Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer
File:                     4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer (raw, json)
Hash identifier:          29Gc7b7f76OnDdWL48mdFFEbIT04O3Bpqt3CPryr6sE=
Subject key identifier:   4D:A2:7E:B8:34:A2:B8:3F:0B:2A:C8:C0:4D:FF:AE:96:83:81:97:3A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6FB1ECF875FDEA1B39225C182F45212BB0E97D1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:25:10 +0000
Certificate not after:    Wed 02 Apr 2025 18:30:10 +0000
Subordinate resources:    AS: 270765
                          IP: 186.194.164.0/22
                          IP: 2804:7114::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 23:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:b1:ec:f8:75:fd:ea:1b:39:22:5c:18:2f:45:21:2b:b0:e9:7d:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:25:10 2024 GMT
            Not After : Apr  2 18:30:10 2025 GMT
        Subject: CN=4DA27EB834A2B83F0B2AC8C04DFFAE968381973A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4d:cf:f3:2d:c4:04:9f:84:0b:98:3c:5c:b9:
                    dd:5c:8c:5a:4e:31:2f:29:eb:23:11:06:31:60:66:
                    de:e5:6f:bb:e2:21:e2:93:13:03:6a:ae:95:1c:97:
                    a7:6e:11:0a:ce:51:79:91:e1:66:59:da:c9:44:d8:
                    d6:64:4e:30:12:39:dc:95:db:25:42:76:59:66:83:
                    e3:17:6a:d6:d4:48:29:53:d1:88:b0:20:8e:1c:18:
                    58:b5:8e:c1:31:5a:18:a8:f9:5d:47:53:78:5d:25:
                    25:66:10:3c:de:f1:51:56:88:72:20:10:27:42:ae:
                    b0:f0:cb:52:92:18:e4:c8:11:f6:43:28:df:ff:4c:
                    62:3c:00:41:d5:b8:a6:d1:c6:04:e2:c7:1a:4a:9b:
                    59:93:c6:4b:04:c8:75:d9:b8:ce:18:a1:76:5e:0b:
                    a9:a0:93:0b:95:01:a9:da:e0:9b:96:4c:be:da:3b:
                    9b:6a:95:f8:f2:7e:bf:1e:b1:1a:db:8a:bb:3b:c7:
                    1e:c7:19:c3:ee:a8:9a:f0:3f:34:a4:ff:ea:01:cc:
                    46:0f:f9:68:d0:a4:2c:ef:51:39:34:03:78:8b:df:
                    54:93:d4:c3:b4:9c:1a:69:7b:a8:68:19:8c:a1:5a:
                    a7:5a:8e:a8:07:39:e1:a2:07:c0:71:f2:eb:d6:b6:
                    c9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4D:A2:7E:B8:34:A2:B8:3F:0B:2A:C8:C0:4D:FF:AE:96:83:81:97:3A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.164.0/22
                IPv6:
                  2804:7114::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270765

    Signature Algorithm: sha256WithRSAEncryption
         7c:18:e1:22:a3:f7:a1:6e:ca:ab:47:cc:fd:0b:11:d1:92:56:
         b3:2c:f9:15:91:69:48:7f:5b:40:aa:15:22:88:2b:02:23:ef:
         ab:2e:c2:99:e5:d1:93:ed:7b:d1:80:08:9d:d7:76:62:f2:7e:
         2b:a2:d2:e7:0a:05:8f:de:c7:11:bc:1d:16:8e:e5:2a:ac:52:
         f3:1c:e0:ee:81:ab:e6:7b:9a:e9:26:8b:a9:92:e9:84:36:be:
         91:e7:80:b4:89:f4:9e:cf:e8:cf:f2:f6:6e:c0:77:ca:70:b9:
         03:cc:f5:9f:aa:d3:39:e1:29:9d:93:52:9f:8f:b6:b1:22:96:
         a4:ca:35:5d:a5:63:49:8d:15:8a:b2:ba:b8:d4:49:39:1d:b7:
         5d:27:b3:9a:26:68:83:70:50:f2:ba:e2:09:8e:18:0c:94:ab:
         cd:20:e6:99:24:34:dc:74:16:be:c1:ad:f9:be:9d:1d:23:7d:
         6a:d8:1b:fd:b9:64:1b:dc:5a:9d:9f:4f:e6:7b:c3:fd:68:8c:
         c5:f7:05:02:11:9b:33:a4:0f:a7:1d:cf:3b:1f:8a:7b:0d:96:
         6d:16:bd:bc:37:48:df:06:10:82:04:ba:3c:b7:03:09:47:f1:
         a2:87:bc:85:30:46:ce:ff:27:93:c7:54:da:ae:e5:5a:b2:80:
         f0:2f:4d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 00:29:11 2024 by rpki-client on console-ams.rpki-client.org