Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7B3D67B8BCF86EAB9978725F19C0828CCC57B6C9.cer
File:                     7B3D67B8BCF86EAB9978725F19C0828CCC57B6C9.cer (raw, json)
Hash identifier:          r49XmpiCIRgYAPoe+Ycx620oo11fXDd3YijFDm1L7Dw=
Subject key identifier:   7B:3D:67:B8:BC:F8:6E:AB:99:78:72:5F:19:C0:82:8C:CC:57:B6:C9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       25FF1E52C39134B29A1F40D28822E7296BC0809D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/1/7B3D67B8BCF86EAB9978725F19C0828CCC57B6C9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 00:14:59 +0000
Certificate not after:    Thu 03 Apr 2025 00:19:59 +0000
Subordinate resources:    AS: 264130
                          IP: 138.97.60.0/22
                          IP: 2804:22e8::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 01:38:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ff:1e:52:c3:91:34:b2:9a:1f:40:d2:88:22:e7:29:6b:c0:80:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 00:14:59 2024 GMT
            Not After : Apr  3 00:19:59 2025 GMT
        Subject: CN=7B3D67B8BCF86EAB9978725F19C0828CCC57B6C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:18:17:70:12:4d:c9:8f:ea:f6:d2:04:aa:b9:
                    38:d1:87:6c:27:aa:5c:e9:5f:98:97:ff:ea:e5:a4:
                    6f:c3:4b:4c:0e:b9:94:c4:f7:d8:26:1f:33:6e:77:
                    63:4f:e4:72:9c:d4:70:cf:c7:73:b7:0e:6d:ae:d2:
                    ea:0e:6c:67:5e:a9:55:dd:5e:96:57:3d:98:fb:36:
                    05:e5:ab:53:bd:a3:5f:f4:f3:19:11:85:ff:90:b1:
                    c4:b4:7d:bb:ec:89:c5:e9:35:73:67:8f:25:d0:90:
                    15:b1:ef:55:1d:6d:d8:ad:85:1e:f7:7a:2d:23:ee:
                    db:e0:e4:b2:36:3a:ce:c9:90:c5:a4:59:09:d3:70:
                    d4:bd:f1:12:7a:cf:53:c5:f9:ed:ce:26:db:19:6f:
                    27:03:f5:6f:23:fe:92:75:dd:3d:e4:c6:55:19:e2:
                    7b:02:f7:af:aa:7f:93:52:f2:9b:5d:a4:23:44:c7:
                    16:47:28:84:70:e9:f6:6b:fa:f8:68:2c:bb:55:b3:
                    24:36:87:66:3f:64:a1:8d:da:4a:27:38:b1:a1:16:
                    47:cc:16:17:02:9c:76:b6:8b:a4:37:c5:5c:6a:95:
                    39:59:f5:9c:c2:5f:49:9f:a2:91:6c:49:13:e3:6f:
                    55:17:c7:cc:d0:9d:17:6e:5b:bd:92:21:58:c2:73:
                    7c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7B:3D:67:B8:BC:F8:6E:AB:99:78:72:5F:19:C0:82:8C:CC:57:B6:C9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/1/7B3D67B8BCF86EAB9978725F19C0828CCC57B6C9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.60.0/22
                IPv6:
                  2804:22e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264130

    Signature Algorithm: sha256WithRSAEncryption
         a0:05:b4:4f:66:62:b7:1b:46:e6:b0:1c:40:de:f5:85:d3:d2:
         fb:90:eb:bf:14:80:c6:b4:3d:3e:ce:a7:44:ef:f6:36:82:46:
         03:6a:88:39:8e:b3:9f:8e:cf:a9:dc:4f:5f:33:f6:29:41:72:
         66:c0:94:49:f2:d4:1e:98:c6:59:cb:d5:e5:69:14:57:5d:ce:
         9b:28:91:a0:ac:b9:40:4c:5e:38:8f:12:60:5a:7f:2b:b9:81:
         26:51:6d:e5:e3:1c:ce:7b:43:24:08:20:c7:b1:d9:6f:60:7e:
         1b:23:51:80:d4:47:85:ad:56:13:f6:a8:bb:5a:2a:ee:26:4b:
         18:94:8f:4c:e3:e3:5f:2f:f5:95:38:7d:0d:61:51:85:f0:56:
         78:2d:a6:c7:7c:f0:85:a3:2e:51:6b:6b:d0:c3:86:eb:75:0c:
         0d:1e:3e:0f:dd:56:d0:af:c0:9d:10:65:9b:59:18:88:fa:f8:
         53:e2:32:59:39:9b:b3:10:8f:1f:71:07:fa:99:5d:9a:58:f7:
         9d:4e:a5:38:c5:81:0f:4f:72:dd:40:10:14:56:16:ed:13:e9:
         88:ff:b8:7d:12:f6:9f:a8:10:d0:f3:fb:b2:9f:01:f4:c1:5c:
         02:77:85:be:c6:76:b2:b7:a4:fb:b2:27:d4:74:c4:d5:aa:33:
         01:06:e0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:01:05 2024 by rpki-client on console-ams.rpki-client.org