Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
File:                     3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer (raw, json)
Hash identifier:          7g1IfZlCSICNPKDcOuDmmf737wQ9+fwJkSZK6duOkUs=
Subject key identifier:   3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       26A84866F4CEBA916CB7789F71B8DABB7EA8BD84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
caRepository:             rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:25:39 +0000
Certificate not after:    Wed 02 Apr 2025 18:30:39 +0000
Subordinate resources:    AS: 268137
                          IP: 45.169.200.0/22
                          IP: 2804:5894::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a8:48:66:f4:ce:ba:91:6c:b7:78:9f:71:b8:da:bb:7e:a8:bd:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:25:39 2024 GMT
            Not After : Apr  2 18:30:39 2025 GMT
        Subject: CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9f:9b:ab:0f:37:ad:da:bf:20:76:77:14:bc:
                    60:4e:a5:03:10:be:10:bf:be:f2:f9:82:6e:be:29:
                    7b:3e:90:73:db:7c:73:07:27:d2:7c:b8:e2:f2:0d:
                    12:cd:47:cc:d0:9c:0a:04:9b:8b:a3:8d:1b:8c:0f:
                    e5:aa:b2:bc:9e:0c:e6:15:01:49:3b:1d:cf:96:de:
                    64:19:3e:1f:a4:54:da:b0:22:00:b5:77:89:35:64:
                    69:da:cd:44:61:10:9d:bb:5b:6b:2c:45:c7:dc:a5:
                    0d:76:d4:9f:c2:1c:f5:7e:3f:9b:b3:2e:db:d9:4c:
                    bf:ef:f7:16:61:4a:a5:24:a7:40:b2:65:db:c4:cd:
                    e6:35:c5:8e:3e:c3:28:dc:6b:7c:51:01:a4:5a:8a:
                    a2:2c:8d:f6:ab:47:30:bd:96:e8:ba:4c:86:a5:35:
                    81:8e:3c:c6:6a:6f:3e:7d:15:79:74:66:42:23:de:
                    b9:8a:f7:f0:98:1d:22:c4:d2:25:be:8e:ad:4e:86:
                    f4:e7:b5:98:01:b3:6d:1c:32:84:2e:a4:a0:f0:76:
                    29:2d:9d:42:a0:f5:2e:ae:38:72:bb:f1:36:25:ba:
                    b3:42:75:4b:57:e6:62:04:47:45:23:bf:e0:60:4b:
                    55:60:b5:30:e8:a2:22:f9:43:60:f9:e7:61:84:c8:
                    6b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.200.0/22
                IPv6:
                  2804:5894::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268137

    Signature Algorithm: sha256WithRSAEncryption
         5d:13:b7:b6:a4:49:d3:67:e2:58:b4:a8:3a:a1:40:da:3b:b0:
         06:27:7b:12:c1:57:d5:31:fd:b2:63:c6:98:d7:e5:04:ac:ff:
         00:bb:ab:b7:00:0e:aa:b4:05:0d:52:dc:7f:c1:ce:30:87:40:
         f5:78:dc:ac:41:46:d4:c2:53:f4:9d:81:46:e3:94:be:16:9a:
         32:b0:f3:bc:d8:75:40:a9:2a:15:62:41:70:a5:cf:6d:ad:e2:
         26:ed:7b:9b:c8:3b:c5:53:1c:d4:2f:30:89:09:0b:31:e5:40:
         2f:10:48:51:ec:c9:91:14:e3:0c:9c:62:19:f5:74:db:f8:ad:
         2a:0d:0d:05:a0:e3:10:1d:0b:8d:cc:12:29:9e:b8:41:ab:94:
         48:da:9a:23:c4:7e:74:a5:dc:85:c1:6b:70:d3:f4:db:8a:cd:
         e3:2a:ff:2c:8b:9a:3e:48:e6:6e:75:85:b6:1e:eb:b0:f9:ba:
         33:74:69:6b:dd:84:fa:fc:09:fa:62:fc:6b:48:6f:31:19:d5:
         a9:75:07:8d:af:d3:9a:6c:49:ea:6d:26:d8:2b:c1:a3:13:d7:
         e9:43:d8:d1:8a:fe:9d:f6:4c:23:1e:77:2c:6c:b2:51:6e:5c:
         0c:1d:f8:54:c7:bd:93:c0:6c:a5:f2:76:1d:7e:e6:e4:46:e5:
         88:57:6a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:36 2024 by rpki-client on console-fra.rpki-client.org