Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E.cer
File:                     98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E.cer (raw, json)
Hash identifier:          ddwD1Wq6wzeR27wTOspeX0w34s1XJpwzRwD5jUfpmN4=
Subject key identifier:   98:C3:85:2C:5F:3D:C1:45:FD:71:BC:A9:2F:69:96:B5:B6:DB:A4:6E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2A4EEF269675EF7A4349747BD309EA4FC275AE4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 06 Sep 2024 22:18:47 +0000
Certificate not after:    Fri 05 Sep 2025 22:23:47 +0000
Subordinate resources:    AS: 270824
                          IP: 190.115.196.0/22
                          IP: 2804:71fc::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 00:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:4e:ef:26:96:75:ef:7a:43:49:74:7b:d3:09:ea:4f:c2:75:ae:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep  6 22:18:47 2024 GMT
            Not After : Sep  5 22:23:47 2025 GMT
        Subject: CN=98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9e:73:d2:94:8b:12:58:01:0d:3c:72:7c:67:
                    a8:13:dd:84:58:32:3c:9e:b5:9d:84:9c:c2:8c:e6:
                    6c:51:d9:69:ac:1e:71:1e:fb:8f:b9:15:fb:fd:76:
                    61:76:29:96:36:90:67:c9:56:8f:eb:7d:c2:4e:d8:
                    a8:e3:f4:bf:20:27:5d:2d:ee:ab:e1:01:c4:45:ee:
                    a7:12:bd:98:1c:6c:cb:86:b3:c0:2b:44:f1:4a:d2:
                    3e:cd:48:5b:17:c4:71:44:40:2f:a6:88:4c:c5:32:
                    4a:fe:b6:bc:8b:1f:e7:4a:13:9f:81:e0:09:84:30:
                    b8:d2:e8:1c:3d:dd:6f:dc:03:68:9d:e0:e8:bf:32:
                    e7:c5:31:e5:8c:84:a0:44:0b:aa:7f:3e:4e:4a:31:
                    e9:dd:fa:65:80:22:26:d5:1f:14:70:26:0a:e5:5e:
                    ad:e9:bb:eb:5c:08:b2:e8:0d:98:b3:3c:67:b2:a4:
                    da:99:0f:8b:51:74:8e:d7:c1:0d:fb:a2:69:c7:02:
                    ba:86:3d:b6:bc:71:ef:54:84:52:5f:b9:6d:31:86:
                    55:c8:82:6d:64:60:21:dc:dc:be:4a:ee:17:3c:ea:
                    aa:18:b8:b8:3e:bd:f7:ea:db:21:33:76:c2:41:b7:
                    c7:d9:df:0d:ec:32:9e:73:96:90:9c:3b:3c:7a:3c:
                    f2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                98:C3:85:2C:5F:3D:C1:45:FD:71:BC:A9:2F:69:96:B5:B6:DB:A4:6E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.196.0/22
                IPv6:
                  2804:71fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270824

    Signature Algorithm: sha256WithRSAEncryption
         3c:29:e7:f9:1d:18:f0:c6:e2:20:5d:eb:83:62:92:c4:d0:08:
         ba:be:9b:52:90:da:bd:4b:92:7a:7d:ea:85:a8:18:68:22:ac:
         08:a6:bd:4e:43:94:5d:f8:88:b8:8f:8f:7d:e9:dd:97:4e:2f:
         dd:44:a7:6a:1f:d5:39:1e:da:db:a7:ac:32:12:1f:4a:de:a4:
         50:c0:e2:11:8b:4d:4d:e6:8c:d5:35:66:ea:9a:3a:9a:72:20:
         55:74:cd:8e:b7:9d:b2:ae:86:47:1a:cb:8f:98:bd:e6:6f:e3:
         21:a2:cb:6b:6b:c3:ae:5e:d5:e8:66:9d:96:8c:4d:67:11:d6:
         ce:63:79:6b:2f:99:b3:23:e5:31:1f:f3:a1:29:19:cf:37:8f:
         51:68:30:2c:25:ce:c3:28:bd:93:fc:f3:32:80:5d:c1:a8:5d:
         51:a2:bc:0a:cc:dd:5d:f9:54:72:b5:05:3f:a2:d5:8a:03:19:
         bb:58:78:6b:82:b9:6c:7e:82:12:6e:8a:e7:e2:80:a8:76:52:
         33:52:7b:ad:b2:25:fc:fd:4d:3c:e2:b1:5e:30:ee:53:41:99:
         61:a6:26:85:20:3c:a0:0a:04:21:92:c4:92:3f:82:54:4e:7e:
         7c:b6:f6:dc:93:b3:a8:d2:08:13:f0:47:3c:63:28:ba:28:8f:
         ce:b1:16:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:16:49 2024 by rpki-client on console-fra.rpki-client.org