Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6B3906AE2C9E3B963B29460ABD7185E79BB96640.cer
File:                     6B3906AE2C9E3B963B29460ABD7185E79BB96640.cer (raw, json)
Hash identifier:          qJa2HkRDo1b1C2ZzGmiz8pjIaknKJ3ABsPx5G+hsdFY=
Subject key identifier:   6B:39:06:AE:2C:9E:3B:96:3B:29:46:0A:BD:71:85:E7:9B:B9:66:40
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6CFDFBAC041F82D901B5987F03B133C614025E25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AX7UD3Y8rRAG7dzG47CaHiUShNgBfKf2EH24iXL3v3bc/1/6B3906AE2C9E3B963B29460ABD7185E79BB96640.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AX7UD3Y8rRAG7dzG47CaHiUShNgBfKf2EH24iXL3v3bc/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Apr 2024 04:20:23 +0000
Certificate not after:    Fri 04 Apr 2025 04:25:23 +0000
Subordinate resources:    AS: 266451
                          IP: 170.83.24.0/22
                          IP: 2804:3808::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 02:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:fd:fb:ac:04:1f:82:d9:01:b5:98:7f:03:b1:33:c6:14:02:5e:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  5 04:20:23 2024 GMT
            Not After : Apr  4 04:25:23 2025 GMT
        Subject: CN=6B3906AE2C9E3B963B29460ABD7185E79BB96640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:67:5d:41:f4:9c:2d:ab:a6:8e:29:f6:03:1b:
                    97:21:da:69:b3:97:81:f7:ae:a5:32:f9:8b:4d:ec:
                    bd:bd:b0:ff:a4:95:98:39:55:ea:7c:75:da:9f:7b:
                    78:6e:23:9d:b6:f2:eb:8a:bb:41:25:55:e7:bb:9f:
                    89:82:0f:a2:b7:ff:5c:18:ed:11:c1:b6:77:e8:86:
                    24:28:28:21:f4:63:83:f2:8d:31:89:79:3d:d1:01:
                    aa:b3:33:10:2b:db:bf:cf:33:60:1d:fd:2f:48:42:
                    f0:69:9b:de:8c:f8:70:a5:bd:a4:32:f8:c3:d7:4e:
                    12:70:7d:fb:5f:b3:9f:00:7b:d1:2e:39:4f:15:6b:
                    80:90:76:cf:67:df:c8:a9:1d:8b:7b:8b:ac:48:12:
                    f8:c5:cb:d4:1e:1b:1c:f2:27:97:ad:80:ef:66:f9:
                    d0:c5:aa:7b:69:ca:24:95:f1:4e:7b:46:b4:ae:56:
                    a9:28:fb:2e:ec:c6:66:54:fb:ea:45:ea:c3:e0:c5:
                    ce:25:21:80:65:fb:5c:28:a2:a4:52:e7:37:cc:0f:
                    2c:3f:0b:ec:18:57:14:de:83:65:35:c6:fe:06:b6:
                    75:50:d0:b9:43:4d:ee:b3:01:a9:cc:35:39:b8:dc:
                    9b:25:5e:ee:77:88:5b:ab:2d:49:da:b4:19:55:2c:
                    fe:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6B:39:06:AE:2C:9E:3B:96:3B:29:46:0A:BD:71:85:E7:9B:B9:66:40
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AX7UD3Y8rRAG7dzG47CaHiUShNgBfKf2EH24iXL3v3bc/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AX7UD3Y8rRAG7dzG47CaHiUShNgBfKf2EH24iXL3v3bc/1/6B3906AE2C9E3B963B29460ABD7185E79BB96640.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.24.0/22
                IPv6:
                  2804:3808::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266451

    Signature Algorithm: sha256WithRSAEncryption
         84:aa:c1:c2:4d:ae:75:45:8e:3a:e4:90:26:28:41:cb:2d:bc:
         b1:52:ba:fd:e7:e1:32:8b:b6:66:dd:5e:6b:76:0c:08:bf:49:
         ca:cb:10:2a:de:6b:46:68:cb:3c:c2:47:29:bd:d7:a0:c8:9a:
         90:e8:51:55:1e:3d:8c:19:71:3f:1a:72:3e:7e:dd:7a:e6:2c:
         21:18:8f:19:82:bc:79:d8:b9:f8:4f:9a:4e:02:32:21:5c:06:
         5f:4a:0a:5f:f1:c2:65:f0:17:e5:d2:2b:4f:9e:06:e5:a1:f3:
         4d:0f:0d:14:b9:e6:23:01:ef:d5:fe:56:70:96:93:e5:bf:c3:
         42:32:d5:79:c0:57:19:54:50:29:40:3a:dd:fe:d4:fc:b7:52:
         67:50:8a:f0:52:45:05:eb:30:14:2f:28:d0:38:15:b2:a8:a6:
         5e:d5:f6:8c:3b:08:25:bc:90:bf:ec:70:20:7c:9e:58:d3:94:
         b4:14:5b:10:60:16:1f:c8:3d:1f:35:78:b4:9e:ae:9f:ed:fe:
         e8:03:72:9c:86:24:e9:e0:df:59:c2:37:01:b4:2c:d5:57:e6:
         df:f3:5f:ab:c0:a1:fa:bb:fe:94:e0:89:e4:9c:6a:50:b4:38:
         79:3c:31:b0:a4:d4:bd:ea:7f:91:4b:8b:b0:33:b6:fb:77:48:
         ca:aa:b5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:06:35 2024 by rpki-client on console-fra.rpki-client.org