Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer
File:                     94C381CC9333C07A86D3A11282068476C5196FE6.cer (raw, json)
Hash identifier:          /jqKGmgYIqnBfFf88P8JsMwO9PtyqGBm1HH074fIlmE=
Subject key identifier:   94:C3:81:CC:93:33:C0:7A:86:D3:A1:12:82:06:84:76:C5:19:6F:E6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       58C83C34D09572C3322C37C6763CF54675A7A50D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 18:24:09 +0000
Certificate not after:    Thu 03 Apr 2025 18:29:09 +0000
Subordinate resources:    AS: 265885
                          IP: 128.201.244.0/22
                          IP: 2804:3f54::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 03:32:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c8:3c:34:d0:95:72:c3:32:2c:37:c6:76:3c:f5:46:75:a7:a5:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 18:24:09 2024 GMT
            Not After : Apr  3 18:29:09 2025 GMT
        Subject: CN=94C381CC9333C07A86D3A11282068476C5196FE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c3:57:fb:50:38:a4:53:49:46:cf:cf:2c:4a:
                    03:f3:71:a5:32:9b:66:12:53:1a:6d:23:ab:f9:88:
                    4b:60:43:50:bf:2f:e7:21:45:45:4a:78:3c:fd:e6:
                    d0:ce:57:29:bf:2b:5c:82:7a:0c:2d:df:c5:17:9a:
                    83:cc:3f:15:c2:ef:c2:26:2a:86:90:56:a6:72:26:
                    1e:57:c9:fa:e9:7d:25:9b:f9:91:88:5b:b7:92:27:
                    dc:a2:cd:70:00:8c:bd:98:0f:8f:7e:05:5a:1b:15:
                    62:4a:9f:4f:d0:b4:57:fa:b5:47:bd:34:b4:65:46:
                    d6:d0:d3:c1:de:12:08:0a:1a:32:66:e8:88:cb:b9:
                    51:cb:72:4d:a3:f4:82:1b:be:6f:be:c1:92:3b:68:
                    e1:45:b6:53:bf:81:67:6a:ee:b5:11:a0:80:4b:67:
                    5c:20:ee:a1:aa:32:1a:4b:b7:c4:c3:02:cd:6b:a6:
                    76:4e:94:b0:d5:29:aa:b8:98:3c:9b:6d:c9:44:b2:
                    07:d6:2f:a4:ee:34:1f:bd:6a:6c:5c:71:a0:c8:17:
                    d4:40:f1:77:72:6c:ea:58:23:73:53:cd:86:26:59:
                    c7:3e:c4:1a:58:3e:64:aa:f7:1a:d4:99:13:ca:bc:
                    d5:01:bf:5b:63:62:39:b7:db:dc:a7:e7:16:bf:bc:
                    13:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                94:C3:81:CC:93:33:C0:7A:86:D3:A1:12:82:06:84:76:C5:19:6F:E6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.244.0/22
                IPv6:
                  2804:3f54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265885

    Signature Algorithm: sha256WithRSAEncryption
         97:99:9f:21:fb:0c:a9:c6:23:67:f5:fe:2f:dd:33:14:c6:9e:
         da:e2:c8:14:d9:e1:53:fb:c5:c7:9b:1e:64:a6:e6:57:6f:fe:
         6e:43:02:c7:a7:c8:a8:d3:9f:1d:b8:db:94:ca:08:88:0d:3c:
         a7:54:0e:4b:f9:73:1e:4b:f6:1a:b6:06:15:48:89:7e:0c:51:
         17:a1:ca:4f:a8:0e:67:f3:04:c2:f3:f2:f9:8f:5a:8f:6e:24:
         df:b8:69:5a:f3:c5:26:a8:a2:4c:00:39:b2:46:52:0a:8e:ef:
         68:e3:68:bb:8c:28:8d:58:fc:9a:ab:d0:24:b6:f6:02:59:35:
         6d:37:30:f5:24:4f:50:b9:4c:4c:82:44:80:ac:30:8b:c3:1d:
         f2:3d:2f:48:6e:28:0d:d9:14:93:e5:ff:86:a1:b1:a9:de:fd:
         47:d5:cc:87:55:ba:3c:fb:56:42:ef:4a:e8:8e:9d:8d:06:14:
         55:0a:9b:61:12:e9:04:6f:90:73:4c:42:e7:22:1c:07:ec:ef:
         29:88:96:1f:d4:30:35:c9:64:ca:9c:2a:c2:e7:61:79:93:c4:
         f3:c6:88:48:6e:c8:ee:27:47:8d:03:67:15:0e:a7:67:9e:6c:
         49:4e:71:63:fe:9a:d3:f0:a2:22:f9:53:b2:31:75:25:c1:75:
         6a:80:cb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:35:20 2024 by rpki-client on console-fra.rpki-client.org