Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3A546F3625A8CE1F69122E8BD80769CC991FC593.cer
File:                     3A546F3625A8CE1F69122E8BD80769CC991FC593.cer (raw, json)
Hash identifier:          6IuTwxXVB8VW9nAJd+/UFdCFJQe7FZCicK7JYHhZcRA=
Subject key identifier:   3A:54:6F:36:25:A8:CE:1F:69:12:2E:8B:D8:07:69:CC:99:1F:C5:93
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7EBE8452F8F28AA3566D7AE87E534881B9A5E28A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AET42FBtCa2fwcZPu1YR98KdPHi1oXiTSivtofnU8Dny/0/3A546F3625A8CE1F69122E8BD80769CC991FC593.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AET42FBtCa2fwcZPu1YR98KdPHi1oXiTSivtofnU8Dny/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 08 May 2024 02:50:11 +0000
Certificate not after:    Wed 07 May 2025 02:55:11 +0000
Subordinate resources:    AS: 52781
                          IP: 177.200.48.0/20
                          IP: 2804:24d4::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 04:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:be:84:52:f8:f2:8a:a3:56:6d:7a:e8:7e:53:48:81:b9:a5:e2:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  8 02:50:11 2024 GMT
            Not After : May  7 02:55:11 2025 GMT
        Subject: CN=3A546F3625A8CE1F69122E8BD80769CC991FC593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b7:df:c5:c6:60:82:4d:0d:fe:d1:7a:4a:8c:
                    bc:cc:49:2f:ad:77:a9:d4:86:6e:80:11:23:7a:6a:
                    c4:0c:b9:76:74:ec:c0:b5:ec:6f:80:67:2d:5f:64:
                    ed:7e:6e:91:95:61:a6:5c:d0:03:a5:a5:2b:f7:13:
                    9f:c8:00:d4:71:f5:1a:86:ce:9e:c8:d2:bc:4c:ec:
                    a9:d7:07:e1:c5:a7:14:20:1c:00:dc:bb:3a:c3:e4:
                    33:cc:03:b9:23:c2:b4:67:93:68:15:81:de:18:bc:
                    04:04:24:0d:6a:64:29:3e:b0:52:bb:0b:bf:bd:02:
                    1e:f1:0d:48:67:bc:36:42:39:dc:10:d9:51:f5:bf:
                    d2:46:69:37:e2:64:4d:37:14:00:62:b0:3d:08:f7:
                    b4:3d:d1:ca:d6:14:8b:fa:ac:75:db:63:2a:8e:76:
                    55:87:2d:cf:e8:0b:20:bd:9a:bd:ba:67:27:89:ad:
                    6e:70:e7:97:24:a4:4b:6b:20:cc:62:61:6b:cf:88:
                    5c:1e:19:be:b0:23:8e:f3:81:6c:94:44:5f:52:20:
                    d4:42:2f:d4:68:2e:eb:34:58:fa:b6:70:45:ba:20:
                    41:4a:34:1d:62:20:53:ed:e6:43:3c:d7:16:5e:c8:
                    3d:48:61:b8:e1:b4:50:2c:c0:f1:55:57:15:2d:cf:
                    2f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3A:54:6F:36:25:A8:CE:1F:69:12:2E:8B:D8:07:69:CC:99:1F:C5:93
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AET42FBtCa2fwcZPu1YR98KdPHi1oXiTSivtofnU8Dny/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AET42FBtCa2fwcZPu1YR98KdPHi1oXiTSivtofnU8Dny/0/3A546F3625A8CE1F69122E8BD80769CC991FC593.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.48.0/20
                IPv6:
                  2804:24d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52781

    Signature Algorithm: sha256WithRSAEncryption
         a2:6f:fc:bc:96:e7:df:f4:ce:c5:df:da:6a:75:3b:12:57:31:
         2a:2b:ce:bd:eb:27:70:f1:c2:68:5b:e8:43:3a:a6:7a:7c:51:
         29:1d:5e:b2:48:c8:95:57:a7:90:df:25:c3:4f:78:6c:7c:63:
         f1:89:9d:f1:53:28:60:af:4e:1f:e4:3b:02:e7:36:93:1c:52:
         5b:3e:3f:69:5a:7d:5d:74:ab:63:f4:0f:f4:15:a3:25:c5:79:
         e3:92:e8:80:b5:22:27:0c:0e:8a:d1:53:04:5a:ff:e4:4b:48:
         43:58:f1:58:15:5f:ce:54:76:a4:65:1e:ba:d9:86:52:d6:98:
         4f:bd:64:bc:98:69:ac:5d:ab:7b:31:b1:70:78:7b:89:13:70:
         75:31:9e:eb:7d:f3:91:c6:b0:98:d1:4f:2b:d6:23:b8:b7:ac:
         c9:01:38:1c:7d:bf:f0:05:e5:6b:8e:e8:0e:93:56:12:f4:79:
         19:31:d8:6c:e5:aa:f6:df:96:5b:46:b5:0b:85:3a:3d:b0:35:
         61:4a:49:88:28:82:07:c7:4b:b1:43:44:7d:47:b2:6f:df:ab:
         e5:f1:34:84:eb:a3:30:2c:bd:45:c3:cd:c2:15:89:00:70:65:
         c3:e2:b9:56:20:18:9a:b3:13:16:a8:0d:6b:1f:c3:0a:f2:16:
         29:3b:2b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:36:32 2024 by rpki-client on console-ams.rpki-client.org