Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4151665D0EB84AB3092E3766EA6EA61155041F3D.cer
File:                     4151665D0EB84AB3092E3766EA6EA61155041F3D.cer (raw, json)
Hash identifier:          O/iLmWjWr2tRjjjpbzPLaEjef0gGlxkOgrs0ZoA+/XE=
Subject key identifier:   41:51:66:5D:0E:B8:4A:B3:09:2E:37:66:EA:6E:A6:11:55:04:1F:3D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       76FA07AAA0CC5B81AD476FC4C0D21333FFEEE0EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/1/4151665D0EB84AB3092E3766EA6EA61155041F3D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 22:59:40 +0000
Certificate not after:    Wed 02 Apr 2025 23:04:40 +0000
Subordinate resources:    AS: 271298
                          IP: 200.53.84.0/22
                          IP: 2804:7950::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 23:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:fa:07:aa:a0:cc:5b:81:ad:47:6f:c4:c0:d2:13:33:ff:ee:e0:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 22:59:40 2024 GMT
            Not After : Apr  2 23:04:40 2025 GMT
        Subject: CN=4151665D0EB84AB3092E3766EA6EA61155041F3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:15:b7:69:0d:36:fb:06:bd:32:b3:b7:4e:32:
                    a8:a6:ba:1d:55:b1:96:7e:06:21:d9:a1:c6:5b:b6:
                    b0:e0:99:5b:0e:f6:25:e3:95:2f:bb:f9:14:47:6b:
                    47:ee:97:71:5b:19:bf:74:03:67:65:f8:ab:a8:fe:
                    20:4a:f3:2f:1b:5e:e0:50:e4:66:9f:20:6a:e5:ce:
                    f6:0e:e8:8c:4f:6b:aa:69:d7:cd:68:ab:0a:a8:f7:
                    f1:7d:b7:3b:bb:c0:c7:ee:4a:9e:89:06:2a:bc:f7:
                    c5:cf:8f:63:e4:e0:12:2a:60:25:7d:e9:b3:3e:14:
                    1f:84:92:2d:5c:0a:c1:8c:40:ae:bc:d1:c8:8c:34:
                    43:35:bb:53:a7:6f:fc:71:16:3b:65:db:0d:3e:40:
                    f3:83:ce:1f:bf:d8:88:b1:1a:72:ea:a8:12:c1:73:
                    e0:0f:15:4a:64:d9:35:b1:0f:f2:03:e1:a4:01:1f:
                    99:50:be:77:cb:13:ce:52:ee:2c:46:12:05:19:48:
                    b4:2c:bb:aa:c9:45:52:92:29:6b:49:71:da:24:b0:
                    a8:f3:b0:1d:4f:f9:b4:64:1c:43:ed:1a:97:d2:4e:
                    f9:0d:81:c8:52:4a:3d:51:98:29:07:33:ea:c6:de:
                    9a:9c:ba:5c:41:19:9e:6f:51:83:e9:c0:ca:29:a8:
                    e7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                41:51:66:5D:0E:B8:4A:B3:09:2E:37:66:EA:6E:A6:11:55:04:1F:3D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/1/4151665D0EB84AB3092E3766EA6EA61155041F3D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.84.0/22
                IPv6:
                  2804:7950::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271298

    Signature Algorithm: sha256WithRSAEncryption
         da:6b:6c:7a:f7:a4:fe:24:19:56:ae:72:cf:15:14:2f:38:62:
         d2:f4:77:a2:ad:74:aa:16:b0:27:0a:3e:40:2b:94:38:bb:62:
         93:94:64:dc:a4:a4:ac:68:0f:ea:25:99:06:ad:0e:ce:df:2d:
         7a:21:2f:09:be:7a:7e:b4:3d:00:7b:fa:a9:8e:54:1b:79:10:
         a4:90:df:4c:02:f8:c4:a1:c1:dc:c4:9d:eb:63:90:58:1c:f9:
         d2:6c:4b:b6:c4:0d:13:71:fe:1d:dc:86:ed:f8:20:e3:1a:84:
         e9:7c:37:f9:87:b9:57:56:11:df:c4:24:6c:92:a0:b5:e9:c6:
         c5:cb:7a:57:ad:57:1d:d2:9e:dc:05:2c:fb:5b:1e:e9:77:4d:
         af:73:18:e3:c1:cc:52:e8:cb:79:c8:41:18:d0:23:b7:9f:5f:
         22:2e:25:a7:ec:14:04:00:1b:5c:1f:87:00:25:e7:f6:ac:5c:
         39:2e:28:22:c7:6c:f9:04:ab:b8:47:6f:e7:a8:0c:f1:c6:17:
         48:bc:3b:2c:43:b6:91:fa:da:4e:ee:df:ce:e3:ec:60:77:3e:
         1e:7e:66:8f:4c:4f:78:31:bc:2c:5b:f7:e7:3b:3a:0b:94:98:
         a3:7a:c1:53:41:aa:d2:b1:4d:ac:a2:a1:bb:9c:fa:e2:44:08:
         6b:3f:51:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:43:28 2024 by rpki-client on console-fra.rpki-client.org