Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/733D0B0FDDA45D7161D5CECDC0FB7C0182B0E539.cer
File:                     733D0B0FDDA45D7161D5CECDC0FB7C0182B0E539.cer (raw, json)
Hash identifier:          rZca4pCvBEhWyhRSb7cm6XLN/eAzjnBlnGDu8+WOMTc=
Subject key identifier:   73:3D:0B:0F:DD:A4:5D:71:61:D5:CE:CD:C0:FB:7C:01:82:B0:E5:39
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       65B6AFEABE49B6BD34D1FD4E21A6E8E12482398D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/1/733D0B0FDDA45D7161D5CECDC0FB7C0182B0E539.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 09:01:29 +0000
Certificate not after:    Thu 03 Apr 2025 09:06:29 +0000
Subordinate resources:    AS: 272753
                          IP: 187.109.112.0/22
                          IP: 2804:8824::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 01:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:b6:af:ea:be:49:b6:bd:34:d1:fd:4e:21:a6:e8:e1:24:82:39:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 09:01:29 2024 GMT
            Not After : Apr  3 09:06:29 2025 GMT
        Subject: CN=733D0B0FDDA45D7161D5CECDC0FB7C0182B0E539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ff:a7:b6:dc:d2:b7:0a:a7:98:8d:2e:5b:2a:
                    09:f5:6f:9a:b9:aa:9a:27:9b:28:c8:d5:f1:e5:69:
                    1a:64:04:f1:6b:aa:b0:bd:7c:ea:ec:30:f1:47:28:
                    c1:d6:92:ba:87:9f:97:56:26:f6:82:01:2c:50:c9:
                    df:4a:b5:94:d0:ff:82:bd:d7:06:4b:69:9d:43:5d:
                    79:11:d0:9a:a9:02:ce:bd:71:de:3f:bb:f0:f2:f9:
                    de:cf:81:ea:1a:3c:f6:2a:e4:7c:b6:a9:b6:ba:4b:
                    33:d6:2a:35:4c:28:cd:09:3f:6f:07:81:cf:4c:b8:
                    29:15:0f:78:73:5e:a6:7d:c9:2e:05:41:e9:81:89:
                    f1:79:d8:d7:20:18:10:2b:15:af:46:f8:70:41:98:
                    45:67:7d:50:16:46:64:63:b4:98:1b:61:72:8d:98:
                    25:4e:19:38:28:5f:74:53:57:4b:c7:2f:ac:e3:94:
                    20:ad:5d:ce:73:35:d7:ef:80:5f:4f:d1:66:33:33:
                    c9:52:cb:1f:0e:08:9e:49:8a:a5:ce:5c:da:5d:60:
                    ce:38:78:2d:a3:f4:70:eb:c3:2f:94:04:32:08:4d:
                    de:e6:58:bb:09:40:2e:14:00:5d:0a:7b:48:66:48:
                    f2:4f:28:7b:94:aa:be:7e:84:20:51:16:8b:76:fa:
                    95:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                73:3D:0B:0F:DD:A4:5D:71:61:D5:CE:CD:C0:FB:7C:01:82:B0:E5:39
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/1/733D0B0FDDA45D7161D5CECDC0FB7C0182B0E539.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.112.0/22
                IPv6:
                  2804:8824::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272753

    Signature Algorithm: sha256WithRSAEncryption
         2e:71:c0:10:8f:ad:f7:6e:4f:09:51:0c:f6:db:a2:ce:83:29:
         44:c4:23:c2:a6:2f:ed:60:be:cb:d5:b8:ac:8d:ca:46:49:92:
         ea:07:b7:9c:26:42:3f:a1:d0:87:87:43:0f:d5:4b:2c:0d:7c:
         5c:41:53:0c:4a:fd:25:16:cc:e7:e5:e8:66:ec:b8:9d:d4:50:
         ae:85:f9:ef:00:ff:89:12:9b:be:6e:a3:a2:aa:d5:e2:c7:c0:
         49:de:ad:0c:c5:ee:cd:4e:ca:72:e6:d0:9f:33:17:7b:82:af:
         2b:2d:12:c4:c9:a2:c4:b7:93:3e:20:23:99:ab:d4:0b:1b:c8:
         0a:fc:97:96:88:3e:c3:bd:05:bf:4f:cf:e8:4f:44:14:03:4e:
         5b:a7:c8:96:7d:24:74:69:28:65:41:d8:6b:64:65:fc:00:f8:
         45:21:89:70:93:57:05:7d:ae:0c:99:6b:d0:6f:69:7c:a8:ab:
         81:fe:bf:37:6e:1b:3f:f3:e8:b4:10:40:a8:dc:99:de:2d:42:
         ca:de:13:08:bd:1d:f9:4c:15:40:33:1b:1e:29:53:14:d8:5c:
         3f:e2:ec:fd:69:c3:87:ef:c7:85:bf:7e:ae:b4:a2:86:8c:fb:
         bb:5c:9f:33:11:24:68:d9:b7:51:ff:1a:38:e9:f4:b0:5e:b2:
         f4:a7:6c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 00:26:57 2024 by rpki-client on console-ams.rpki-client.org