Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/996B4ACF19CC682F1B6E4549A9A3A004BC03137D.cer
File:                     996B4ACF19CC682F1B6E4549A9A3A004BC03137D.cer (raw, json)
Hash identifier:          SWNSjaWMNQRBskF4BT+zc5htBD+Y+g6kcRyGW2dzTbw=
Subject key identifier:   99:6B:4A:CF:19:CC:68:2F:1B:6E:45:49:A9:A3:A0:04:BC:03:13:7D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       18CCC40F75C258AF6757CC8A3B1D65A897DDBD29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/996B4ACF19CC682F1B6E4549A9A3A004BC03137D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 12 Sep 2024 15:03:26 +0000
Certificate not after:    Thu 11 Sep 2025 15:08:26 +0000
Subordinate resources:    AS: 271478
                          IP: 45.236.72.0/22
                          IP: 179.0.120.0/22
                          IP: 2804:7c24::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:cc:c4:0f:75:c2:58:af:67:57:cc:8a:3b:1d:65:a8:97:dd:bd:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 12 15:03:26 2024 GMT
            Not After : Sep 11 15:08:26 2025 GMT
        Subject: CN=996B4ACF19CC682F1B6E4549A9A3A004BC03137D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9b:40:a5:7e:6e:43:59:86:f4:54:80:b8:1a:
                    19:7e:c5:17:15:c7:ba:59:fc:38:4e:c3:1c:d0:57:
                    10:a6:84:84:7f:19:56:fe:c5:4a:20:e3:e0:f6:07:
                    04:78:4a:91:dd:3a:1f:1e:67:c3:cc:3d:41:05:46:
                    48:69:5b:c8:b8:2c:b8:96:e2:e8:4c:88:77:4e:41:
                    70:a7:83:4f:b3:06:e9:76:eb:96:b8:cb:f6:37:8d:
                    01:1c:ef:2a:4f:51:a8:19:d9:f5:3b:13:c1:ca:84:
                    a4:1b:ac:0b:8b:b1:a3:1f:0b:e3:a8:73:39:67:67:
                    a3:85:6f:fa:30:ee:c8:ca:a2:06:c1:ae:e2:0d:7a:
                    47:fa:4e:97:6e:08:7e:52:c6:aa:12:97:aa:83:fa:
                    0f:69:a8:78:5f:6d:fe:d0:23:fc:ae:7a:7b:89:0d:
                    a2:c1:23:14:6f:e6:2b:ec:3a:d6:35:1d:6a:20:c3:
                    ed:94:cf:2d:d2:de:bd:19:9b:6a:d3:aa:e4:6d:64:
                    39:e5:b9:7b:d5:7a:5a:db:87:a0:02:8e:a1:61:0f:
                    9a:aa:b5:d3:d7:b7:3b:95:b8:04:56:f6:f3:e3:11:
                    e4:cc:9f:32:b8:41:78:ab:24:d4:17:42:5d:3b:47:
                    fc:0f:74:c0:ad:80:50:21:1a:61:9a:79:a6:f1:4d:
                    f4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                99:6B:4A:CF:19:CC:68:2F:1B:6E:45:49:A9:A3:A0:04:BC:03:13:7D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/996B4ACF19CC682F1B6E4549A9A3A004BC03137D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.72.0/22
                  179.0.120.0/22
                IPv6:
                  2804:7c24::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271478

    Signature Algorithm: sha256WithRSAEncryption
         0d:2a:c6:fc:ec:08:8e:08:05:f9:79:5e:7c:9d:26:69:8f:e7:
         5f:0f:b5:32:0f:0b:e0:cf:a2:87:89:cd:91:3a:3a:77:3f:26:
         01:59:bb:26:6a:3f:c9:54:62:ec:64:15:5c:76:83:0c:ec:28:
         c4:c5:b9:84:c0:fc:bf:48:04:59:f6:46:88:aa:10:f2:79:a1:
         28:e5:b1:32:fc:09:83:22:58:4a:cf:6e:11:24:6f:a8:39:fd:
         3e:15:19:2f:c3:87:8a:f6:ea:26:53:82:0d:1b:de:0a:ea:a0:
         f4:5c:c7:96:68:d3:d0:28:4d:7d:1b:27:8d:8e:11:d9:93:5c:
         a7:7e:31:9a:1f:bf:ce:5a:14:91:d1:d5:83:c0:f4:94:99:d7:
         ba:e3:16:db:b6:9e:9c:cd:96:fe:8a:2b:15:df:89:a3:36:56:
         b2:d7:50:73:7e:16:6f:af:b0:52:84:84:b5:c5:3d:b1:1e:ff:
         b6:28:19:d8:6a:00:78:68:8d:bc:91:44:30:b3:e6:97:e5:2c:
         1f:dd:67:f5:5c:7c:38:a6:49:69:32:f4:96:84:69:02:6d:83:
         2d:19:c6:33:64:4d:15:75:a0:c0:b7:ee:41:2d:38:70:21:cf:
         ca:2e:08:9c:36:c5:85:2c:35:15:45:c4:27:09:d3:ca:88:49:
         26:33:c8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:45:16 2024 by rpki-client on console-ams.rpki-client.org