Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.cer
File:                     94C8960DB5853BB60A49187478AA5E61DA0D3288.cer (raw, json)
Hash identifier:          cDV8e7EZraW4t16e1IdFHhsT+xzc1P5Z6nuAH4J2sBk=
Subject key identifier:   94:C8:96:0D:B5:85:3B:B6:0A:49:18:74:78:AA:5E:61:DA:0D:32:88
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5359606BA1D8B8FEAFEBEBAD32BFED4A48184B66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Apr 2024 04:16:27 +0000
Certificate not after:    Fri 04 Apr 2025 04:21:27 +0000
Subordinate resources:    AS: 262462
                          IP: 177.37.0.0/20
                          IP: 177.54.224.0/20
                          IP: 177.105.144.0/20
                          IP: 181.224.84.0/22
                          IP: 200.196.128.0/22
                          IP: 2804:4bc::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:59:60:6b:a1:d8:b8:fe:af:eb:eb:ad:32:bf:ed:4a:48:18:4b:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  5 04:16:27 2024 GMT
            Not After : Apr  4 04:21:27 2025 GMT
        Subject: CN=94C8960DB5853BB60A49187478AA5E61DA0D3288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c6:32:2f:6d:4b:22:d2:09:64:32:04:a2:d6:
                    54:d4:7c:58:55:d7:57:d5:0c:4c:da:a1:50:44:33:
                    f6:dd:8e:02:c5:c5:24:83:eb:70:ca:d1:98:fa:fc:
                    5b:09:31:16:60:ff:0d:82:03:56:87:9a:31:a3:a9:
                    e8:a6:0a:52:cf:1c:73:38:b3:39:5f:1c:f6:b2:11:
                    59:e2:58:9d:00:b4:83:2a:f5:4e:ac:cd:52:66:74:
                    fc:c1:5a:d7:60:74:fb:dc:38:28:c6:65:78:88:45:
                    ef:2c:33:82:5a:9f:cb:50:81:8c:a1:b1:e1:2b:46:
                    f0:1e:4b:05:e0:95:86:9a:6b:72:f5:bc:18:38:b9:
                    24:19:12:bd:ac:a3:bf:1e:38:dc:c1:c0:25:60:81:
                    bf:42:0d:70:82:e4:de:ad:5c:9b:a0:e7:0e:89:aa:
                    85:80:f0:e7:04:c7:6b:82:90:8f:ec:34:71:6a:f5:
                    3a:4c:f6:1b:4e:da:c8:bc:65:a1:96:79:be:79:60:
                    58:37:e7:e2:d9:06:5b:2f:12:11:f3:c9:d3:b7:76:
                    0c:a8:9f:06:a1:c5:23:7b:6a:92:e7:de:73:42:fb:
                    6c:15:40:39:3a:bd:31:fb:15:82:ba:d9:62:6a:a5:
                    5a:d6:cf:3e:69:5f:a0:6b:d3:44:5b:18:78:0f:71:
                    17:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                94:C8:96:0D:B5:85:3B:B6:0A:49:18:74:78:AA:5E:61:DA:0D:32:88
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.0.0/20
                  177.54.224.0/20
                  177.105.144.0/20
                  181.224.84.0/22
                  200.196.128.0/22
                IPv6:
                  2804:4bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262462

    Signature Algorithm: sha256WithRSAEncryption
         27:6e:ac:d7:97:df:af:27:01:97:97:05:f1:e2:01:c6:98:56:
         65:68:da:e8:05:8c:69:c9:c2:be:65:55:c7:c6:ed:a4:94:3c:
         93:f4:73:4b:e5:f5:bc:fe:6e:e5:d1:c2:60:19:53:82:91:b5:
         97:7e:93:66:9e:ba:4a:c6:b9:a9:14:5a:7d:f6:2e:22:e5:a4:
         d0:08:cb:0d:25:e1:2b:81:9f:38:c2:9c:b3:35:08:ce:d6:3e:
         ba:1b:21:6a:bd:a5:3b:da:3e:1e:d1:cf:9b:81:69:9a:00:b2:
         96:2b:25:a5:28:15:c3:bf:81:a7:50:39:53:bb:f0:24:62:51:
         3d:4f:01:00:ee:a6:31:31:0a:b8:06:1b:2c:8c:94:6b:70:26:
         a8:c3:ec:3a:aa:84:33:53:3a:89:c7:17:6e:0a:28:e4:76:a6:
         ca:4c:b4:e1:df:64:74:d3:9a:02:6e:31:06:35:e6:62:69:c7:
         57:0c:f5:c5:74:d5:62:25:f2:e2:05:60:78:f2:17:84:88:2f:
         40:f1:45:92:4a:c8:4b:be:cd:66:00:f8:f1:2b:49:d5:a7:01:
         e7:f0:5e:1c:66:54:87:8d:ad:0d:4d:fa:05:eb:13:05:53:ed:
         be:05:eb:b6:5c:f6:f6:78:9b:ad:9b:42:dc:95:3e:6d:b6:e5:
         b9:95:28:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:47 2024 by rpki-client on console-fra.rpki-client.org