Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer
File:                     3C7FA74CDFF1E4752479602672F26A883C7A6052.cer (raw, json)
Hash identifier:          gqNnvusg6pUDAY2pgEGhrzCF6s+QuZS18GI1KvoCffQ=
Subject key identifier:   3C:7F:A7:4C:DF:F1:E4:75:24:79:60:26:72:F2:6A:88:3C:7A:60:52
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       218DA8AAD8117A9A8252640E702E27D1D671A31A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 03 Jun 2024 18:22:12 +0000
Certificate not after:    Mon 02 Jun 2025 18:27:12 +0000
Subordinate resources:    AS: 61885
                          IP: 131.0.140.0/22
                          IP: 2804:1ac8::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:8d:a8:aa:d8:11:7a:9a:82:52:64:0e:70:2e:27:d1:d6:71:a3:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  3 18:22:12 2024 GMT
            Not After : Jun  2 18:27:12 2025 GMT
        Subject: CN=3C7FA74CDFF1E4752479602672F26A883C7A6052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:66:8c:0e:8e:c2:48:bd:6b:f3:e2:7f:f8:44:
                    b4:88:f3:6a:1e:d0:1c:08:05:57:40:9b:e4:98:3d:
                    83:1f:b8:84:d1:7f:47:9d:17:86:d8:6a:24:51:13:
                    b7:dd:62:03:f6:72:9c:4d:01:b3:a1:5e:21:1e:65:
                    72:81:97:42:c9:37:9f:1b:4a:70:05:47:07:1c:c1:
                    41:10:ac:2a:2b:de:f2:67:b4:eb:d7:51:1c:fe:36:
                    ce:92:8b:fa:be:6e:4d:56:25:01:7e:df:a7:9a:c5:
                    46:4c:20:42:e9:39:1a:c9:e6:b7:c8:b4:c2:25:83:
                    5a:76:a9:3b:d0:d9:1f:8c:84:86:48:47:e3:6c:e4:
                    3d:ce:7e:ac:1e:e1:26:eb:d3:77:db:77:bf:13:17:
                    29:cb:f3:5f:f1:fa:4f:13:c7:21:ec:0c:9d:28:da:
                    8b:05:12:b1:46:7f:2f:d0:82:f0:26:dc:87:22:f2:
                    7b:ee:8d:08:96:7c:cc:75:e0:db:ed:81:68:51:98:
                    dd:1d:93:9a:1c:5b:53:6b:50:61:af:e2:6c:cc:2e:
                    42:99:91:27:67:69:44:68:12:64:44:5c:ef:c3:0c:
                    c3:7b:87:f6:fd:53:1a:1e:02:82:8e:27:fe:ea:46:
                    70:98:40:53:e5:12:b7:fc:e1:0f:a9:df:01:40:8c:
                    c4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3C:7F:A7:4C:DF:F1:E4:75:24:79:60:26:72:F2:6A:88:3C:7A:60:52
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.140.0/22
                IPv6:
                  2804:1ac8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61885

    Signature Algorithm: sha256WithRSAEncryption
         3f:b7:22:aa:9f:36:b4:4c:8c:da:c7:5f:47:b8:d2:50:a0:71:
         39:41:66:96:9a:87:2b:e9:30:f7:a2:c1:cc:1f:18:77:d5:2f:
         8c:49:f6:cb:48:e9:a2:7e:0a:54:26:72:f3:a6:a7:27:c5:78:
         d9:13:ee:99:90:7b:50:94:1f:be:7a:b0:84:e5:08:6e:63:a4:
         d1:5e:18:4f:71:d4:df:93:6c:a2:33:e0:cb:a4:88:4c:a8:fb:
         88:2c:f8:4c:81:a4:e6:34:51:74:aa:1f:1c:23:eb:21:b1:af:
         8b:5e:af:ff:fb:c8:00:4c:13:c2:3c:cd:84:84:2d:40:b1:f0:
         48:59:79:2f:69:a6:c8:4d:e8:7a:93:c5:46:b5:99:58:6b:a9:
         4a:63:5f:bb:69:ad:7f:b1:3f:ea:c4:46:78:15:7e:83:2b:e3:
         9f:95:45:2b:68:11:59:82:87:ef:a7:ad:16:41:e3:09:6c:38:
         b2:b7:8c:7c:76:3b:01:f0:5b:75:a3:8c:41:38:ee:21:bc:b4:
         6a:8b:94:54:57:88:1c:10:8e:62:90:0c:3e:0a:0a:b7:3a:af:
         45:b7:ad:b5:17:43:80:bc:d0:e0:12:70:5c:e3:65:aa:7c:88:
         7b:2e:83:6b:c9:47:cd:ea:33:d0:61:3b:4a:bd:5f:87:bf:69:
         8e:a4:85:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:41 2024 by rpki-client on console-fra.rpki-client.org