a:1b:2b:f5:b1:ca:3b:1e:f9:95:e1:33:
         76:ee:dd:be:4f:20:48:5d:f5:d5:7c:eb:0d:2d:9a:57:0f:40:
         c9:c0:29:80:30:0d:4e:90:d0:a3:6c:90:57:39:2d:21:55:0e:
         d2:5b:30:25:b7:86:43:ad:54:3e:85:f2:f7:de:e6:4a:5a:fd:
         6a:fc:0c:c7:2a:fc:bf:f3:48:d2:7f:59:bc:3c:b3:45:a8:bb:
         ec:8f:7a:d5:f1:9b:0b:3e:5c:b3:47:68:c0:f4:57:8f:61:24:
         e9:1d:61:c2:4b:7e:cd:35:27:7c:ec:c2:1d:8a:4c:5d:4d:6f:
         29:9f:fe:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:06:01 2024 by rpki-client on console-ams.rpki-client.org