Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.cer
File:                     9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.cer (raw, json)
Hash identifier:          /vQPrRLNEZcSb0JTVKicMbSv3uJZX02nNtdymPA+B1g=
Subject key identifier:   99:65:B1:E2:93:1C:94:CD:A0:3C:B6:3E:F3:A6:CA:E3:3B:C1:5E:87
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2D1FBC0031558FBDFD158BB057B46F17B6A2BAA5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 18 Apr 2024 12:20:36 +0000
Certificate not after:    Thu 17 Apr 2025 12:25:36 +0000
Subordinate resources:    AS: 268292
                          IP: 45.237.4.0/22
                          IP: 2804:4ef0::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 02:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:1f:bc:00:31:55:8f:bd:fd:15:8b:b0:57:b4:6f:17:b6:a2:ba:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 18 12:20:36 2024 GMT
            Not After : Apr 17 12:25:36 2025 GMT
        Subject: CN=9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3b:95:74:d8:05:a7:5a:82:9f:ea:13:96:15:
                    b8:ad:44:30:67:ba:86:c9:88:08:a6:81:f2:a1:6d:
                    12:15:52:84:83:07:57:b1:1c:4a:b5:fe:f7:ea:06:
                    be:e7:22:a6:76:df:0b:e9:a8:99:12:e5:7c:dc:d5:
                    ba:65:b5:e8:2b:aa:2d:56:9b:26:1c:b4:cd:0d:66:
                    b8:43:31:05:84:fc:31:19:60:1b:f2:15:c1:ba:e4:
                    19:de:42:32:61:12:fe:eb:6d:a7:a8:33:aa:16:7e:
                    26:53:19:2e:92:a6:2f:96:a5:07:b1:d3:a2:ec:d2:
                    75:0a:59:d3:2e:7c:9d:2b:b0:72:c8:fa:a2:34:30:
                    47:a2:2e:aa:40:77:f5:36:7c:d8:43:d9:6b:bf:7f:
                    fb:08:af:ac:38:8b:0f:9b:09:7f:6e:7b:cb:80:7c:
                    4f:86:54:7d:5d:11:ac:91:d2:20:9c:03:57:e7:b2:
                    a1:5b:88:23:8f:d7:b2:06:cf:ea:1d:b9:b8:fc:ee:
                    b9:00:8b:59:dc:a0:f4:7c:ff:fa:27:1a:be:32:b2:
                    ba:9d:09:0c:60:29:26:f1:01:36:41:9e:95:32:57:
                    60:7e:28:45:4b:ca:5b:50:58:ea:f3:1c:cc:da:28:
                    1f:71:f9:79:b9:17:16:28:92:14:52:54:12:d4:78:
                    99:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                99:65:B1:E2:93:1C:94:CD:A0:3C:B6:3E:F3:A6:CA:E3:3B:C1:5E:87
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.4.0/22
                IPv6:
                  2804:4ef0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268292

    Signature Algorithm: sha256WithRSAEncryption
         01:88:82:1e:ed:93:43:45:77:1a:bc:b0:60:f6:40:95:a8:41:
         2a:22:c9:6d:33:bc:87:f8:67:03:ed:69:90:c3:27:c8:b9:ee:
         43:02:6e:57:88:c6:bc:9a:fd:48:bf:4f:1c:6e:90:b6:32:12:
         44:0e:ef:c7:b2:3a:1a:65:a9:ac:88:27:4b:3c:d6:71:eb:14:
         6b:e6:f7:24:25:f9:fb:cc:a8:66:f4:b7:fa:e4:a5:1c:a5:5c:
         50:3e:06:98:a6:48:43:9b:02:d2:3b:d7:c1:52:e6:35:c5:0a:
         0a:51:65:44:84:9e:6a:45:87:29:e7:b1:0f:7e:3c:d2:5e:8d:
         98:88:76:e8:26:c1:72:21:9f:60:19:2e:00:ab:78:01:c9:51:
         a7:dc:cc:7c:00:57:a3:08:14:f6:ae:db:92:6e:2b:9a:6f:33:
         0d:1b:f4:b9:5d:bf:eb:60:e5:9e:8b:bc:46:40:31:08:54:68:
         a1:90:ba:da:b4:d0:80:75:73:fd:79:0e:cf:d6:8e:44:c0:a5:
         0b:5c:99:8b:ad:be:a7:d5:16:f9:ba:5c:fa:47:95:96:5f:41:
         8e:39:49:41:35:79:72:c1:96:8a:0f:32:f6:b4:f7:27:51:39:
         a4:9d:cb:4f:ff:1e:a6:10:53:ab:39:fa:84:ec:56:52:2a:4f:
         b5:92:34:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:06:38 2024 by rpki-client on console-fra.rpki-client.org