Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/948B7067C84FB5B2FC1BE3CCE1DEF36298BF939F.cer
File:                     948B7067C84FB5B2FC1BE3CCE1DEF36298BF939F.cer (raw, json)
Hash identifier:          GwqdVi9qIvmQPnxShm6aLhilvcPc5Jm4tXobmTKkfgk=
Subject key identifier:   94:8B:70:67:C8:4F:B5:B2:FC:1B:E3:CC:E1:DE:F3:62:98:BF:93:9F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       12A0D610E890E60CA8297918FF00C2278F21747E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/1/948B7067C84FB5B2FC1BE3CCE1DEF36298BF939F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 09:49:40 +0000
Certificate not after:    Thu 03 Apr 2025 09:54:40 +0000
Subordinate resources:    AS: 262403
                          IP: 177.38.96.0/21
                          IP: 187.61.88.0/22
                          IP: 187.85.60.0/22
                          IP: 2804:3e0::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 01:38:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:a0:d6:10:e8:90:e6:0c:a8:29:79:18:ff:00:c2:27:8f:21:74:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 09:49:40 2024 GMT
            Not After : Apr  3 09:54:40 2025 GMT
        Subject: CN=948B7067C84FB5B2FC1BE3CCE1DEF36298BF939F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:64:26:53:a9:7c:19:82:b5:41:32:f2:97:f8:
                    78:92:28:e3:1b:91:6e:c7:9e:a1:fc:ca:8a:38:1a:
                    98:92:f1:a0:8a:50:ed:b9:12:31:04:1b:5f:d1:bc:
                    4b:b5:c8:3e:fb:6c:d1:65:ea:77:38:bf:8d:36:33:
                    50:23:32:dd:2b:34:63:7d:47:4b:63:95:18:39:92:
                    b9:30:d7:86:ea:48:4a:50:9f:d4:8b:f9:8d:82:d4:
                    e4:39:ad:7b:f2:b4:c0:2a:cf:2f:b6:e8:67:8b:08:
                    25:65:a8:8e:a1:cf:49:c9:10:9f:4b:fa:16:29:5f:
                    f2:d8:60:b9:c4:8e:13:8a:b0:d0:e2:92:8e:77:76:
                    30:41:f2:cd:1e:0f:50:be:e2:75:95:55:d5:28:c5:
                    6c:23:98:09:3f:a1:ae:06:6d:50:43:a9:ee:af:94:
                    83:00:8e:5a:04:0f:16:b6:ac:d3:44:8c:94:f6:36:
                    e7:9f:f7:25:aa:7d:0d:bd:d8:3a:cf:fc:59:36:6d:
                    de:fc:94:98:bf:88:70:5b:40:8b:bc:89:1c:ca:be:
                    1b:fc:21:3f:ec:8e:8d:0c:31:5d:60:3b:54:d9:89:
                    56:5f:fe:65:b8:0e:30:36:79:ea:5b:24:ad:04:7f:
                    c3:45:bb:9c:93:ba:61:69:58:47:7c:d2:44:6e:05:
                    08:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                94:8B:70:67:C8:4F:B5:B2:FC:1B:E3:CC:E1:DE:F3:62:98:BF:93:9F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/1/948B7067C84FB5B2FC1BE3CCE1DEF36298BF939F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.96.0/21
                  187.61.88.0/22
                  187.85.60.0/22
                IPv6:
                  2804:3e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262403

    Signature Algorithm: sha256WithRSAEncryption
         a5:20:6f:56:f6:d4:80:1f:e6:42:dd:08:17:1b:fb:de:dd:84:
         d2:43:b5:68:b0:b4:bb:38:ad:a1:44:e1:1c:80:da:a0:7a:28:
         30:06:9b:f4:2f:b4:84:b1:5a:41:c7:91:07:be:de:3a:bd:07:
         b4:d0:eb:81:ab:fa:b9:9c:f9:7b:94:0b:40:96:40:dd:83:20:
         88:78:c5:af:8b:f9:b8:10:b8:5d:04:0c:12:7f:47:eb:51:a8:
         14:af:d0:e1:b1:a3:d4:b1:c9:b3:9a:cd:ed:4c:c3:f6:9a:8d:
         06:06:8f:5f:48:d3:3f:f4:38:87:f1:15:14:b8:e2:b6:1f:fc:
         58:5c:f8:7b:d8:23:95:9d:a2:69:97:fd:c0:09:44:85:47:fd:
         2e:92:c4:d0:4e:57:59:1d:bd:da:bc:2d:fd:39:a5:df:75:cf:
         4d:47:95:71:e4:b3:0b:43:ad:20:30:f5:f0:46:89:7e:82:67:
         24:48:33:c0:31:a8:e7:ed:3a:39:bd:d1:52:d9:8e:38:84:d9:
         1a:3e:ae:73:c6:06:75:92:2a:b2:b0:9c:3a:ed:ae:86:c3:c3:
         eb:85:33:2e:81:bf:2c:3b:6e:e9:24:99:16:74:8d:fb:48:1d:
         72:8e:3a:ef:28:33:33:ec:fa:3a:db:44:4b:bc:54:56:74:a0:
         7f:1a:45:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:01:09 2024 by rpki-client on console-ams.rpki-client.org