Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.cer
File:                     938F45B39DC45B48A1C4185FBA8AF194B821EFA1.cer (raw, json)
Hash identifier:          IIFYM3w7AaAZqRSTDG+0c4eqYlb82rcN9LhCD1w6v9I=
Subject key identifier:   93:8F:45:B3:9D:C4:5B:48:A1:C4:18:5F:BA:8A:F1:94:B8:21:EF:A1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4CA19B5BE8B4BF45659AE8302B4E888FA62CBEFF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 20:14:36 +0000
Certificate not after:    Wed 02 Apr 2025 20:19:36 +0000
Subordinate resources:    AS: 262428
                          IP: 170.82.152.0/22
                          IP: 177.44.144.0/20
                          IP: 191.6.176.0/20
                          IP: 2804:13dc::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 01:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:a1:9b:5b:e8:b4:bf:45:65:9a:e8:30:2b:4e:88:8f:a6:2c:be:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 20:14:36 2024 GMT
            Not After : Apr  2 20:19:36 2025 GMT
        Subject: CN=938F45B39DC45B48A1C4185FBA8AF194B821EFA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:99:80:20:9e:21:5d:b7:94:ff:cc:33:42:2f:
                    ab:1d:8f:36:a0:68:43:63:e3:5f:0d:92:3e:09:5d:
                    96:ad:92:f9:bd:6f:a0:2e:29:f2:b4:28:ee:17:7d:
                    cb:4e:93:1a:06:94:78:a3:ef:42:fa:f6:3a:1c:72:
                    cd:a8:e5:99:d5:03:82:f4:f5:b9:b3:e8:0a:15:4b:
                    c0:f8:79:85:24:f6:5b:02:39:eb:82:1b:ca:70:2d:
                    35:4a:2e:de:c4:47:e2:dd:33:c0:14:cf:8b:47:ac:
                    09:8b:e9:48:3c:ac:4e:6a:3c:45:64:22:d8:f0:e3:
                    44:a7:05:35:4d:99:fe:4a:6c:14:08:fd:75:ac:76:
                    61:aa:fa:6e:1b:ce:01:54:9d:29:73:0e:2c:09:32:
                    a7:41:a5:80:ca:91:ed:e2:6f:e5:0a:f6:a5:4b:5c:
                    d7:6e:82:37:82:4d:6f:cc:8a:07:7e:4c:db:95:50:
                    76:56:30:17:ff:e2:2b:0b:6f:c6:1e:95:d9:9d:03:
                    a1:c2:06:c6:a1:74:62:41:8c:46:77:82:12:03:92:
                    1f:1b:c9:73:1e:80:97:34:43:d1:3c:d3:bf:2a:00:
                    fc:62:79:78:d3:b2:4e:67:c0:45:72:f3:77:75:2e:
                    2b:ed:cd:61:96:dd:32:27:4b:14:cc:86:58:fc:55:
                    69:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                93:8F:45:B3:9D:C4:5B:48:A1:C4:18:5F:BA:8A:F1:94:B8:21:EF:A1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.152.0/22
                  177.44.144.0/20
                  191.6.176.0/20
                IPv6:
                  2804:13dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262428

    Signature Algorithm: sha256WithRSAEncryption
         25:e3:5b:95:32:5c:8d:40:1f:a6:49:ed:49:95:a1:c0:ba:09:
         a6:68:8d:ad:df:2b:2e:b7:ff:87:aa:52:fb:6e:26:13:db:0b:
         69:11:83:a0:51:ec:4f:69:22:53:8d:20:4e:d5:d6:0b:4d:3e:
         10:7c:e2:28:e2:8d:cc:f0:c4:1c:1f:4d:13:98:4a:80:45:e8:
         60:30:e0:1a:42:da:d1:ad:87:5d:06:35:b1:16:2b:32:53:4c:
         4c:aa:a1:c2:b1:b8:d5:f4:c5:4d:6a:ef:68:38:93:8b:91:e8:
         47:eb:34:e7:65:c2:df:53:57:54:ce:26:f0:d6:2d:68:92:8e:
         cd:51:a9:23:33:28:0b:66:e8:71:e7:66:6d:53:87:df:3a:1b:
         5d:3b:7a:b8:ef:4b:61:59:9e:08:f7:f6:84:5f:f8:59:c3:6e:
         32:26:16:8d:37:89:36:fd:05:6f:ae:cc:11:44:39:bf:48:a9:
         99:06:c1:e0:43:35:7a:be:b0:27:ff:3c:c8:8a:63:32:0b:e2:
         59:48:f2:21:59:9e:63:95:a9:71:49:01:ac:92:29:aa:f5:f7:
         66:21:99:43:f4:8a:a2:eb:1e:da:fa:a2:de:bb:7b:01:b0:ee:
         15:35:ad:12:55:97:dd:6e:2e:70:0b:a0:e0:47:33:32:ee:65:
         bc:83:3e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 00:27:00 2024 by rpki-client on console-ams.rpki-client.org