Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.cer
File:                     3DFAB11D75C819D05773554EBACF15CD75341EF8.cer (raw, json)
Hash identifier:          AsIYnUKmF7IqOjrhwiblM+PAWVQVL/cqDkACIrzuk2g=
Subject key identifier:   3D:FA:B1:1D:75:C8:19:D0:57:73:55:4E:BA:CF:15:CD:75:34:1E:F8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7EEFF6F425D20CCFF5D031284EB7F2972188EFA8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:25:55 +0000
Certificate not after:    Wed 02 Apr 2025 18:30:55 +0000
Subordinate resources:    AS: 271328
                          IP: 200.9.116.0/22
                          IP: 2804:79cc::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 05:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ef:f6:f4:25:d2:0c:cf:f5:d0:31:28:4e:b7:f2:97:21:88:ef:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:25:55 2024 GMT
            Not After : Apr  2 18:30:55 2025 GMT
        Subject: CN=3DFAB11D75C819D05773554EBACF15CD75341EF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fb:c7:9d:95:65:db:da:ed:a4:77:c8:cf:75:
                    37:f4:6b:d6:32:42:77:0b:3b:32:3b:35:2b:a0:29:
                    2c:b1:ab:e4:90:8d:ad:2b:6f:f0:78:aa:20:6c:e1:
                    f3:9f:c6:39:b8:2f:c2:28:ac:13:01:93:0c:13:15:
                    38:f7:5e:a4:4d:d9:73:83:e1:44:9e:67:4c:37:f3:
                    0a:82:f8:89:d8:f8:5e:4f:11:42:c4:db:7c:63:ad:
                    ab:41:2c:8d:d6:a5:68:7d:71:23:6d:d8:93:7c:6c:
                    7c:d7:70:eb:71:88:2c:ea:57:82:60:22:d4:93:c8:
                    70:1f:18:0d:c9:53:25:6a:50:9a:7f:00:0d:3e:39:
                    81:fd:17:8a:22:0e:63:2b:c6:b5:6a:5b:19:45:41:
                    d8:88:61:b1:c9:59:3d:f9:87:64:0b:ff:4f:6a:6d:
                    62:cc:98:cd:a1:d8:a1:f3:a6:45:62:b2:eb:41:57:
                    cb:6b:8e:b0:06:a3:bb:33:b7:9a:80:a1:f0:04:96:
                    8d:e3:67:6a:34:f8:9a:68:5b:73:34:07:e3:70:ea:
                    1a:7d:e2:e9:d0:3f:8a:0d:8b:a7:ed:ea:52:7b:77:
                    7a:26:6b:ba:6d:37:66:74:28:7f:bb:4b:08:04:74:
                    e4:a8:2c:69:c2:73:b0:96:8e:9c:b3:82:5f:7a:f5:
                    7f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3D:FA:B1:1D:75:C8:19:D0:57:73:55:4E:BA:CF:15:CD:75:34:1E:F8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.116.0/22
                IPv6:
                  2804:79cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271328

    Signature Algorithm: sha256WithRSAEncryption
         76:88:8a:23:5b:d3:8d:f0:e6:66:0a:54:0b:4e:f8:f9:3d:29:
         33:60:3e:98:cf:a8:f2:6a:8e:94:aa:a7:93:e4:45:e2:bd:23:
         3a:fb:34:af:36:48:83:dc:0f:c9:dd:76:c5:47:d0:27:c1:6d:
         d4:dd:ee:19:85:ad:f0:42:32:39:a6:c0:c9:90:39:5b:c4:98:
         f7:ed:ba:ed:15:e4:4d:ff:cd:21:21:69:e3:6a:9a:80:a9:41:
         b4:35:10:95:a1:37:6e:39:20:39:36:02:84:03:97:6d:2c:07:
         f7:f5:9a:c7:55:6a:05:0a:66:46:40:ba:e1:cb:7d:35:f4:a9:
         c0:57:f8:30:48:30:b0:0a:69:b2:b3:92:9f:28:f0:5c:3e:c2:
         1c:78:97:c1:61:be:f8:92:99:15:d3:2d:8d:87:5a:1b:9c:5b:
         80:bb:73:1d:f7:f4:cf:60:af:03:cf:02:bd:d6:51:b5:58:3f:
         f4:5d:45:57:af:2f:fa:62:14:07:3d:cc:e7:30:3d:d3:fc:32:
         69:f0:2f:e2:ac:b0:a5:2d:e7:7d:a3:43:fa:c7:1f:3f:62:0c:
         b9:1c:bb:0c:e4:f4:b7:ff:84:a0:f1:88:fd:0d:24:ea:07:ab:
         e4:4b:a0:ee:fb:8c:8d:5c:6e:32:a1:2a:7d:f4:19:0c:14:20:
         8c:58:fa:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 07:40:53 2024 by rpki-client on console-ams.rpki-client.org