Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3E9ABEDC7E771B85710E3E49ED20657F04DA1797.cer
File:                     3E9ABEDC7E771B85710E3E49ED20657F04DA1797.cer (raw, json)
Hash identifier:          NPOP0BLZ3+0lNOZwddUNMNFd3p7iUeUd1Dwvmiyi6Sw=
Subject key identifier:   3E:9A:BE:DC:7E:77:1B:85:71:0E:3E:49:ED:20:65:7F:04:DA:17:97
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       634AEA61DD17AA854661DBD48DB1FDA664A4B3FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/1/3E9ABEDC7E771B85710E3E49ED20657F04DA1797.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Apr 2024 02:48:50 +0000
Certificate not after:    Fri 04 Apr 2025 02:53:50 +0000
Subordinate resources:    AS: 266204
                          IP: 190.123.196.0/22
                          IP: 2804:3c54::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 00:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:4a:ea:61:dd:17:aa:85:46:61:db:d4:8d:b1:fd:a6:64:a4:b3:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  5 02:48:50 2024 GMT
            Not After : Apr  4 02:53:50 2025 GMT
        Subject: CN=3E9ABEDC7E771B85710E3E49ED20657F04DA1797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:86:3a:49:5a:81:64:37:b0:85:3e:27:5a:60:
                    9d:f1:b9:56:c4:7e:ac:73:bf:de:df:ed:2f:3a:6e:
                    f0:8c:3e:a6:05:1a:f9:27:6c:50:ff:27:88:78:36:
                    f1:6d:60:7e:25:c4:16:66:40:f5:2d:8c:0e:cf:d6:
                    bc:1a:b3:92:3d:d0:bb:44:db:0f:3a:59:91:37:ff:
                    41:8c:d2:ee:a5:94:92:ec:9d:52:de:09:17:63:14:
                    d2:df:a0:aa:0e:fe:e6:01:6c:1b:2c:f1:b8:af:aa:
                    11:c4:b1:d9:02:e6:77:0a:a4:aa:e1:01:1a:cd:03:
                    94:c1:0b:01:3b:17:66:1b:1c:db:b3:86:ec:3c:d2:
                    05:d9:43:0c:58:c8:88:ac:a8:58:b7:66:ab:da:c0:
                    29:69:ea:60:da:0d:e0:5a:95:c8:e6:5b:a8:88:18:
                    b5:99:2f:8a:23:56:d0:fc:46:ff:b0:c3:71:95:a7:
                    36:d6:e1:72:1a:7c:5b:42:95:bf:08:de:53:e9:15:
                    5b:ea:c0:d8:be:c9:37:d0:b6:0a:93:a4:1e:27:61:
                    de:ad:8f:c8:2a:cc:79:51:0f:ae:83:ee:f5:ef:29:
                    a6:53:d9:ed:2e:61:b1:41:29:4b:15:53:6b:65:4f:
                    8f:77:5f:ed:85:c2:83:43:1a:f4:61:5a:23:08:b2:
                    61:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3E:9A:BE:DC:7E:77:1B:85:71:0E:3E:49:ED:20:65:7F:04:DA:17:97
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/1/3E9ABEDC7E771B85710E3E49ED20657F04DA1797.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.196.0/22
                IPv6:
                  2804:3c54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266204

    Signature Algorithm: sha256WithRSAEncryption
         75:5e:74:a1:24:77:1f:29:6d:11:fd:4c:0e:38:e8:19:23:6a:
         cc:77:b9:58:ad:88:30:0d:f6:b6:d3:03:62:2c:59:a6:28:23:
         b7:f8:34:2a:49:ed:c7:db:bc:ab:b0:9c:17:9e:52:d0:1b:24:
         85:57:ef:db:a5:a8:85:6f:92:74:81:bc:ac:4b:c4:16:b1:1f:
         ff:17:41:78:20:10:89:ae:e7:da:e8:b4:13:74:6a:97:f1:58:
         f3:ea:f2:2b:d4:50:f6:6c:6f:00:cf:59:de:c6:f5:bd:51:0f:
         32:f9:ac:0e:34:41:1c:4c:40:80:55:61:f3:ca:ff:da:31:2a:
         5a:40:1e:11:90:d7:05:f2:1e:ba:8d:cd:fc:be:85:1c:31:b6:
         87:09:83:6a:42:9c:b8:af:ed:24:fb:36:eb:bf:e4:25:f4:4b:
         ca:a4:d4:e7:7f:36:16:59:93:89:32:9d:cb:d4:f9:bb:0e:86:
         6b:76:10:91:f1:01:3e:65:83:d5:b7:51:e9:4d:91:73:d6:14:
         d4:77:0d:3f:b5:8d:68:bb:86:2c:85:10:19:f7:8c:75:80:cd:
         33:ce:c6:75:c3:fd:9b:4b:9c:2a:9b:e0:c2:ec:45:f9:12:15:
         09:b2:63:ae:97:75:66:fc:09:e6:7c:ff:a6:66:2a:38:e3:a5:
         a5:c0:6c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:16:25 2024 by rpki-client on console-fra.rpki-client.org