Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/591A5E28538FC2E6A42ED311941B9D128D78D596.cer
File:                     591A5E28538FC2E6A42ED311941B9D128D78D596.cer (raw, json)
Hash identifier:          2dbVYyTGdV3bSqHXE31MVj6nRscYeyxMWJHQheuCS1s=
Subject key identifier:   59:1A:5E:28:53:8F:C2:E6:A4:2E:D3:11:94:1B:9D:12:8D:78:D5:96
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6BB289CAE42BA4CE0A22A10FC909CAEC4BBD5654
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/1/591A5E28538FC2E6A42ED311941B9D128D78D596.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 18:14:04 +0000
Certificate not after:    Thu 03 Apr 2025 18:19:04 +0000
Subordinate resources:    AS: 14346
                          IP: 200.196.192.0/19
                          IP: 2801:80:f0::/48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b2:89:ca:e4:2b:a4:ce:0a:22:a1:0f:c9:09:ca:ec:4b:bd:56:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 18:14:04 2024 GMT
            Not After : Apr  3 18:19:04 2025 GMT
        Subject: CN=591A5E28538FC2E6A42ED311941B9D128D78D596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:48:2d:dd:b6:10:38:d0:e8:24:aa:65:33:6a:
                    1e:6a:c2:61:27:97:58:41:5e:b5:8c:9f:46:69:d9:
                    06:30:a0:69:79:d8:f1:db:2a:08:d6:3b:2e:7b:56:
                    33:3f:6b:3f:6b:40:50:b3:fa:36:06:b7:63:96:03:
                    7d:3c:c1:02:c5:e5:2e:c1:3c:a6:f1:69:b6:bd:e2:
                    9f:9f:a4:c3:1c:cb:c8:1d:01:cc:78:34:ed:6f:52:
                    e1:7f:fd:19:a9:af:db:e8:b1:84:b1:49:9d:f0:78:
                    33:12:2c:06:04:87:e7:4c:43:4c:10:b2:74:60:6b:
                    42:d2:42:06:e0:2c:87:98:68:c5:e9:46:d7:40:5b:
                    be:fa:ba:52:18:be:a6:af:1a:ae:b6:32:34:e5:70:
                    a7:58:6c:3f:9f:d0:ac:8c:79:88:16:db:05:25:46:
                    ed:8b:69:2d:df:3f:31:13:1c:88:2d:d9:55:a4:a0:
                    1a:24:84:65:3e:88:f2:7a:08:97:3b:05:9d:02:ac:
                    07:81:6d:89:1e:29:70:c3:65:73:50:8f:55:c7:37:
                    d9:65:ca:87:8a:da:81:e6:6c:e5:8a:99:0b:d8:71:
                    69:c6:b5:11:62:91:c8:38:1a:61:d1:74:0c:90:7f:
                    c0:8f:2d:87:2f:d0:98:ca:8e:13:1c:5e:ff:08:7d:
                    ee:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                59:1A:5E:28:53:8F:C2:E6:A4:2E:D3:11:94:1B:9D:12:8D:78:D5:96
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/1/591A5E28538FC2E6A42ED311941B9D128D78D596.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.192.0/19
                IPv6:
                  2801:80:f0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14346

    Signature Algorithm: sha256WithRSAEncryption
         3e:2f:9b:3b:7e:ac:e8:0c:c1:6f:a5:7c:d8:3e:ef:bc:34:08:
         d1:ad:3c:34:c1:fa:f2:55:9d:72:02:68:21:d4:80:3d:30:6e:
         74:8c:58:04:01:46:24:3d:7f:c7:d6:1f:82:c8:3b:18:94:2a:
         25:45:3a:ac:a7:31:63:6e:14:d9:e6:2c:70:66:b5:30:09:37:
         df:69:fe:1f:c7:2d:bd:4a:12:8f:1c:0e:89:47:e8:49:75:bd:
         d4:91:a0:27:9c:f8:4d:79:64:f6:40:10:0b:21:44:86:19:c1:
         27:35:97:8a:2d:65:26:81:45:a2:82:67:c2:f8:e9:5b:cb:21:
         f8:29:60:9c:a5:05:6c:0b:9e:dc:93:bd:e9:73:91:f7:4a:03:
         84:c0:1a:ee:cd:68:1d:a2:9a:7f:18:74:5c:95:c3:5c:fc:15:
         4e:56:46:ef:7e:da:9d:23:23:6e:80:3e:7d:29:b7:85:c7:5b:
         0e:5e:0f:9d:73:38:71:3e:bd:39:1e:37:e5:44:0b:53:f6:c0:
         5a:33:de:2b:ff:04:15:8d:45:c6:a8:0b:fb:48:88:2c:1a:d1:
         5b:74:cd:ac:c6:2d:63:c9:c2:d6:b2:13:cd:ac:cb:3e:46:c6:
         fd:cb:96:65:5c:28:9b:df:93:a3:31:5d:f7:cb:07:94:8d:9e:
         76:43:bf:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:28 2024 by rpki-client on console-fra.rpki-client.org