Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer
File:                     91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer (raw, json)
Hash identifier:          EiFLd3joLDker6PCD8kJaTSdHtdRZS+IhuzX3fM1GGg=
Subject key identifier:   91:C1:8D:88:BD:49:D0:7F:D4:2C:F2:59:DD:3F:33:07:0A:6B:E8:69
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       50A26DEF6B1799539721EF17AD221C319BEE52FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 13:25:55 +0000
Certificate not after:    Thu 03 Apr 2025 13:30:55 +0000
Subordinate resources:    AS: 264381
                          IP: 131.100.144.0/22
                          IP: 131.161.172.0/22
                          IP: 168.205.148.0/22
                          IP: 170.78.176.0/22
                          IP: 170.81.44.0/22
                          IP: 170.83.164.0/22
                          IP: 177.11.56.0/22
                          IP: 177.22.208.0/20
                          IP: 2804:1d9c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 04:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:a2:6d:ef:6b:17:99:53:97:21:ef:17:ad:22:1c:31:9b:ee:52:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 13:25:55 2024 GMT
            Not After : Apr  3 13:30:55 2025 GMT
        Subject: CN=91C18D88BD49D07FD42CF259DD3F33070A6BE869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f4:71:85:c4:65:9d:fc:9a:6d:bd:92:13:12:
                    98:e1:11:74:2a:08:91:16:fa:31:94:cf:a1:2d:89:
                    13:3f:6f:e6:eb:a6:44:bf:fa:2c:10:84:a2:f5:75:
                    ad:78:19:31:dc:8b:63:dd:a7:9f:d1:e8:be:05:1d:
                    67:1b:7d:18:76:fc:34:c1:07:34:a4:2f:bc:56:2f:
                    49:16:75:a5:eb:55:48:8b:e1:95:74:47:92:b9:53:
                    d3:80:d4:de:f1:47:66:a6:f2:43:37:30:d0:cc:3a:
                    dc:6a:f1:bf:c9:70:01:b5:3a:62:af:06:67:56:fd:
                    0b:89:02:9b:f5:e1:e5:2f:39:c6:5d:c5:d0:90:31:
                    93:10:75:86:1a:29:74:76:64:db:4f:cf:28:ea:f1:
                    c9:04:84:9b:60:90:0c:ac:62:46:22:db:09:0c:9e:
                    01:4a:ad:f0:16:cf:31:53:81:82:30:5f:0d:b7:9a:
                    da:be:51:77:85:b8:2d:f5:7c:44:96:4a:db:71:c7:
                    bb:66:a7:26:b5:69:a9:48:5f:92:a5:76:60:91:10:
                    b8:54:e2:9b:df:3d:21:33:29:07:b9:df:d1:ac:d4:
                    33:d6:bb:45:c6:0a:9e:db:08:c5:91:ca:27:2f:04:
                    fb:bb:93:a3:01:10:13:df:fb:0b:73:2f:b2:b6:8f:
                    a4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                91:C1:8D:88:BD:49:D0:7F:D4:2C:F2:59:DD:3F:33:07:0A:6B:E8:69
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.144.0/22
                  131.161.172.0/22
                  168.205.148.0/22
                  170.78.176.0/22
                  170.81.44.0/22
                  170.83.164.0/22
                  177.11.56.0/22
                  177.22.208.0/20
                IPv6:
                  2804:1d9c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264381

    Signature Algorithm: sha256WithRSAEncryption
         60:18:74:de:8e:7e:46:31:68:9c:62:be:9e:18:e4:c6:92:10:
         49:d8:43:5d:9a:d3:00:36:dd:8b:15:d2:c4:07:c3:bd:43:e2:
         51:2f:92:47:fc:39:8e:93:48:33:fd:16:bf:78:72:a6:53:b9:
         59:53:72:1f:ce:ba:b9:d1:3c:78:f7:63:4a:d7:48:35:27:25:
         68:6d:44:0a:9a:ab:19:67:c1:9e:fa:86:74:c3:de:4e:0b:28:
         7d:c9:8b:f8:84:40:bc:8d:02:99:17:56:6e:04:49:8a:10:27:
         3a:e2:5f:6f:ac:37:43:46:1b:7a:81:74:93:3f:a0:d3:93:a7:
         6f:78:9c:79:77:b7:eb:61:38:c6:dd:57:dd:cf:6d:11:a0:89:
         e5:91:e2:e1:65:23:76:9e:f5:ad:1d:a5:cf:c6:1f:20:d1:de:
         02:f3:49:ef:d0:f2:2b:f4:55:81:1e:3e:11:b7:bc:c5:24:ff:
         e1:2a:d5:de:04:42:d1:d9:97:fb:08:72:4d:35:b7:de:74:1d:
         7c:16:81:7b:39:27:3d:eb:5c:2d:16:7b:c6:91:ff:ff:11:ed:
         3b:98:99:5f:13:e4:53:a4:52:aa:c0:70:a8:30:e2:0b:1b:51:
         cb:90:b1:a7:8a:96:97:b8:19:ca:84:b3:f2:bd:43:0f:c8:1d:
         8a:13:4f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:36:40 2024 by rpki-client on console-ams.rpki-client.org