Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer
File:                     3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer (raw, json)
Hash identifier:          C+ybU1gF4ggGzOy5phTVhanOQsWrI1BurDZas5CXqdU=
Subject key identifier:   3C:8E:5F:41:F3:AF:74:0E:94:27:F8:ED:23:5C:12:00:98:AA:0C:21
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       69141863DB4F79C5A1CE4B308F922C99E44236C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 16 Jul 2024 21:19:23 +0000
Certificate not after:    Tue 15 Jul 2025 21:24:23 +0000
Subordinate resources:    AS: 53078
                          IP: 131.0.64.0/22
                          IP: 170.80.252.0/22
                          IP: 186.193.16.0/20
                          IP: 187.94.208.0/20
                          IP: 2804:6bc::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 00:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:14:18:63:db:4f:79:c5:a1:ce:4b:30:8f:92:2c:99:e4:42:36:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 16 21:19:23 2024 GMT
            Not After : Jul 15 21:24:23 2025 GMT
        Subject: CN=3C8E5F41F3AF740E9427F8ED235C120098AA0C21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:36:ff:d6:0a:b4:49:7a:4e:de:87:2e:97:d5:
                    39:1b:a5:36:bb:7b:ec:85:00:58:c6:2c:66:ea:37:
                    1a:e6:bf:4b:36:92:f4:1c:53:7c:51:d1:c7:eb:17:
                    b3:fa:5e:39:08:fe:bf:fb:a4:d5:64:13:bc:36:59:
                    37:84:12:36:16:db:2b:26:5f:a6:1e:5c:1b:38:b7:
                    10:ce:88:9f:9e:ee:d8:e0:5d:1d:13:8e:72:a8:a7:
                    c2:bf:d1:19:c2:47:82:2b:be:e1:ac:4c:8e:b0:c5:
                    9b:7d:e5:29:bf:2a:81:b1:cc:fc:c2:88:43:a0:98:
                    10:98:79:8a:55:81:e6:fb:4f:16:f2:dd:e9:c2:cb:
                    fd:fa:2a:ec:74:7c:ee:4e:f9:a6:3c:d4:98:85:42:
                    b2:ec:0f:48:dd:82:cc:e9:b5:32:0e:c9:0d:de:19:
                    fc:fe:21:b5:2a:2f:33:1f:53:b5:84:4f:16:6c:98:
                    33:e1:07:9f:0e:fc:b6:6d:5c:1b:76:9e:ce:78:30:
                    72:17:ec:45:01:7a:35:9d:38:70:99:16:2a:53:cf:
                    8c:58:3e:d4:ee:b6:56:be:27:03:80:11:a4:d2:70:
                    61:1a:c5:d0:06:b9:c6:3e:9d:c2:b9:44:ce:c2:4d:
                    59:71:29:3c:6e:35:a9:71:fb:4b:34:76:3f:da:46:
                    bf:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3C:8E:5F:41:F3:AF:74:0E:94:27:F8:ED:23:5C:12:00:98:AA:0C:21
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.64.0/22
                  170.80.252.0/22
                  186.193.16.0/20
                  187.94.208.0/20
                IPv6:
                  2804:6bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53078

    Signature Algorithm: sha256WithRSAEncryption
         c6:f0:10:e1:29:0c:be:53:fa:55:5e:dd:e8:20:fe:b8:30:13:
         92:f3:0d:b0:45:18:08:4b:3f:f6:91:7b:9f:c9:be:cd:3c:76:
         26:31:47:b8:ab:ba:4f:c7:f5:b7:08:35:e8:61:f7:9c:61:96:
         5f:fc:fa:a9:c6:fb:3e:a0:49:ef:1b:f1:72:bb:d6:cc:1e:60:
         e0:39:57:23:e1:0e:ca:b9:d3:c9:e6:07:d9:92:ef:79:5e:b2:
         a2:d6:ce:40:d0:49:8f:7d:d1:05:e4:eb:bd:23:18:7d:32:e6:
         aa:ca:56:56:5d:9d:65:0d:80:c8:a6:75:43:7d:98:00:a8:63:
         4c:52:38:89:01:33:97:1d:3c:bb:d9:a3:75:f9:86:60:af:ed:
         81:69:50:05:3f:2d:72:73:e7:79:62:61:28:d2:48:e1:59:9b:
         cf:9b:bb:43:6e:98:d3:cc:84:8b:92:76:6e:ab:51:50:6b:58:
         0e:ab:89:f8:88:90:27:cf:c1:65:2f:aa:e9:03:f0:c6:cf:ee:
         74:ba:66:5b:c5:d6:4d:68:cc:0b:bb:4b:ac:dc:40:29:5b:f8:
         19:7d:8b:de:05:a2:38:63:08:a1:33:e1:af:ac:f9:a8:fb:5d:
         58:90:c3:57:23:34:64:44:27:a4:f5:48:f3:d9:96:a3:5b:44:
         dc:8d:4a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:59:57 2024 by rpki-client on console-ams.rpki-client.org