Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.cer
File:                     96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.cer (raw, json)
Hash identifier:          P/HJGKjrhBCYSXM9UcM9+0HBEDiWLoUE0/DEmKylJPg=
Subject key identifier:   96:F2:FB:F6:6A:D2:E9:F6:1E:CC:CE:C6:77:41:C6:AD:17:36:AC:DE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1A568D5C8C499AC97F17B7F5CDB20946AF7904DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 18:07:53 +0000
Certificate not after:    Thu 03 Apr 2025 18:12:53 +0000
Subordinate resources:    AS: 266038
                          IP: 45.4.56.0/22
                          IP: 2804:3998::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 23:19:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:56:8d:5c:8c:49:9a:c9:7f:17:b7:f5:cd:b2:09:46:af:79:04:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 18:07:53 2024 GMT
            Not After : Apr  3 18:12:53 2025 GMT
        Subject: CN=96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f6:25:c8:c0:15:66:52:6b:59:60:7c:33:ea:
                    31:1f:5e:a8:e6:0f:64:f3:e2:42:86:12:b8:c5:79:
                    3a:c1:32:9c:8b:8c:55:62:61:98:bb:a6:ef:f5:06:
                    57:6c:06:ff:18:5f:db:e3:0e:34:dd:76:f5:5f:a4:
                    52:0d:db:e8:31:03:c2:ba:2e:1c:85:49:b0:47:d7:
                    3e:ee:3b:f1:2e:db:64:8b:5f:e0:db:c9:dd:2f:31:
                    c3:8f:04:c7:9d:4b:3f:74:93:a5:cd:cc:c9:5c:83:
                    d7:33:c4:4d:38:b9:5f:b8:07:e1:66:bf:03:51:85:
                    27:3b:cc:88:3a:cc:7d:f5:eb:7d:73:b8:42:9f:42:
                    57:7d:67:ef:80:f6:9b:3c:8c:2b:2c:fa:b6:59:f3:
                    fc:4f:aa:f0:2f:f6:1f:12:19:4e:b7:90:b7:d7:96:
                    46:dd:73:6e:bf:cb:b9:d8:e1:ec:fd:1b:25:e1:29:
                    f0:58:63:14:96:1f:82:57:a1:3f:6c:92:43:9f:bd:
                    b3:51:d8:77:11:d2:4c:c1:c1:7d:43:61:1a:b4:04:
                    6d:76:1d:c1:47:d2:e6:d4:de:b8:a3:6f:fa:36:4d:
                    d6:ee:57:83:87:22:ee:af:70:96:8f:8c:3c:b4:41:
                    0c:a4:35:05:b7:51:6e:61:ea:19:ba:be:bf:23:67:
                    2a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                96:F2:FB:F6:6A:D2:E9:F6:1E:CC:CE:C6:77:41:C6:AD:17:36:AC:DE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.56.0/22
                IPv6:
                  2804:3998::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266038

    Signature Algorithm: sha256WithRSAEncryption
         b5:73:07:7a:bc:6c:5e:d6:ed:48:fd:0d:43:27:27:e4:10:88:
         33:03:60:7b:c9:23:f1:0a:e7:c8:1d:b3:de:f6:ec:32:21:03:
         23:a2:ae:c9:92:3a:43:4d:9e:fc:16:d7:13:60:56:15:f5:10:
         90:dd:78:84:b5:f3:e9:20:79:c0:78:e8:5a:78:aa:e2:57:be:
         47:ca:1e:97:11:63:ab:7a:3c:05:a2:dd:a5:5e:a2:41:cb:0c:
         91:17:82:63:fb:66:89:6e:59:dc:72:18:44:e8:0e:04:dd:34:
         73:6a:5c:65:fc:74:36:eb:46:fd:14:d6:00:13:d8:cc:f2:1b:
         68:05:ff:a8:48:8e:60:b1:b9:17:d9:ff:16:7b:6a:cb:c2:f6:
         36:fb:3e:cc:24:63:2c:ab:35:3b:45:45:82:ed:f8:91:e5:7b:
         76:3a:17:6e:54:e5:9a:a8:18:b5:00:fa:03:1b:9e:22:69:9e:
         1a:39:05:d9:3f:98:51:65:eb:ba:96:7b:ba:bd:cc:f5:b0:92:
         17:2a:fe:8a:52:b8:b3:e7:69:6f:20:da:40:8f:35:43:93:0d:
         e6:d4:87:ce:fe:c0:4a:d1:85:6c:57:d7:28:24:7c:d3:e9:16:
         ab:df:46:0e:a9:44:14:08:6e:71:37:77:8c:70:f5:83:22:bc:
         08:78:4d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 23:02:46 2024 by rpki-client on console-fra.rpki-client.org