Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer
File:                     3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer (raw, json)
Hash identifier:          bxG3HE2zE8hSHZOTI3JIMEQR1mia01awBQDXsXVvsz0=
Subject key identifier:   3C:E2:7E:93:82:4D:1A:8C:BB:A8:C9:A4:EF:11:5E:F9:DC:A0:01:56
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6A8766F69AD886155865408C19157B95B19B6F6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 08:54:10 +0000
Certificate not after:    Thu 03 Apr 2025 08:59:10 +0000
Subordinate resources:    AS: 267174
                          IP: 45.230.92.0/22
                          IP: 2804:4944::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:87:66:f6:9a:d8:86:15:58:65:40:8c:19:15:7b:95:b1:9b:6f:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 08:54:10 2024 GMT
            Not After : Apr  3 08:59:10 2025 GMT
        Subject: CN=3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:49:62:5f:4a:f9:b8:74:46:2c:74:01:4f:16:
                    6e:42:f5:b9:86:b1:64:86:87:60:bd:e7:84:2a:03:
                    64:13:75:54:02:0a:f3:f8:8d:c4:88:fb:5a:73:a7:
                    95:d0:c3:4d:25:e1:66:8f:18:cc:17:90:a5:77:aa:
                    2c:a1:b7:84:cd:4b:ec:4d:7f:f3:04:ab:62:f9:c1:
                    c8:ee:11:55:a5:ae:c4:60:92:a4:3e:61:d3:7f:b1:
                    ad:19:0c:47:2e:c9:86:21:61:99:fc:b6:ab:87:30:
                    8b:1f:4d:53:cc:d6:df:1f:d2:04:d1:7a:c9:7e:f4:
                    cf:29:59:d5:c5:1e:05:eb:ef:00:7d:75:b1:6d:0f:
                    19:2f:cb:72:3c:01:57:d6:72:53:be:93:c4:49:b6:
                    09:58:9e:1d:6b:07:84:71:14:cd:b1:93:d8:cb:49:
                    1c:46:24:17:da:57:f2:2b:a8:8f:f0:9f:20:75:cf:
                    bc:1f:17:17:03:cf:0c:14:b2:9d:da:3b:94:cc:5b:
                    a8:08:1d:00:3e:b6:f7:c9:b1:57:f0:f9:2e:33:51:
                    91:33:53:76:6b:64:da:74:64:7c:f2:ee:5e:80:aa:
                    b3:25:4a:f9:b8:73:bf:37:32:db:cc:dd:92:ad:8e:
                    bd:cd:03:d5:07:d3:e5:cf:2f:1f:30:3b:fa:3f:66:
                    6a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3C:E2:7E:93:82:4D:1A:8C:BB:A8:C9:A4:EF:11:5E:F9:DC:A0:01:56
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.92.0/22
                IPv6:
                  2804:4944::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267174

    Signature Algorithm: sha256WithRSAEncryption
         75:6d:b1:3a:ab:36:c3:a8:6e:9a:32:3f:25:ea:3c:5d:99:57:
         a8:89:e5:3c:45:24:b1:95:2e:a9:6d:57:79:77:3a:3a:d6:5f:
         0c:da:9a:a7:6b:c0:fc:12:67:af:3f:d1:c2:81:e6:4c:7c:b4:
         e6:30:6c:76:a2:de:05:40:89:09:43:f6:d3:8b:ab:eb:0c:93:
         87:90:e3:9f:77:e5:fb:3a:16:e8:ac:f7:7e:7b:e1:54:9b:a8:
         8a:78:64:a0:81:29:5d:c7:27:17:ca:a9:32:a5:b9:a2:16:da:
         09:25:f0:9a:14:f5:f0:95:8f:24:ab:39:2d:da:c9:56:b8:be:
         4f:b3:c6:dc:85:c2:a6:01:b8:13:5f:0f:bf:85:21:8b:28:25:
         c4:64:82:fb:a5:ea:c5:8c:a2:8d:68:6e:98:55:e2:99:0e:a0:
         b1:31:33:72:35:f3:fe:59:85:b2:b9:20:f5:e9:96:53:59:71:
         4d:d5:cd:97:33:61:7f:f8:36:b8:9f:48:19:7c:61:99:1d:6a:
         69:92:d2:47:df:0c:3d:02:92:b4:5f:f1:42:5b:ef:20:36:4d:
         02:7e:b3:cf:7c:d7:9b:9a:af:d0:82:4d:3a:45:18:3c:57:b2:
         1a:66:7c:9c:85:14:5e:f3:04:57:24:50:f6:dc:a9:81:af:b4:
         41:a2:b4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:35 2024 by rpki-client on console-fra.rpki-client.org