Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9599D6E8C704E2A5F423FC8C639E17E2E032C535.cer
File:                     9599D6E8C704E2A5F423FC8C639E17E2E032C535.cer (raw, json)
Hash identifier:          zXYSKp7Ss2UWffADeFUOxLSA4LnhDFE8BrmF+9tIf7k=
Subject key identifier:   95:99:D6:E8:C7:04:E2:A5:F4:23:FC:8C:63:9E:17:E2:E0:32:C5:35
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2927BADDF0F851D85B8461FCA9E01B0BEE4FDE7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/0/9599D6E8C704E2A5F423FC8C639E17E2E032C535.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Apr 2024 21:39:27 +0000
Certificate not after:    Fri 04 Apr 2025 21:44:27 +0000
Subordinate resources:    AS: 269474
                          IP: 45.187.172.0/22
                          IP: 2804:6530::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jul 2024 10:52:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:27:ba:dd:f0:f8:51:d8:5b:84:61:fc:a9:e0:1b:0b:ee:4f:de:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  5 21:39:27 2024 GMT
            Not After : Apr  4 21:44:27 2025 GMT
        Subject: CN=9599D6E8C704E2A5F423FC8C639E17E2E032C535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:c4:c2:c4:7d:db:c9:9d:b3:fb:6f:db:cf:41:
                    36:c9:e0:89:4d:33:f5:84:28:1a:1e:22:12:0d:a7:
                    92:a3:a7:be:c2:aa:91:c8:ef:cc:85:e4:98:c3:d2:
                    f8:e3:f2:65:cb:1a:6d:b1:20:4c:ad:bb:44:97:18:
                    14:38:60:5f:fa:f9:21:b9:c3:c9:9c:b4:a4:ec:b0:
                    72:bb:fc:48:13:e4:44:d0:7b:04:66:30:30:5f:aa:
                    65:ce:80:aa:8f:25:a0:67:4b:d3:9a:ff:6e:2e:bc:
                    1b:8e:d3:4f:99:c8:5d:12:7c:87:25:04:ea:06:b3:
                    c3:80:4c:da:d6:a3:18:a3:fc:89:ae:a0:dc:6e:f2:
                    4d:7f:7d:39:b4:9f:e2:fd:08:94:5a:be:ec:a9:18:
                    35:e6:e4:80:58:7c:e3:96:4c:a7:bc:73:e5:df:4e:
                    25:db:b8:cb:fc:98:42:6a:be:d8:5b:61:38:83:52:
                    16:cf:8f:75:3f:08:84:97:46:cf:0b:fc:57:c3:bc:
                    c2:88:46:09:29:a8:0c:b6:33:c1:20:33:c1:20:60:
                    ec:bd:00:52:76:27:38:23:c3:d5:f3:45:52:0c:8e:
                    90:8d:f8:a4:75:6d:c2:24:fc:87:7a:03:5f:59:0d:
                    47:80:99:e5:d8:19:b6:4b:a7:84:6a:58:ce:33:d7:
                    90:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                95:99:D6:E8:C7:04:E2:A5:F4:23:FC:8C:63:9E:17:E2:E0:32:C5:35
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/0/9599D6E8C704E2A5F423FC8C639E17E2E032C535.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.172.0/22
                IPv6:
                  2804:6530::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269474

    Signature Algorithm: sha256WithRSAEncryption
         10:23:da:d4:e7:85:f5:c8:00:8a:7a:40:5a:18:3c:e7:f0:a1:
         b3:0d:91:3f:97:e4:3d:c8:16:ed:d8:7f:28:bc:16:5b:5f:cc:
         9e:91:c1:41:1a:96:3d:f6:d4:4a:54:d8:54:e2:f3:9a:c3:ae:
         22:29:1f:78:a5:ee:d0:ba:f2:76:73:9e:d3:e7:99:27:b0:23:
         83:30:7e:5c:49:b5:62:ed:e3:16:08:c3:e0:90:e9:6a:32:0f:
         9e:45:22:1b:09:69:96:ef:53:14:fc:3f:9d:5c:4c:84:d3:6c:
         3a:a5:75:d4:a7:0a:bb:bf:51:24:f8:47:e5:9c:6e:a2:b2:8a:
         7f:57:ae:78:51:53:d6:83:ac:08:8a:72:69:8f:75:9d:ae:59:
         0a:fe:4d:2a:03:99:f8:dc:70:b3:c8:8a:51:51:3c:56:a2:d0:
         eb:ea:d7:88:c1:78:c1:1e:e8:b6:08:18:7a:57:06:91:bf:2e:
         00:71:1c:ee:c7:30:4f:6d:ef:ff:37:ce:e7:63:e9:5a:bf:6e:
         db:cd:bd:c0:68:17:a8:ba:44:73:89:4c:b6:15:37:6b:9c:9d:
         91:b9:3e:46:64:6e:ab:de:f7:e7:45:8a:a3:34:e4:b7:90:a5:
         a5:20:87:34:2a:fb:23:48:dc:2f:1f:eb:68:b9:60:4e:f2:51:
         38:e3:93:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 10:02:03 2024 by rpki-client on console-fra.rpki-client.org