Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D.cer
File:                     9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D.cer (raw, json)
Hash identifier:          cq7DcZvQFWixK/T6gP8ha+3JBOmwXhX5ltnkUV2NMJE=
Subject key identifier:   9A:3E:45:4B:6B:C1:DD:C0:42:2A:9E:4D:F4:D5:1A:58:7E:17:34:1D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       06599FC02841CE682A6C1EE2D11EB1C8E8F0D1A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/1/9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 31 May 2024 17:40:39 +0000
Certificate not after:    Fri 30 May 2025 17:45:39 +0000
Subordinate resources:    AS: 52660
                          IP: 177.66.248.0/21
                          IP: 2804:c04::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:59:9f:c0:28:41:ce:68:2a:6c:1e:e2:d1:1e:b1:c8:e8:f0:d1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 31 17:40:39 2024 GMT
            Not After : May 30 17:45:39 2025 GMT
        Subject: CN=9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4e:5a:21:32:d3:7c:79:ca:4b:b5:5c:2c:46:
                    ff:da:ab:68:0b:0f:0f:27:a2:27:cd:43:b0:0e:08:
                    61:87:8e:ff:bd:c5:5a:e4:3c:4c:d2:79:bd:36:7e:
                    8c:62:c4:33:09:15:36:b0:2c:a9:ed:88:45:86:ed:
                    b2:66:06:ff:28:f3:6e:fc:d1:be:56:6e:b3:b5:29:
                    bf:b2:a7:54:72:f0:4b:65:82:6d:0c:c9:15:b9:c2:
                    8b:b1:c2:2c:83:3a:a8:6c:c1:40:dc:1d:cc:37:a6:
                    8d:35:5c:23:72:32:45:70:3c:9c:87:a3:4a:e2:d5:
                    5f:66:9f:e7:3f:9c:b3:55:16:81:f2:04:87:dd:40:
                    30:1d:2a:aa:66:c5:57:ce:a7:87:81:5d:3a:73:8f:
                    e5:0f:3c:01:30:2a:ac:d1:27:94:26:30:c8:a1:4d:
                    e3:52:07:a5:09:d2:c4:f4:f3:7f:cf:9e:76:e5:1b:
                    84:d0:41:b3:0a:5f:28:44:a5:e7:0e:2d:f2:6c:ec:
                    f0:e6:bb:2a:95:d6:f5:30:1d:0b:0c:78:cc:81:6b:
                    7b:36:5c:52:0a:e7:68:3d:ab:93:81:0f:ef:76:73:
                    cf:49:c0:55:7f:92:72:09:b9:a0:72:95:b2:b6:11:
                    ae:67:75:4b:b4:e0:7c:c9:4b:76:90:7a:7a:89:c5:
                    95:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9A:3E:45:4B:6B:C1:DD:C0:42:2A:9E:4D:F4:D5:1A:58:7E:17:34:1D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/1/9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.248.0/21
                IPv6:
                  2804:c04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52660

    Signature Algorithm: sha256WithRSAEncryption
         22:32:7d:ef:d1:f6:ae:f0:cb:7c:70:49:8e:37:92:9b:eb:22:
         7d:2d:7b:d4:b4:2a:76:fc:af:09:7e:f3:ef:ba:05:84:ba:ec:
         c4:8e:12:3c:f8:68:9e:03:cc:86:a5:1b:d2:72:6a:0d:e7:b7:
         b4:51:4c:ec:6d:d3:26:93:b6:a3:9e:8c:ea:7a:70:ca:6b:fd:
         28:c3:19:a9:ce:f8:04:be:ee:0a:38:d1:e2:31:b8:91:b7:10:
         49:70:41:89:dd:fd:e2:4c:1c:ae:16:f2:cd:f0:ec:eb:ed:45:
         c1:6d:1d:2d:83:b7:ba:2c:f0:e4:b7:6f:a2:b7:58:d6:d6:27:
         54:94:59:82:2b:4b:44:e0:87:97:22:3a:2e:2c:dc:02:ab:e7:
         7b:a0:27:f2:06:31:06:f3:3f:3c:63:02:69:d8:82:7b:8e:73:
         2b:66:41:39:c0:8c:51:d3:87:8d:4f:2b:ae:a3:8b:ea:19:93:
         48:06:d4:28:50:a2:52:d2:05:39:50:92:44:26:fa:30:f1:c9:
         d4:10:66:f9:9f:b3:3e:12:c4:2a:ca:0e:41:2a:ac:bf:4c:24:
         6a:46:83:97:8d:eb:76:12:bb:fb:0f:ee:79:36:7f:71:4e:34:
         11:31:df:5e:90:2c:de:82:e6:48:cc:18:57:fa:c2:ba:ab:5d:
         1c:0c:dd:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:44 2024 by rpki-client on console-fra.rpki-client.org