Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.cer
File:                     3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.cer (raw, json)
Hash identifier:          RY9+16BA5uHXXryt8jyhLu4LSfnekqYBElQKHJ6I3io=
Subject key identifier:   3B:DC:BF:73:A9:FD:02:DE:55:AD:C9:07:7B:21:6E:28:EC:64:59:2A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3B2BB6F31028023962449043D2F8CD1B4FE5B729
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 18 Jul 2024 21:15:42 +0000
Certificate not after:    Thu 17 Jul 2025 21:20:42 +0000
Subordinate resources:    AS: 265915
                          IP: 131.196.168.0/22
                          IP: 2804:3fcc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:2b:b6:f3:10:28:02:39:62:44:90:43:d2:f8:cd:1b:4f:e5:b7:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 18 21:15:42 2024 GMT
            Not After : Jul 17 21:20:42 2025 GMT
        Subject: CN=3BDCBF73A9FD02DE55ADC9077B216E28EC64592A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b2:48:34:26:28:40:4b:56:67:b9:2b:83:c2:
                    d7:d4:8c:49:6e:d5:9e:62:02:57:cc:75:c4:88:e6:
                    21:36:97:ca:16:b3:1a:62:07:85:22:23:28:6b:26:
                    e3:f4:c0:ea:7a:69:23:c5:e5:9a:14:b0:36:af:52:
                    6a:fe:cf:f9:00:11:0e:cb:80:85:06:5f:39:b8:03:
                    e2:db:98:08:24:e3:6c:33:0f:e7:d9:ee:c9:b3:b2:
                    62:c1:51:36:6e:a6:12:09:ec:ec:17:3f:52:18:52:
                    89:a6:55:8b:f0:31:ea:22:b8:64:0e:29:8a:a1:84:
                    35:ef:a9:51:49:cb:6f:7e:18:83:a3:48:22:02:f4:
                    3d:51:fd:28:ed:cc:3f:8f:c8:00:a2:4e:ad:59:08:
                    58:71:04:0e:5d:a2:e9:43:51:ea:0e:2a:21:87:fe:
                    92:fa:56:da:0f:06:d3:ba:46:d0:eb:c6:b6:67:f4:
                    71:85:29:83:ee:a9:23:ee:36:82:d0:e1:bb:b9:16:
                    74:2f:4e:80:36:ea:b9:46:01:6c:97:d2:04:b0:e4:
                    d8:90:39:69:c6:ca:0f:96:25:f8:1e:be:c3:96:9e:
                    8d:d5:36:04:bd:33:e6:68:fa:51:88:b0:0a:63:da:
                    a8:8a:33:a5:9f:c7:86:de:7a:41:48:d1:bd:94:fd:
                    5c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3B:DC:BF:73:A9:FD:02:DE:55:AD:C9:07:7B:21:6E:28:EC:64:59:2A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.168.0/22
                IPv6:
                  2804:3fcc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265915

    Signature Algorithm: sha256WithRSAEncryption
         a7:19:16:8a:f6:13:47:da:49:ac:9e:b1:25:a6:41:0e:61:b8:
         eb:8e:31:26:07:ea:83:f5:de:b8:85:60:ef:7d:67:38:c3:c7:
         71:b6:c1:46:e6:ad:42:b7:59:e5:20:8d:ec:38:04:dc:fe:56:
         82:65:65:1e:01:4a:41:c2:ec:f8:37:a5:53:40:10:a8:f4:61:
         94:89:2d:7e:68:47:71:42:7d:08:dc:cb:a8:de:63:8b:3e:64:
         75:95:0a:1d:c4:11:31:bb:e2:96:03:c1:58:fe:28:31:9a:70:
         f5:79:dc:d1:b5:47:07:1b:d4:34:e3:fd:5e:9b:90:19:61:45:
         c0:c0:71:cd:cb:69:36:ac:8b:98:b7:3c:c6:22:2b:88:6c:73:
         7d:9b:2b:db:34:3e:19:d1:01:4f:02:58:63:1f:2d:6c:d7:8e:
         b6:ac:34:ce:94:d8:b9:fc:11:17:ac:3b:9a:b9:d8:99:de:e9:
         7c:84:bb:eb:89:09:21:c1:be:ee:2a:88:f8:b7:4b:ea:0a:24:
         6d:10:b9:4a:56:3b:01:6a:ec:0d:ec:27:d2:75:07:62:72:48:
         f7:c6:eb:46:13:8b:3f:0f:db:6e:66:cb:2c:4b:fb:1f:bd:26:
         a5:7d:2f:5a:8b:73:d3:d3:1f:de:36:3f:15:7d:c5:0c:35:a3:
         e6:5c:2a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:30:05 2025 by rpki-client