Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/817F44DF70A1D14D9825D4B258089BFBB4A6B04C.cer
File:                     817F44DF70A1D14D9825D4B258089BFBB4A6B04C.cer (raw, json)
Hash identifier:          /u4GCGUs0OmWqGCLNO7rDJ4lfNL34VgdHco9hjsr9c8=
Subject key identifier:   81:7F:44:DF:70:A1:D1:4D:98:25:D4:B2:58:08:9B:FB:B4:A6:B0:4C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0FAEFA855890C58194346A3F4E71FD897406BDB1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/1/817F44DF70A1D14D9825D4B258089BFBB4A6B04C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 19:53:57 +0000
Certificate not after:    Wed 02 Apr 2025 19:58:57 +0000
Subordinate resources:    AS: 28624
                          IP: 187.110.64.0/18
                          IP: 200.237.128.0/19
                          IP: 201.33.32.0/19
                          IP: 201.54.160.0/20
                          IP: 2804:3bc::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 05:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ae:fa:85:58:90:c5:81:94:34:6a:3f:4e:71:fd:89:74:06:bd:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 19:53:57 2024 GMT
            Not After : Apr  2 19:58:57 2025 GMT
        Subject: CN=817F44DF70A1D14D9825D4B258089BFBB4A6B04C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:67:50:0f:1b:29:21:03:9b:ce:88:92:fc:e1:
                    79:2f:74:8c:65:56:82:a1:f3:18:b8:63:02:97:0a:
                    99:a5:f5:65:a6:d2:b9:80:e9:79:f9:52:cb:f2:fa:
                    fb:d8:5d:73:ce:73:0c:28:c0:1d:f1:c2:d1:69:ed:
                    2c:e3:2e:5c:f3:bd:e1:43:ff:6f:18:84:96:cd:e4:
                    b6:69:00:3e:2b:56:4f:9f:01:92:43:b7:0c:fd:ec:
                    df:e0:db:30:56:10:84:d4:fe:bf:da:60:4f:2c:c3:
                    ac:2f:d8:3b:1b:15:99:37:9d:07:0d:fb:aa:6c:cd:
                    6b:49:62:fe:36:f6:be:b3:58:54:99:67:73:2c:10:
                    fc:5e:f6:5c:2b:c4:ee:80:57:10:14:b8:76:d1:5a:
                    49:5d:fd:43:e8:7b:32:94:6c:2d:de:7b:f2:90:61:
                    74:4e:69:af:6b:35:d0:75:69:f0:84:f0:91:38:e9:
                    87:80:fb:8a:90:84:d4:31:12:87:2e:78:05:5e:77:
                    a7:95:0d:bb:c7:8b:09:55:2a:bc:4c:5d:c4:d0:9c:
                    2d:32:1d:66:ef:30:6b:41:b4:8e:8a:f8:7d:44:79:
                    49:8d:6a:fd:ba:52:62:b1:5d:15:de:21:15:86:11:
                    a9:cd:80:df:64:51:42:02:89:3b:ef:87:1b:51:21:
                    f1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                81:7F:44:DF:70:A1:D1:4D:98:25:D4:B2:58:08:9B:FB:B4:A6:B0:4C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/1/817F44DF70A1D14D9825D4B258089BFBB4A6B04C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.64.0/18
                  200.237.128.0/19
                  201.33.32.0/19
                  201.54.160.0/20
                IPv6:
                  2804:3bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28624

    Signature Algorithm: sha256WithRSAEncryption
         83:27:e7:d0:08:2e:eb:b4:df:ca:55:b5:d8:0d:4e:d4:e0:77:
         95:f2:b3:88:94:e1:4c:65:1d:bd:1d:6b:2c:7d:91:1d:af:5b:
         b5:53:c6:84:9c:49:e6:f8:7b:06:04:3a:59:70:e8:f0:d8:22:
         d1:fc:aa:82:1a:3e:1d:e1:66:44:06:6f:90:8e:be:22:0b:db:
         5b:de:df:d3:a9:fa:c4:f3:88:99:3b:a6:90:9a:04:9e:99:70:
         0b:d2:37:64:b3:67:24:15:3b:10:30:56:b0:f0:eb:d2:fd:67:
         65:1e:ac:2f:73:8d:31:3d:46:a4:ba:15:50:62:ae:59:4d:ac:
         db:ae:e4:82:48:dd:a5:d8:c1:b1:2d:da:bf:d1:4e:10:dc:f2:
         88:c8:1e:7c:8d:21:9c:19:d4:7d:e4:2b:15:fc:a1:b9:fa:09:
         58:89:98:a8:6f:dd:8a:7a:dd:68:04:82:5a:ba:4b:4f:8e:8e:
         36:96:21:3c:34:5c:1b:fc:e2:15:99:37:90:4c:85:af:30:ce:
         1c:b0:75:f0:bb:64:03:28:4f:c7:ef:8d:cb:bd:e1:65:89:a1:
         d2:0f:32:d3:ec:4c:af:c5:dc:bf:4e:c1:56:ce:31:2c:6b:f9:
         56:00:b8:04:ae:49:d7:b1:a6:d1:a7:2c:79:d4:0b:7e:56:33:
         0b:75:1f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 06:20:13 2024 by rpki-client on console-fra.rpki-client.org