Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.cer
File:                     98525FF70BD67C78C36BE3190E3463098E95DF2C.cer (raw, json)
Hash identifier:          vwA1z5C/ryNUsE7YnK0qIMBxxe3F35/R5AOnpKUzHAs=
Subject key identifier:   98:52:5F:F7:0B:D6:7C:78:C3:6B:E3:19:0E:34:63:09:8E:95:DF:2C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0F9614F6BB9C69EC4E18E89085F130C617BB17C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 23:12:37 +0000
Certificate not after:    Wed 02 Apr 2025 23:17:37 +0000
Subordinate resources:    AS: 266063
                          IP: 45.4.104.0/22
                          IP: 2804:39fc::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 01:38:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:96:14:f6:bb:9c:69:ec:4e:18:e8:90:85:f1:30:c6:17:bb:17:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 23:12:37 2024 GMT
            Not After : Apr  2 23:17:37 2025 GMT
        Subject: CN=98525FF70BD67C78C36BE3190E3463098E95DF2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3d:12:c7:84:64:84:4d:77:e4:f4:e2:db:78:
                    98:53:b4:aa:44:85:38:c5:5f:71:43:81:2e:3e:33:
                    86:d3:a6:f4:55:f2:29:82:0e:61:5c:02:f3:d6:3a:
                    11:6e:ed:d1:77:c9:d9:d8:49:b0:86:ee:72:85:f7:
                    35:10:96:16:c1:49:18:81:10:19:bd:05:38:27:be:
                    16:47:de:9a:4d:d2:77:59:a0:c0:a0:dc:8a:f8:2a:
                    64:b6:bb:13:5e:fa:6e:02:1e:58:66:80:5e:33:84:
                    4e:c8:a5:91:06:e7:6b:db:84:0b:cd:d0:bf:7d:24:
                    08:f2:67:07:9b:4d:87:4f:fc:69:dd:dd:ec:91:67:
                    52:bd:b1:02:16:d6:ea:b2:ff:18:36:82:66:f4:5c:
                    58:18:dd:53:0f:8d:6c:2e:53:eb:eb:d4:4f:b8:3c:
                    f3:7a:cf:eb:22:ce:c2:c4:33:30:54:f8:03:4a:b4:
                    e4:2e:c9:e0:08:cb:dc:15:73:d4:e7:2f:98:26:59:
                    f1:67:44:e4:f5:ca:63:a0:5b:2b:47:00:f4:7c:f9:
                    d1:90:e0:67:95:2f:ae:64:e1:66:95:57:94:48:de:
                    10:b3:40:5b:9f:f6:94:e0:1a:db:92:44:53:a4:6c:
                    a4:16:05:b8:b4:b7:94:a3:9c:ba:65:59:61:cb:19:
                    d1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                98:52:5F:F7:0B:D6:7C:78:C3:6B:E3:19:0E:34:63:09:8E:95:DF:2C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.104.0/22
                IPv6:
                  2804:39fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266063

    Signature Algorithm: sha256WithRSAEncryption
         c8:be:5c:fc:68:0b:ea:0f:39:5c:ae:a3:cc:c1:f2:46:73:d8:
         2d:dd:61:7e:6a:e3:f8:d1:33:17:e6:7b:3d:be:19:5f:60:73:
         c9:a0:1c:e0:9d:e8:1d:54:8e:e4:6c:74:5f:88:6b:1c:d7:72:
         da:da:c5:5f:b7:f8:3e:af:e5:4a:43:70:77:68:ff:5e:8e:c0:
         c4:fb:23:d3:56:d5:60:5f:80:e2:7b:22:14:3f:d4:f5:66:d2:
         38:48:e8:8f:88:ab:7d:2a:46:5d:a0:90:14:bf:6b:56:fd:a9:
         91:34:55:2a:2c:3e:dd:b6:45:39:56:c7:c4:91:b1:db:d6:cb:
         18:f0:b9:2d:e6:51:de:b4:92:72:3c:5c:ad:f1:0e:1e:db:29:
         d5:5e:84:e1:7e:8e:3a:b8:fb:45:a0:27:f3:74:75:9c:44:e7:
         e6:c9:06:cd:91:2a:4e:d7:2a:a5:a3:61:52:db:e5:1a:00:33:
         12:10:f5:c7:95:53:be:a4:2f:25:99:92:c6:92:7d:e7:15:94:
         ba:67:27:e6:df:d3:c5:be:19:d2:db:cb:9a:a6:0a:b4:03:63:
         63:39:96:25:a0:ff:6a:df:e8:e7:a8:e0:08:2f:d1:70:8b:22:
         44:10:8d:0e:e9:04:6b:49:0d:c3:67:fb:21:5b:28:f7:ab:13:
         9a:e5:8b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:01:09 2024 by rpki-client on console-ams.rpki-client.org