Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9B0FDA073951168EEB28943672D529AFE023A2B0.cer
File:                     9B0FDA073951168EEB28943672D529AFE023A2B0.cer (raw, json)
Hash identifier:          Q7+tjgGDUPVViqCSgL5i4MjiI8b8W/ueojed0f4VlKI=
Subject key identifier:   9B:0F:DA:07:39:51:16:8E:EB:28:94:36:72:D5:29:AF:E0:23:A2:B0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       17CDC43EB0C46C64B8C4CEFD64C4CF241673597E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/1/9B0FDA073951168EEB28943672D529AFE023A2B0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 16:45:40 +0000
Certificate not after:    Thu 03 Apr 2025 16:50:40 +0000
Subordinate resources:    AS: 271694
                          IP: 187.111.124.0/22
                          IP: 2804:7f88::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jul 2024 14:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:cd:c4:3e:b0:c4:6c:64:b8:c4:ce:fd:64:c4:cf:24:16:73:59:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 16:45:40 2024 GMT
            Not After : Apr  3 16:50:40 2025 GMT
        Subject: CN=9B0FDA073951168EEB28943672D529AFE023A2B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c3:a8:4f:11:dc:35:5f:f7:e3:00:ea:8e:c2:
                    00:95:be:f7:9a:a9:b1:00:f4:f4:e5:9a:40:e3:f8:
                    04:59:b0:4a:cb:2e:3f:2a:ed:17:42:af:10:38:4c:
                    a5:6b:bc:af:22:97:be:19:56:1f:7b:ed:bd:b9:4c:
                    fa:e4:c8:17:c8:43:ad:9b:34:29:2f:d9:df:85:cf:
                    9f:68:ca:02:a3:1b:6b:1d:8d:84:36:86:86:67:b6:
                    5d:eb:82:d6:1d:bf:22:9e:36:e4:05:c0:de:9d:03:
                    8f:9c:96:3e:3e:3d:2b:bd:b3:c5:f4:d3:76:a6:9b:
                    48:c5:8e:e4:2c:d7:6a:68:96:83:8f:f0:df:79:6c:
                    75:e8:9a:9b:01:a6:1d:2f:31:fe:23:15:9e:e1:1a:
                    51:c9:d9:b3:97:44:2d:37:66:3e:36:59:48:7a:d1:
                    50:4e:fa:23:e2:4e:8f:0f:08:bb:63:65:62:ea:84:
                    86:e0:c0:4c:2f:75:bd:50:c3:49:ab:eb:51:d2:e6:
                    8d:7b:75:3a:3b:14:70:dc:06:0e:54:6f:90:91:62:
                    b1:ae:c9:d0:3b:9b:b8:59:99:2e:bb:19:8b:98:37:
                    c0:06:ec:95:f4:a6:9f:9d:4d:34:c1:ba:e6:1f:ae:
                    01:03:b9:85:ef:cf:cd:9e:a4:fb:f8:a7:17:22:b2:
                    c2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9B:0F:DA:07:39:51:16:8E:EB:28:94:36:72:D5:29:AF:E0:23:A2:B0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/1/9B0FDA073951168EEB28943672D529AFE023A2B0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.124.0/22
                IPv6:
                  2804:7f88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271694

    Signature Algorithm: sha256WithRSAEncryption
         96:62:93:43:a6:60:bb:0c:c9:8d:86:f5:f5:46:37:38:aa:e9:
         f5:bf:2f:73:b1:ef:e1:fc:5e:40:d1:d2:67:ed:ea:89:f7:e7:
         8d:8a:d6:92:af:e8:43:eb:c7:4d:42:f1:7d:e1:b5:94:17:b2:
         2d:97:b7:94:e8:cc:23:b4:c9:c4:31:45:f3:02:d9:be:e4:b8:
         6f:f5:80:3d:3f:9d:b8:ca:09:b5:92:11:33:7f:98:d0:f2:32:
         cc:f3:0b:2b:d9:62:ae:72:4e:90:bc:01:0a:bb:8f:01:f5:47:
         fe:7b:af:52:99:9c:fd:b5:53:70:7a:c3:18:01:fe:be:51:02:
         32:24:8b:47:e7:1e:8f:10:82:1f:82:a1:15:b6:87:38:96:20:
         ed:e3:6f:6a:d2:ef:b8:b6:39:d8:a5:59:a2:ba:a9:53:a7:53:
         4a:b7:f5:9f:d9:c9:fe:ee:d1:53:05:fd:40:4b:ce:d9:97:36:
         9b:aa:96:5f:52:6b:33:a6:98:12:61:59:da:01:fa:62:5d:93:
         f0:08:77:c1:2c:92:2a:28:71:47:fa:5c:06:36:a0:54:e9:e9:
         41:de:ee:3c:f4:6e:58:b7:e0:d2:03:a5:01:fa:89:78:55:61:
         fc:10:a7:0d:8a:41:94:aa:52:37:77:54:33:5a:cf:f0:0a:ac:
         31:43:95:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 12:36:15 2024 by rpki-client on console-fra.rpki-client.org