Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/40636332B02FA344DE75686E874C7425B2C58624.cer
File:                     40636332B02FA344DE75686E874C7425B2C58624.cer (raw, json)
Hash identifier:          IxerW50n1LideKxqDL6pD6t9kVqL82bavT5tPXmbySo=
Subject key identifier:   40:63:63:32:B0:2F:A3:44:DE:75:68:6E:87:4C:74:25:B2:C5:86:24
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6738CE4AD80AFD06A2E3C244AC5C971161E2AF64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 19:23:16 +0000
Certificate not after:    Thu 03 Apr 2025 19:28:16 +0000
Subordinate resources:    AS: 263396
                          IP: 177.125.252.0/22
                          IP: 2804:1594::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:38:ce:4a:d8:0a:fd:06:a2:e3:c2:44:ac:5c:97:11:61:e2:af:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 19:23:16 2024 GMT
            Not After : Apr  3 19:28:16 2025 GMT
        Subject: CN=40636332B02FA344DE75686E874C7425B2C58624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:db:d2:1e:40:5a:a6:64:61:a6:20:1e:a8:e8:
                    1b:e5:93:b5:f4:c2:bd:5a:23:c4:f9:45:ae:85:8e:
                    c6:ed:6c:4f:81:d4:26:9f:b5:cc:de:b0:df:d5:a0:
                    34:fa:ab:cb:f1:9d:c1:bc:03:50:97:9a:91:0c:37:
                    32:a1:e7:47:bf:29:d7:dd:98:2d:8c:12:d6:00:07:
                    22:1e:fe:86:87:2c:b9:3e:57:f1:17:f4:e8:36:60:
                    b4:ef:e3:32:23:44:fe:99:35:29:1c:0a:71:18:9f:
                    34:33:7c:2f:78:2f:a9:2d:b7:f4:8f:b3:37:52:50:
                    fe:2a:f3:df:d4:98:d7:b7:3c:75:11:49:80:20:ae:
                    f5:e0:29:c9:08:00:b5:b5:1f:28:34:5b:85:5b:56:
                    a7:e0:0b:8a:c6:6b:64:8c:24:ad:c8:5f:33:9a:8d:
                    2e:82:b2:ff:09:80:4b:9a:22:14:6b:5f:c9:85:e6:
                    ef:ee:a7:92:a2:54:f3:a9:e8:b7:f7:1d:ed:83:24:
                    70:36:e1:e6:33:9f:09:4d:0e:c3:a3:dd:31:02:3f:
                    60:cf:f5:d0:3c:7e:a5:8c:31:6b:c0:32:40:4e:00:
                    d4:3b:bc:70:15:b5:12:5f:88:78:ab:55:41:1b:4d:
                    4b:48:5f:50:bf:9e:e4:f3:4f:dd:38:b0:0f:e0:65:
                    f9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                40:63:63:32:B0:2F:A3:44:DE:75:68:6E:87:4C:74:25:B2:C5:86:24
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.252.0/22
                IPv6:
                  2804:1594::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263396

    Signature Algorithm: sha256WithRSAEncryption
         a5:6c:67:f1:79:5c:91:10:8c:f3:c4:79:51:c5:7c:e9:e5:fa:
         4b:21:46:b8:de:9b:bd:e6:6a:63:79:9a:e2:5c:b3:7c:be:8c:
         a4:38:c7:2b:0b:57:99:4b:14:a7:f2:2d:15:32:3a:e9:8e:e7:
         b8:89:9e:78:25:4a:db:cc:5a:d4:1b:62:39:db:e2:d2:2a:a8:
         0d:5a:ff:30:c7:95:16:9b:7b:f7:43:73:42:ec:de:d4:c7:11:
         8d:d6:10:4e:52:1f:3d:ad:41:db:9c:91:e5:d9:df:78:f7:b1:
         4c:47:7c:d6:71:f3:d7:08:ad:8a:01:5f:da:15:3e:7a:9d:06:
         25:ae:e1:b9:f5:77:3a:ca:3e:72:4b:08:be:76:98:74:32:4b:
         6e:21:e8:57:20:f7:71:e1:f1:6c:c9:d0:b5:e3:4c:9a:f3:aa:
         28:1d:d5:30:3a:4a:d3:4a:5f:2b:e3:9d:9a:73:63:74:bd:02:
         c1:d6:0c:31:ba:5f:19:76:95:59:94:b3:2a:69:dd:e3:a1:27:
         c9:0c:71:63:dd:e4:d2:bf:49:36:1c:02:fd:46:3b:bb:2a:bc:
         fa:a1:c5:eb:49:db:4d:c1:b1:24:e3:3b:3f:04:be:7a:2c:a3:
         8e:67:28:44:2e:93:13:5e:eb:01:0b:e5:c3:76:76:4d:3a:5a:
         5a:08:1b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:36 2024 by rpki-client on console-fra.rpki-client.org