Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB.cer
File:                     51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB.cer (raw, json)
Hash identifier:          5J+yN815O5Izmg1g9TDbR4uuFLhHN4a8VB2CNmUmsFg=
Subject key identifier:   51:D6:DB:A5:73:9A:66:5B:6F:DC:BD:4D:32:66:D3:E7:4D:8D:D8:AB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       FF3603AD3FED66267861F8864F5F9F39E60012
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/1/51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 22:06:18 +0000
Certificate not after:    Thu 03 Apr 2025 22:11:18 +0000
Subordinate resources:    AS: 267511
                          IP: 201.182.100.0/22
                          IP: 2804:4298::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ff:36:03:ad:3f:ed:66:26:78:61:f8:86:4f:5f:9f:39:e6:00:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 22:06:18 2024 GMT
            Not After : Apr  3 22:11:18 2025 GMT
        Subject: CN=51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e4:89:dc:20:7f:48:f2:67:78:24:be:ad:7e:
                    e3:3b:60:24:68:90:1b:94:0d:ec:07:74:4a:fa:6b:
                    fd:9f:62:43:02:12:52:78:96:74:ec:20:50:a5:55:
                    f9:dc:71:48:47:e1:8a:ac:aa:54:a8:f7:6e:72:15:
                    df:30:1d:54:28:1e:bd:80:a4:19:a4:f5:05:08:34:
                    8c:d6:c1:84:3f:a8:19:0b:2e:0f:a0:d2:0e:13:6a:
                    5a:33:f5:c2:74:27:a2:4b:5e:fa:2c:30:cc:7d:12:
                    cf:14:40:34:4d:88:4f:b5:07:3f:d5:0a:af:68:03:
                    5a:95:c4:a2:ef:41:d0:18:83:1a:c4:c7:c9:d7:7b:
                    70:70:84:6b:2c:f4:c4:26:eb:c2:08:df:45:7a:cf:
                    9a:89:ea:21:7b:ab:2c:6d:2b:ac:01:26:04:2f:9c:
                    81:a0:74:c3:44:ff:c5:2b:72:71:85:20:fb:34:b1:
                    62:a5:15:a6:69:d2:fe:cd:79:fa:ae:56:32:0d:9e:
                    e6:0c:85:ec:77:05:77:54:f2:b5:07:4e:c2:4a:99:
                    31:1b:ab:3f:63:6e:4f:44:b1:5d:16:65:49:39:13:
                    8d:de:73:5d:e8:a1:12:87:4a:e3:a6:6a:9b:c6:9f:
                    f3:ce:5e:88:e6:65:a5:ad:6f:6c:a8:0b:91:08:ad:
                    c8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                51:D6:DB:A5:73:9A:66:5B:6F:DC:BD:4D:32:66:D3:E7:4D:8D:D8:AB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/1/51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.100.0/22
                IPv6:
                  2804:4298::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267511

    Signature Algorithm: sha256WithRSAEncryption
         7b:d2:08:8a:c3:28:86:97:39:39:e6:f5:74:46:79:1c:e6:44:
         57:f8:b2:54:2d:40:c7:97:1d:e6:40:70:08:69:5b:74:99:8c:
         15:92:25:06:12:3e:dd:0f:af:5a:60:9a:8a:f6:a2:d4:78:30:
         fd:03:7f:e4:6a:7d:f5:8a:72:8a:6b:c4:da:a7:39:3c:be:7b:
         f3:c4:c4:f9:f6:db:bc:3e:c7:98:0a:49:1c:bc:71:9a:10:3f:
         d8:c5:e9:03:27:81:be:dc:13:13:ec:0c:07:64:e7:36:58:de:
         4f:b9:a3:86:19:1b:fe:5e:f9:3e:0c:48:ac:6e:d8:0c:4f:ff:
         9f:66:bc:ed:0c:68:35:e1:9e:3c:f6:ac:8d:01:f8:2b:0a:be:
         db:ac:5b:59:f7:b4:65:5b:6f:41:3f:3c:82:b3:0a:69:10:40:
         e5:02:bb:34:89:ac:4c:5a:c0:2f:74:78:32:b4:48:24:d8:fa:
         9b:02:6f:18:77:46:7b:2b:c8:f3:eb:1e:77:f5:94:2e:41:92:
         f9:78:68:ad:4f:a5:09:e5:f0:dd:fd:6f:ff:7c:a9:db:8d:0f:
         a0:3a:9a:7e:22:a9:1c:c8:10:9e:c9:ce:f4:1c:25:91:01:10:
         83:2f:7a:2d:82:fe:18:a8:c3:36:0b:a1:15:09:b2:f2:57:1d:
         62:ec:d5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:40 2024 by rpki-client on console-fra.rpki-client.org