Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
File:                     9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer (raw, json)
Hash identifier:          eJItn6VPs7jVsI0cFPevKE9+TdgNweX3xS8OzgYHmRE=
Subject key identifier:   9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1C4303D8D0F4CE8A08E72883EEB04A1D840E5B2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.mft
caRepository:             rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 00:48:34 +0000
Certificate not after:    Thu 03 Apr 2025 00:53:34 +0000
Subordinate resources:    AS: 28594
                          IP: 200.218.240.0/20
                          IP: 2804:5208::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 01:38:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:43:03:d8:d0:f4:ce:8a:08:e7:28:83:ee:b0:4a:1d:84:0e:5b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 00:48:34 2024 GMT
            Not After : Apr  3 00:53:34 2025 GMT
        Subject: CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2b:af:10:13:8b:11:65:7a:04:45:ad:bf:43:
                    a4:93:f7:5e:16:52:bb:f6:7c:ac:a6:6c:f4:fc:d7:
                    ec:52:89:21:da:4a:e5:bc:7c:73:1e:0c:b9:de:3f:
                    bb:ea:b8:1a:34:7d:46:ad:6c:ae:f6:57:4c:2e:fc:
                    72:e7:d5:8c:7b:39:32:ce:16:5e:14:a7:e6:4d:60:
                    e0:88:45:da:0a:64:1e:90:0e:b9:30:47:ef:37:bb:
                    88:1d:b9:94:e1:9b:e9:e1:87:4c:3d:10:29:d4:d7:
                    87:d8:45:c8:38:1e:ea:f8:96:3d:6f:57:8a:01:14:
                    14:2b:37:3d:b7:6f:d3:32:d9:7e:13:6b:07:3a:82:
                    50:de:38:de:43:04:e2:33:f0:8c:19:37:40:f5:36:
                    b7:48:54:5d:86:60:61:ab:9d:12:90:90:d5:5f:17:
                    d7:0d:6c:a9:3a:df:aa:67:b8:11:f6:02:e6:c3:77:
                    0e:a3:5d:c5:ba:29:1d:48:a5:67:5a:49:3f:70:57:
                    ca:76:e3:b0:58:48:28:4a:3e:a2:6f:51:1e:49:94:
                    33:5a:54:33:aa:99:d6:da:40:41:6b:99:87:d6:2e:
                    60:dc:f9:9f:3f:77:f0:1c:f6:61:3e:b4:44:bb:b3:
                    65:02:91:f8:01:b4:53:69:20:a7:75:82:f9:ae:1c:
                    ff:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.240.0/20
                IPv6:
                  2804:5208::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28594

    Signature Algorithm: sha256WithRSAEncryption
         20:2d:cd:c9:de:31:ba:89:5b:7e:63:38:57:e9:9b:dd:d4:ab:
         e6:ea:1d:cb:50:83:15:5b:82:d2:e2:57:0e:2b:94:c5:d7:5e:
         7f:ba:7b:0a:ab:b9:10:25:50:c6:4c:6c:30:57:fc:d1:69:65:
         60:7c:6a:51:7a:b3:9b:fd:02:18:78:f2:05:21:b0:6e:88:27:
         f5:67:88:65:49:09:9d:1c:04:4d:83:78:4f:52:cb:3a:43:16:
         3d:bf:86:4c:98:d6:f8:64:65:98:79:e1:97:1d:63:9c:b7:b9:
         71:95:79:c3:6f:47:e3:af:e6:1d:93:33:f4:8e:c8:0b:ac:ed:
         8a:76:91:f6:e5:38:21:84:39:c0:97:4c:2f:7e:bc:94:6c:00:
         f2:0f:94:6a:b2:68:36:5e:49:ca:ed:f9:01:f3:ec:f5:e3:0f:
         70:09:e8:43:b7:85:de:34:34:af:1d:8b:0b:09:cf:32:f5:00:
         06:fd:cb:61:26:c9:57:9e:b9:0f:ff:a6:a0:a5:02:39:89:ff:
         92:98:1b:d3:ff:b6:9d:ed:9a:e2:78:21:c5:82:2c:2b:97:2e:
         b2:c6:2a:6e:43:59:0e:b8:a6:5f:90:0c:eb:39:03:2a:cd:dc:
         0c:83:c2:d8:42:9b:95:07:0c:e5:f8:bd:0b:27:7a:18:e6:a3:
         46:f5:eb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:01:09 2024 by rpki-client on console-ams.rpki-client.org