Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.cer
File:                     3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.cer (raw, json)
Hash identifier:          HJT8Cq4b+Ovnhs/1t5DIPwI3SNiRzFPC0yM3HDlQbQw=
Subject key identifier:   3B:6F:AA:2A:DB:30:43:3D:1C:1B:2F:5A:84:C4:E5:9D:D4:2C:E4:72
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3648A2F819F2ED4AB302665EEE826CF3C5288609
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BYiREBDafKEmP5YwX61ZiHa7w8a3REnHwF2L1homrRke/0/3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BYiREBDafKEmP5YwX61ZiHa7w8a3REnHwF2L1homrRke/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 19 Jul 2024 14:00:45 +0000
Certificate not after:    Fri 18 Jul 2025 14:05:45 +0000
Subordinate resources:    AS: 28143
                          IP: 187.49.96.0/20
                          IP: 2804:5ec::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 00:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:48:a2:f8:19:f2:ed:4a:b3:02:66:5e:ee:82:6c:f3:c5:28:86:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 19 14:00:45 2024 GMT
            Not After : Jul 18 14:05:45 2025 GMT
        Subject: CN=3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b9:20:6d:2f:91:d1:01:7f:61:be:39:7f:4a:
                    35:15:67:ca:b0:38:53:e8:b1:6b:59:d6:da:20:bc:
                    cd:28:04:c1:de:0c:44:1e:f3:7c:c9:ee:62:c5:26:
                    0c:c7:83:c3:ad:11:1d:20:9c:98:55:79:26:62:43:
                    70:4b:9c:6a:fa:a1:7e:78:83:af:75:a0:1d:3e:b2:
                    90:45:e0:3c:3f:9d:df:e8:6c:50:71:82:ae:d9:5c:
                    57:95:8b:5a:20:ec:b3:f3:77:ba:4c:e0:01:f7:3c:
                    db:38:94:3e:bd:ee:86:b2:4c:d5:c9:a7:ee:6d:f7:
                    3a:4d:da:b5:ef:34:d4:94:9a:82:13:3b:4d:82:7c:
                    7e:68:e1:af:10:f9:36:17:fe:40:84:ec:76:3d:e3:
                    1a:92:55:09:7b:cc:28:cb:a5:8e:f7:cb:be:de:99:
                    2e:82:37:3a:a5:ce:67:d2:36:4b:db:85:0c:79:31:
                    23:46:ef:56:40:73:ab:0a:a6:09:14:7c:7f:13:0d:
                    a5:e8:83:4c:df:03:1c:3f:ff:e5:5d:a0:41:19:1d:
                    a4:cb:62:08:1e:1c:b0:49:8a:29:24:f9:45:29:a1:
                    04:f3:cc:ee:ea:7f:11:55:e1:a6:52:8b:4f:be:cf:
                    ca:2e:8f:cf:bf:06:4d:71:1f:a5:9e:82:ea:00:8b:
                    83:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3B:6F:AA:2A:DB:30:43:3D:1C:1B:2F:5A:84:C4:E5:9D:D4:2C:E4:72
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BYiREBDafKEmP5YwX61ZiHa7w8a3REnHwF2L1homrRke/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BYiREBDafKEmP5YwX61ZiHa7w8a3REnHwF2L1homrRke/0/3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.96.0/20
                IPv6:
                  2804:5ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28143

    Signature Algorithm: sha256WithRSAEncryption
         5a:81:e6:1a:ac:f0:f2:a4:92:ba:2f:c3:e9:05:bf:12:20:b0:
         f2:33:17:5b:c6:44:f3:51:60:db:ec:7d:20:d9:a4:79:67:f1:
         26:7f:cb:e0:e6:ff:ec:af:11:5f:dd:32:ad:36:e3:32:90:d0:
         df:ac:10:0c:7b:77:9b:14:cb:1b:70:ba:44:18:37:e4:57:12:
         a2:76:c5:d0:f2:c1:30:d5:34:02:ff:7c:c2:37:cf:32:9e:d4:
         92:42:95:61:24:9d:44:1a:73:6b:2c:a0:ea:5b:dc:7c:af:1a:
         e9:92:52:9b:53:64:5f:ae:91:6c:6d:df:c8:7a:91:65:a5:b7:
         1e:a3:f8:3f:65:1a:e9:72:44:e0:de:76:78:87:f5:58:b2:ce:
         41:76:0d:3c:65:d3:25:43:c9:57:1e:7f:9d:50:9c:c7:f5:f1:
         f5:c7:d7:14:86:13:bb:35:51:4f:69:bb:f6:b6:c0:13:c6:6d:
         e4:67:93:ab:9f:f2:9e:09:8c:96:f5:ec:bf:b4:b0:cc:c1:3a:
         c0:d5:fc:cd:72:3a:1b:76:ce:87:94:17:6a:6f:f7:84:f1:a2:
         5e:60:fb:33:4f:f0:77:50:6f:df:7d:42:58:85:46:5c:22:6e:
         ca:85:1c:1d:a7:3e:6a:fb:78:ff:b7:ce:9d:c5:f0:40:5d:de:
         c4:19:68:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:59:56 2024 by rpki-client on console-ams.rpki-client.org