Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7B73D86CCA236AC54D0CFC60DDB7B3610BC98DC8.cer
File:                     7B73D86CCA236AC54D0CFC60DDB7B3610BC98DC8.cer (raw, json)
Hash identifier:          4sdN3UfIMFHD4hMoD+WvGiA01hKvouSKAqXi0IWRWTs=
Subject key identifier:   7B:73:D8:6C:CA:23:6A:C5:4D:0C:FC:60:DD:B7:B3:61:0B:C9:8D:C8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3B129E5A65C5083AA4CE5CC5411F81DC956A0C86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/1/7B73D86CCA236AC54D0CFC60DDB7B3610BC98DC8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 12 Apr 2024 13:58:35 +0000
Certificate not after:    Fri 11 Apr 2025 14:03:35 +0000
Subordinate resources:    AS: 263948
                          IP: 138.219.236.0/22
                          IP: 177.67.36.0/24
                          IP: 177.67.38.0/24
                          IP: 2804:2838::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 23:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:12:9e:5a:65:c5:08:3a:a4:ce:5c:c5:41:1f:81:dc:95:6a:0c:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 12 13:58:35 2024 GMT
            Not After : Apr 11 14:03:35 2025 GMT
        Subject: CN=7B73D86CCA236AC54D0CFC60DDB7B3610BC98DC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:69:25:3d:cc:49:7e:45:f5:58:63:f8:de:6f:
                    92:3d:7b:51:b3:9d:0d:84:c2:94:f6:76:db:65:64:
                    ef:be:9d:73:3e:82:0c:da:d3:b7:f5:78:d2:2d:44:
                    e9:1f:77:c7:c5:3b:71:49:3d:0a:81:1a:d3:19:6c:
                    e2:b7:37:c1:18:09:02:24:a2:61:39:c8:55:93:b6:
                    7f:72:6d:4d:e0:09:67:b6:22:58:f4:7e:27:95:19:
                    21:fb:57:fe:27:f0:34:b6:c9:3a:54:99:80:47:63:
                    a0:a1:0f:51:04:49:10:70:75:ea:ed:74:2f:80:de:
                    45:26:ac:d2:15:72:3a:a1:56:23:ad:6e:49:86:b5:
                    b2:ed:02:b1:f1:20:a3:18:4b:af:59:63:b7:cc:de:
                    75:c6:f2:3d:32:f1:0b:37:80:0e:c7:ab:d9:47:97:
                    5c:16:17:73:17:c4:74:c7:c0:11:20:c3:87:4e:00:
                    01:0e:c7:ba:c3:38:2f:2c:ff:83:64:5e:1c:67:09:
                    68:c2:6f:69:e9:07:64:13:1d:92:32:83:20:21:39:
                    f2:e3:59:66:64:f9:22:09:b2:9d:87:a9:f3:47:4b:
                    2d:8c:74:5c:b6:f1:91:aa:40:2b:37:59:03:c6:e7:
                    92:0c:f6:18:c9:b5:31:de:31:0d:a4:b0:c2:77:64:
                    88:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7B:73:D8:6C:CA:23:6A:C5:4D:0C:FC:60:DD:B7:B3:61:0B:C9:8D:C8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/1/7B73D86CCA236AC54D0CFC60DDB7B3610BC98DC8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.236.0/22
                  177.67.36.0/24
                  177.67.38.0/24
                IPv6:
                  2804:2838::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263948

    Signature Algorithm: sha256WithRSAEncryption
         79:44:fc:f7:56:4f:81:d8:0e:a0:dd:4a:c5:e6:a6:b1:d9:91:
         5a:5d:e2:fd:c2:01:6d:e6:d0:43:22:e2:55:fd:9b:e3:78:e4:
         68:42:01:e8:99:b6:3e:1c:b7:1c:39:b3:cf:68:d8:a9:94:f4:
         4e:8e:77:33:24:47:77:ae:35:67:2f:ce:4a:85:03:e6:fb:3b:
         0b:91:9a:ac:02:39:bb:2f:46:41:aa:c2:c6:00:90:d3:99:66:
         4b:74:0e:27:25:2c:22:6f:06:ce:a8:46:dd:63:de:5f:16:72:
         83:6c:a0:64:8d:f8:15:f8:92:72:17:9a:2b:db:08:2b:3b:33:
         93:ba:b7:6b:6c:77:19:ec:99:30:52:06:03:b4:06:6c:5b:09:
         9c:82:7d:f1:7f:2b:fa:51:f4:2d:95:0f:a9:ac:f2:7b:99:87:
         c3:52:c6:1d:54:43:68:be:83:e1:58:0a:77:3e:dc:bc:26:af:
         a5:ff:4f:81:c0:27:fa:ae:82:26:28:97:d5:b6:8e:03:cf:64:
         e4:28:d6:94:7b:f7:a3:0d:cf:6b:e4:5f:80:97:fb:87:25:97:
         5d:5e:4b:db:b6:27:31:e6:16:1e:30:1f:e0:46:b3:b8:5a:bd:
         4e:9d:9f:7b:f8:f1:51:0b:fd:5d:1d:23:74:3b:e4:cb:81:dd:
         69:d6:1a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:43:31 2024 by rpki-client on console-fra.rpki-client.org