Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9707BE0CEE64AF76C09A5D93BCE5A8EB45CD4206.cer
File:                     9707BE0CEE64AF76C09A5D93BCE5A8EB45CD4206.cer (raw, json)
Hash identifier:          Kcv91oKqeA54SEYK+8kQ5BYajHUw21y89k43ykVUpro=
Subject key identifier:   97:07:BE:0C:EE:64:AF:76:C0:9A:5D:93:BC:E5:A8:EB:45:CD:42:06
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0403BF322C4C067B6997DB18EA92184B40BB01DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/1/9707BE0CEE64AF76C09A5D93BCE5A8EB45CD4206.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 13:35:11 +0000
Certificate not after:    Thu 03 Apr 2025 13:40:11 +0000
Subordinate resources:    AS: 52634
                          IP: 177.124.188.0/22
                          IP: 2804:d7c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 23:19:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:03:bf:32:2c:4c:06:7b:69:97:db:18:ea:92:18:4b:40:bb:01:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 13:35:11 2024 GMT
            Not After : Apr  3 13:40:11 2025 GMT
        Subject: CN=9707BE0CEE64AF76C09A5D93BCE5A8EB45CD4206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5e:ed:44:7d:dc:ad:dd:1a:82:c6:29:c6:c2:
                    dd:60:02:19:a3:af:b5:a7:66:8d:18:5b:cb:12:e7:
                    db:6a:7f:8b:9e:52:f1:c9:79:8f:40:01:14:ab:75:
                    20:eb:bc:f6:66:bd:6b:cd:01:46:32:7c:3c:81:50:
                    82:f5:83:1e:9b:d0:68:03:dd:dc:48:d9:74:31:a0:
                    9b:68:e4:95:09:33:b3:7b:0d:3b:a5:13:85:6f:5f:
                    8c:9b:6a:4c:48:b6:bb:b1:e6:ec:fe:31:21:d8:65:
                    25:f0:ae:1f:0e:85:06:4b:ea:af:c7:c1:a8:cb:90:
                    d4:1b:f3:7a:b7:12:9f:68:59:56:84:3b:cf:5b:8d:
                    92:05:9b:28:9b:97:2c:29:d9:fd:d7:d7:f2:82:de:
                    5a:37:2d:77:5b:b9:14:bc:9f:cd:bd:10:58:ec:65:
                    ed:1d:94:2e:7b:77:7a:7e:0d:3e:11:9e:6c:ab:f2:
                    44:37:0a:b2:b6:7c:74:ff:05:47:a6:4c:1b:1b:0c:
                    08:5f:8e:61:47:aa:9a:58:8e:4e:e5:09:48:88:d9:
                    6b:d5:4a:1a:f8:76:af:8e:9b:b4:05:96:9f:3a:9d:
                    65:e1:9a:0a:c5:41:d8:3a:5f:b8:bc:a5:25:21:bf:
                    9b:d9:41:f5:a1:01:2d:ca:32:21:f3:1f:6c:43:b8:
                    cd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:07:BE:0C:EE:64:AF:76:C0:9A:5D:93:BC:E5:A8:EB:45:CD:42:06
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/1/9707BE0CEE64AF76C09A5D93BCE5A8EB45CD4206.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.188.0/22
                IPv6:
                  2804:d7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52634

    Signature Algorithm: sha256WithRSAEncryption
         4e:b8:40:af:33:b3:00:e6:0e:26:b5:ca:6e:0d:79:bb:ef:2d:
         19:fd:a3:6a:5e:07:6c:8d:1c:4d:e1:86:5c:a4:8d:92:71:25:
         5d:1b:65:ea:5f:10:d0:41:b7:31:c0:a8:ac:67:f1:79:7a:07:
         8a:9b:6e:3f:e0:08:90:61:e5:2c:47:0a:24:e0:4b:19:ad:ec:
         24:6f:a6:58:2e:2c:43:bc:cd:5a:a0:db:8a:6c:c1:5a:bd:66:
         1b:90:07:09:92:d8:66:48:d6:7d:73:3a:ff:6f:f2:94:94:3c:
         b9:77:ea:41:37:f4:9b:a8:ec:84:75:52:8e:54:5e:b8:c2:62:
         34:8f:4d:af:ff:33:67:6a:b3:86:3a:36:b3:a5:06:68:ed:94:
         31:b8:78:e5:a8:91:3e:52:0c:9a:c7:3a:fd:32:dc:6d:aa:37:
         70:e2:1d:32:07:e9:cd:92:ce:fe:1e:21:00:26:05:3d:c8:4f:
         2d:cf:a0:a1:6a:d3:25:60:a4:23:79:78:78:fb:c5:c3:ea:09:
         14:66:02:38:f2:f1:16:30:f7:74:86:29:c4:86:5e:55:62:05:
         55:72:05:23:00:f1:7d:5b:10:16:7c:c7:17:2e:12:2b:0a:a7:
         25:23:3f:08:74:0e:fa:40:fe:a2:e4:e2:51:15:85:05:f0:85:
         58:a3:00:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 23:02:46 2024 by rpki-client on console-fra.rpki-client.org