Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6B28FAFEC514EC712BA58E039BC893491ECD0FD1.cer
File:                     6B28FAFEC514EC712BA58E039BC893491ECD0FD1.cer (raw, json)
Hash identifier:          MObQPrZbMEbPXcl/5eiT7Y8LXdksuSQ8NjnCmkKpMVY=
Subject key identifier:   6B:28:FA:FE:C5:14:EC:71:2B:A5:8E:03:9B:C8:93:49:1E:CD:0F:D1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5F89CA230C93E165C1A7B8E40CB6599722EDC339
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/1/6B28FAFEC514EC712BA58E039BC893491ECD0FD1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:26:20 +0000
Certificate not after:    Wed 02 Apr 2025 18:31:20 +0000
Subordinate resources:    AS: 264426
                          IP: 131.221.188.0/22
                          IP: 143.0.88.0/22
                          IP: 170.0.148.0/22
                          IP: 170.239.116.0/22
                          IP: 2804:1e64::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 04:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:89:ca:23:0c:93:e1:65:c1:a7:b8:e4:0c:b6:59:97:22:ed:c3:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:26:20 2024 GMT
            Not After : Apr  2 18:31:20 2025 GMT
        Subject: CN=6B28FAFEC514EC712BA58E039BC893491ECD0FD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:46:d0:ff:be:a4:38:44:19:b4:34:06:d0:8b:
                    8b:41:85:09:d5:e7:52:da:35:d1:f8:51:9c:d7:90:
                    9b:a8:52:05:5f:c0:38:bd:b8:fb:f4:11:87:66:5a:
                    e5:2f:c0:d6:04:ed:08:f8:6d:7e:05:59:be:31:0d:
                    ce:ec:01:bf:77:80:f1:75:43:65:a1:45:aa:92:d9:
                    dc:d1:73:52:5e:7b:cd:8c:95:e8:b8:5b:9e:9e:56:
                    12:a8:67:27:9e:37:0b:7f:ee:47:4e:73:06:2d:03:
                    50:54:c6:ec:d3:ae:bc:65:72:97:7c:89:e6:e4:69:
                    28:38:72:72:3b:70:cd:dd:1b:e1:04:f0:2f:20:0a:
                    da:f3:19:32:99:b5:6d:f7:d5:cf:ba:c4:7c:f1:b4:
                    ca:25:5e:49:73:75:cc:00:f8:b0:96:e2:c7:27:5e:
                    6d:f3:74:71:b4:0b:30:52:0c:93:6e:a3:cf:0e:c9:
                    c6:b8:34:2d:bb:ea:2b:90:0e:34:5e:55:0a:1f:91:
                    b5:02:09:61:ca:a4:87:25:c9:1a:43:da:38:a2:58:
                    10:3e:9d:55:f4:19:23:cd:1b:2f:5c:8e:07:93:50:
                    01:a4:b1:fc:14:2d:d8:a9:0c:25:5c:07:46:98:9f:
                    8f:9d:9a:90:6a:1a:af:b7:3e:58:7e:99:2e:3a:1d:
                    2e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6B:28:FA:FE:C5:14:EC:71:2B:A5:8E:03:9B:C8:93:49:1E:CD:0F:D1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/1/6B28FAFEC514EC712BA58E039BC893491ECD0FD1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.188.0/22
                  143.0.88.0/22
                  170.0.148.0/22
                  170.239.116.0/22
                IPv6:
                  2804:1e64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264426

    Signature Algorithm: sha256WithRSAEncryption
         10:9f:9c:5e:7e:35:06:0e:b4:f6:9e:66:3c:1f:8f:39:49:a0:
         26:59:7e:c3:6a:f2:c0:cf:a4:0d:92:e6:fa:2a:85:d9:77:00:
         9b:19:1e:4b:0d:ee:98:10:a9:53:d8:d6:c3:85:f7:a2:59:d9:
         10:05:53:01:0c:db:6d:1d:5a:b7:1c:94:eb:62:b9:73:09:f5:
         e6:07:f2:81:c2:e0:13:ab:0b:34:6e:c4:9d:13:4d:f3:5d:27:
         d1:12:fe:32:aa:0a:74:f3:59:a8:c5:0f:0c:4c:e7:c2:b9:f5:
         2e:3b:0b:35:2b:21:11:c7:87:3d:62:86:ae:77:29:ac:3a:46:
         3b:7a:d8:55:71:72:ec:30:07:1c:1d:48:29:d8:74:5a:0a:b1:
         46:b7:ed:d7:64:50:26:e4:14:05:35:ab:bf:06:ac:5a:0e:ac:
         cf:9a:fe:24:7a:60:12:ad:e2:35:ab:c6:eb:b1:0e:93:e5:b3:
         d0:ef:62:2f:67:02:ee:d2:72:8c:ef:1d:8d:70:2b:6f:ff:6d:
         57:a0:dc:13:af:a9:90:0a:7d:25:77:68:e6:23:75:11:e6:db:
         7b:50:82:93:07:92:e1:0d:f6:5b:37:40:c9:18:f2:f4:7e:13:
         0a:cb:6e:59:43:70:da:5b:d2:cd:a3:73:69:8a:87:f2:fd:f3:
         52:82:6c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:36:36 2024 by rpki-client on console-ams.rpki-client.org