Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/663B71B179F251E89D3BDF35B60E74315CF449F9.cer
File:                     663B71B179F251E89D3BDF35B60E74315CF449F9.cer (raw, json)
Hash identifier:          mR6Y19h6I39ZDpK+xQEq1nLbGAGd2a5WHngxBn28Dck=
Subject key identifier:   66:3B:71:B1:79:F2:51:E8:9D:3B:DF:35:B6:0E:74:31:5C:F4:49:F9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       072E0CC0AE62794E38E274EAB9FF5FB5B06E0FE9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9kzpmRFnWUbt1crj8dovAQfaoMowHfReoDNpkvPVLtwi/0/663B71B179F251E89D3BDF35B60E74315CF449F9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9kzpmRFnWUbt1crj8dovAQfaoMowHfReoDNpkvPVLtwi/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 13 Apr 2024 16:07:56 +0000
Certificate not after:    Sat 12 Apr 2025 16:12:56 +0000
Subordinate resources:    AS: 263990
                          IP: 143.0.16.0/22
                          IP: 2804:28f8::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 02:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:2e:0c:c0:ae:62:79:4e:38:e2:74:ea:b9:ff:5f:b5:b0:6e:0f:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 13 16:07:56 2024 GMT
            Not After : Apr 12 16:12:56 2025 GMT
        Subject: CN=663B71B179F251E89D3BDF35B60E74315CF449F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e0:79:df:bf:09:27:1d:86:c6:ea:5e:8d:08:
                    88:4b:1f:0c:37:63:7c:31:0d:b8:27:54:96:33:d3:
                    3c:79:24:9a:a9:cd:f8:9b:18:69:0d:37:37:0e:48:
                    fb:4e:2f:32:25:96:e4:27:5c:96:cd:e0:b4:9b:df:
                    0e:15:26:dc:2c:40:b4:c8:00:71:c1:da:a2:f4:c0:
                    ab:77:3c:db:9f:a3:c2:a8:57:90:92:9e:6a:0f:a3:
                    b0:a4:d5:64:a6:2a:74:78:9b:a8:b7:5f:3f:2c:30:
                    7b:d7:26:4e:2e:bc:38:9d:50:46:2e:df:c2:06:e5:
                    32:88:2e:81:9c:d9:8b:e2:1f:90:eb:1e:96:60:b1:
                    c7:24:24:f7:41:f9:a5:ea:9f:8d:2e:e6:be:46:d6:
                    0f:33:ec:f9:ed:8e:df:ac:c9:3c:0b:29:06:48:8b:
                    14:a4:53:39:d8:de:7d:cd:95:1e:ea:80:cb:8f:26:
                    ce:7f:a0:67:dc:f9:29:af:80:2d:d7:dc:32:aa:7c:
                    18:8e:b2:58:06:1d:c6:f9:cb:7f:51:fa:00:7c:33:
                    eb:a5:aa:f8:33:c1:16:02:a0:7a:42:c6:31:77:6e:
                    87:b1:54:63:51:b4:e4:2a:46:ff:43:92:ef:05:e0:
                    aa:16:1e:93:0c:d2:c2:4b:4f:b9:03:f1:a0:eb:00:
                    36:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                66:3B:71:B1:79:F2:51:E8:9D:3B:DF:35:B6:0E:74:31:5C:F4:49:F9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9kzpmRFnWUbt1crj8dovAQfaoMowHfReoDNpkvPVLtwi/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9kzpmRFnWUbt1crj8dovAQfaoMowHfReoDNpkvPVLtwi/0/663B71B179F251E89D3BDF35B60E74315CF449F9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.16.0/22
                IPv6:
                  2804:28f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263990

    Signature Algorithm: sha256WithRSAEncryption
         6c:30:2f:00:e6:90:42:15:96:7b:9e:97:5b:1f:d1:02:2b:7a:
         d0:54:56:c8:fd:89:af:8e:24:aa:de:4e:82:b0:51:d8:87:61:
         b3:38:be:ed:37:d3:4b:0f:01:0b:d9:6c:d0:3a:b3:2e:cc:32:
         f8:37:dd:13:3e:c8:bf:d0:53:5d:63:35:3c:10:9e:60:6d:16:
         13:9f:45:2f:db:01:10:dd:8e:ee:03:36:59:c6:12:62:ac:42:
         46:bc:ec:4e:ee:28:da:44:72:75:a4:2a:85:94:eb:c6:b2:3d:
         3b:f8:9b:0d:ef:b0:0a:18:a1:3a:9d:f1:62:31:00:9d:cb:47:
         18:6f:e8:8e:d7:fd:1a:17:39:49:fb:cb:82:2d:34:a2:26:4c:
         5d:dc:5d:1d:61:e5:ab:e6:25:5f:eb:49:2b:fa:8e:9c:d0:42:
         62:44:bb:29:8d:1a:ca:bd:57:50:4c:19:0c:18:64:aa:29:68:
         81:7b:4d:a6:82:02:de:b8:42:1b:8e:58:31:15:04:fc:85:af:
         c5:7a:78:6e:6f:d5:9e:bd:9e:79:92:56:02:a5:7a:1e:a5:95:
         43:d6:74:c6:d6:d5:05:fe:b2:4c:26:ba:a0:cf:10:20:01:0d:
         60:83:9f:75:75:d1:24:9e:8e:06:a8:01:84:34:cf:46:28:f2:
         97:cb:5b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:06:35 2024 by rpki-client on console-fra.rpki-client.org