Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.cer
File:                     95B2CF7C5635CD912BBD7A8DED184CC398CBE307.cer (raw, json)
Hash identifier:          9O+u2YOILnYaz+kggI14DJ/asxWRDgYGionrOdHD9+s=
Subject key identifier:   95:B2:CF:7C:56:35:CD:91:2B:BD:7A:8D:ED:18:4C:C3:98:CB:E3:07
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1026AAA2B24B50231037045B8E31D9216622375F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft
caRepository:             rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 01:55:44 +0000
Certificate not after:    Thu 03 Apr 2025 02:00:44 +0000
Subordinate resources:    AS: 270949
                          IP: 143.137.36.0/22
                          IP: 2804:73f8::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 02:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:26:aa:a2:b2:4b:50:23:10:37:04:5b:8e:31:d9:21:66:22:37:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 01:55:44 2024 GMT
            Not After : Apr  3 02:00:44 2025 GMT
        Subject: CN=95B2CF7C5635CD912BBD7A8DED184CC398CBE307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:07:dc:cf:e4:8c:7e:05:d2:66:b6:92:44:6d:
                    97:ec:5e:f8:b2:71:16:33:86:94:aa:cc:48:d6:72:
                    b7:d9:4b:08:61:46:95:aa:15:2a:dd:94:74:88:74:
                    e9:16:5c:a3:69:f8:0c:c1:88:5d:81:50:24:ac:66:
                    3c:c8:5e:58:35:95:f6:d5:54:64:2e:6e:ac:33:13:
                    a5:aa:c2:fa:e4:b5:f8:10:95:77:fe:93:a2:b9:23:
                    83:29:7a:6d:28:62:96:c2:2c:e8:99:00:ee:3a:d9:
                    e8:02:88:44:e3:d9:c4:48:75:09:84:e8:56:9b:03:
                    47:8e:2c:22:1b:30:9b:d4:49:8a:08:79:45:69:ac:
                    5c:40:9b:0e:f6:04:96:f7:93:de:0a:89:0f:94:71:
                    62:3d:15:91:2a:40:f1:04:ca:91:ac:b6:76:e0:81:
                    6a:b2:93:74:74:1b:16:f5:81:d9:c3:97:07:e5:e2:
                    13:e9:2e:6a:17:58:01:f4:8d:fe:73:5e:90:91:be:
                    49:1b:75:c7:15:0c:39:ba:bd:b6:00:15:06:c8:8e:
                    8c:a1:d1:06:f0:99:12:28:e5:78:91:e6:97:e6:06:
                    0f:b9:4d:5c:f4:29:ff:df:5b:41:20:c5:ba:f0:cc:
                    65:77:37:47:1e:1b:fc:07:08:21:e9:3a:57:eb:b6:
                    9b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                95:B2:CF:7C:56:35:CD:91:2B:BD:7A:8D:ED:18:4C:C3:98:CB:E3:07
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.36.0/22
                IPv6:
                  2804:73f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270949

    Signature Algorithm: sha256WithRSAEncryption
         15:5a:7b:ca:df:da:e5:90:a6:56:33:10:af:60:cc:3a:ff:a0:
         43:4c:f5:f5:bf:cf:43:87:31:9d:8d:2a:9f:cb:00:d2:b8:e9:
         10:1b:4b:a3:84:43:2f:7d:ec:83:c0:9c:69:3b:a1:43:02:88:
         e6:85:b0:16:16:15:98:05:f3:e8:36:da:de:40:f8:fc:b2:9b:
         44:25:07:78:08:76:35:8b:20:d4:07:d5:3c:d3:11:38:2d:05:
         0e:56:bc:3a:5f:23:83:cd:a9:e7:f3:17:62:2a:17:e2:ff:b0:
         09:4b:1c:eb:b2:a1:2e:a4:ed:4e:a2:e8:7a:37:4d:d9:a4:df:
         81:89:d5:c4:82:d9:fd:fb:a5:b4:5b:08:9c:a5:50:f3:fd:3f:
         08:f4:0c:4b:9c:60:9c:d4:ad:54:9c:ec:50:5f:30:93:1e:e8:
         63:6e:54:28:94:27:a7:9f:89:fc:72:e6:1c:32:f6:79:91:b6:
         2e:ad:33:d0:37:1b:90:3f:38:1b:43:08:61:55:83:84:93:10:
         39:78:62:7f:12:17:9b:c2:da:7e:72:21:d3:0c:70:1a:9b:8f:
         05:6d:d5:f3:da:f5:fd:2c:70:e6:23:0b:5f:c9:1c:72:3e:a6:
         63:04:1e:17:ab:21:45:da:e0:42:41:f4:90:cb:0b:95:c4:25:
         6e:59:41:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:06:38 2024 by rpki-client on console-fra.rpki-client.org