Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9536A4A25799142864EDF97B100393D50D163742.cer
File:                     9536A4A25799142864EDF97B100393D50D163742.cer (raw, json)
Hash identifier:          D4Yaxs7ZvDVJsd31vpld0pvF0lUsphRjp+wlR1VwMjg=
Subject key identifier:   95:36:A4:A2:57:99:14:28:64:ED:F9:7B:10:03:93:D5:0D:16:37:42
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5C78E041BAE1EAB800319C88595A948EEA02260F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/9536A4A25799142864EDF97B100393D50D163742.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 24 May 2024 14:13:41 +0000
Certificate not after:    Fri 23 May 2025 14:18:41 +0000
Subordinate resources:    AS: 53153
                          IP: 138.204.220.0/22
                          IP: 186.209.96.0/20
                          IP: 187.61.96.0/20
                          IP: 2804:738::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 13 Jun 2024 22:10:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:78:e0:41:ba:e1:ea:b8:00:31:9c:88:59:5a:94:8e:ea:02:26:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 24 14:13:41 2024 GMT
            Not After : May 23 14:18:41 2025 GMT
        Subject: CN=9536A4A25799142864EDF97B100393D50D163742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:83:b9:6d:99:4c:e5:34:be:5b:e3:b3:86:84:
                    c3:d7:0f:23:7a:5a:23:f5:dc:6f:2b:cb:2a:26:ae:
                    a7:8c:9a:86:d1:e7:1f:1a:1b:9a:f1:5b:61:f6:30:
                    44:a2:ff:8f:4c:df:a5:ef:a7:31:fb:1f:01:ac:dc:
                    6d:05:a8:8e:7e:02:0c:db:a0:0e:09:df:82:dc:4f:
                    c2:ad:48:a6:c7:1b:90:04:7a:45:db:09:f8:77:e9:
                    e2:ce:6f:f6:2b:91:76:26:98:15:31:d5:37:53:c1:
                    69:87:08:ad:0a:3d:e7:19:9a:c5:fa:40:7a:45:0f:
                    a3:7c:f5:a8:f7:bf:51:85:14:2e:62:5d:c1:e0:97:
                    98:8e:7b:97:99:99:33:46:a6:3b:ff:1b:f4:2c:6c:
                    bf:66:75:08:47:46:d4:95:3a:16:cb:fb:a4:b8:66:
                    5c:2d:21:47:17:75:ea:37:29:c4:31:19:b3:e9:8e:
                    42:66:cf:fa:e6:a2:e6:44:04:35:38:da:a9:01:db:
                    f6:de:a5:1c:c7:21:1e:77:f3:4b:98:7d:a2:38:49:
                    20:d2:e1:8b:39:8d:41:f2:ca:83:fe:9b:c3:fa:6e:
                    34:c4:55:b8:84:c9:bb:17:e0:02:d1:0d:15:98:9f:
                    0d:a8:5a:ab:91:76:c4:e5:18:57:b2:d9:36:61:a7:
                    1a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                95:36:A4:A2:57:99:14:28:64:ED:F9:7B:10:03:93:D5:0D:16:37:42
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/9536A4A25799142864EDF97B100393D50D163742.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.220.0/22
                  186.209.96.0/20
                  187.61.96.0/20
                IPv6:
                  2804:738::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53153

    Signature Algorithm: sha256WithRSAEncryption
         87:6a:17:19:80:da:ac:dd:fa:8f:49:09:fa:91:37:2f:20:b3:
         c3:19:47:76:d0:4b:96:36:08:ef:32:57:53:bd:5c:bb:61:24:
         6e:f0:b7:b2:53:d9:43:d8:56:59:87:96:bd:08:1b:80:23:51:
         02:51:1b:4a:c3:53:16:08:68:a7:87:62:a6:9f:06:c2:33:9f:
         61:b6:2b:1d:33:0f:50:a1:c2:ab:ec:fc:e6:3f:59:5d:9f:1e:
         2e:7f:f5:96:c4:c3:2b:47:b5:e1:d4:83:09:2d:21:73:41:b8:
         2a:46:2e:74:ea:63:87:ea:1c:a4:51:74:d1:df:66:83:95:c9:
         d2:84:8b:6d:21:6e:7b:82:d9:55:4d:64:f2:a9:2f:e9:79:cd:
         2e:13:ff:a2:d4:08:18:87:75:c5:80:a5:79:0c:be:5e:2c:3a:
         4c:d8:70:f0:02:4c:e8:51:e2:d4:07:68:1b:2a:8f:dd:79:89:
         ee:d9:57:a9:19:14:e5:58:3c:68:06:df:9e:01:ab:97:3b:03:
         3b:ee:94:81:4a:cd:a8:98:0d:be:5c:3f:d1:9d:93:3c:24:a5:
         3a:2c:e7:50:27:f4:67:f1:f6:40:40:47:15:a5:84:05:b0:8d:
         9b:04:36:4c:dd:ba:10:8e:c2:85:98:92:a1:c2:d4:a8:d4:e8:
         04:30:2f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 22:38:09 2024 by rpki-client on console-fra.rpki-client.org