Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9C2E73CC95F1D482A4D9A31AD876FAF4B2753016.cer
File:                     9C2E73CC95F1D482A4D9A31AD876FAF4B2753016.cer (raw, json)
Hash identifier:          qd/JRgYyandEDh6sxPZKoKfgli7ffc5fd76DXY57F6U=
Subject key identifier:   9C:2E:73:CC:95:F1:D4:82:A4:D9:A3:1A:D8:76:FA:F4:B2:75:30:16
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       79B5173A7589D25F0AB085C4D9FDC143F9653BB5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/0/9C2E73CC95F1D482A4D9A31AD876FAF4B2753016.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 11 Apr 2024 12:13:21 +0000
Certificate not after:    Thu 10 Apr 2025 12:18:21 +0000
Subordinate resources:    AS: 266933
                          IP: 45.225.108.0/22
                          IP: 2804:4588::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 05:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:b5:17:3a:75:89:d2:5f:0a:b0:85:c4:d9:fd:c1:43:f9:65:3b:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 11 12:13:21 2024 GMT
            Not After : Apr 10 12:18:21 2025 GMT
        Subject: CN=9C2E73CC95F1D482A4D9A31AD876FAF4B2753016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:50:61:f6:c1:f0:7c:16:0c:4e:1e:6a:72:69:
                    74:7a:e0:8d:74:03:33:70:18:6d:36:5f:53:ad:ed:
                    bc:f4:61:46:a9:20:dc:47:13:a7:bf:a0:7a:df:7f:
                    68:68:d7:a2:6b:8e:b6:d5:e6:e6:c3:a1:f4:7b:7b:
                    54:bc:37:62:66:2e:17:e7:4c:9c:fb:93:19:28:32:
                    43:00:9a:06:8d:71:97:ba:34:6b:eb:b0:c2:5b:d9:
                    58:bc:8f:ee:6b:8c:54:f9:59:02:3c:98:b8:66:11:
                    9e:a6:83:0d:c6:82:55:32:b5:a2:4b:ae:6d:27:09:
                    05:9a:1b:c5:29:0d:16:52:17:08:41:b9:7b:78:2c:
                    24:8f:9e:17:36:9d:a6:46:d6:ff:c2:05:f2:25:4c:
                    bc:0a:99:b4:b8:09:18:47:e1:cd:01:1f:8e:4d:b7:
                    63:2a:fa:b9:79:07:e1:81:fb:f2:54:08:c9:1a:76:
                    75:0f:cf:9b:a2:89:13:3b:f0:c4:31:17:ee:dd:80:
                    99:01:da:26:7c:65:fd:b9:b2:2d:79:20:a8:ee:db:
                    37:9f:2b:b7:c2:db:19:b9:02:90:5f:83:78:e6:c3:
                    bf:8d:f3:fb:d0:30:9e:59:1d:ea:12:45:fd:bc:d1:
                    5f:dd:9f:52:d5:90:68:56:c5:d6:ec:fe:12:c3:cb:
                    5b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9C:2E:73:CC:95:F1:D4:82:A4:D9:A3:1A:D8:76:FA:F4:B2:75:30:16
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/0/9C2E73CC95F1D482A4D9A31AD876FAF4B2753016.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.108.0/22
                IPv6:
                  2804:4588::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266933

    Signature Algorithm: sha256WithRSAEncryption
         30:27:ac:b9:73:83:2d:53:16:57:e8:ca:f5:74:46:53:3d:f8:
         a5:6a:23:a3:30:0f:f7:ea:35:0b:4f:12:df:5c:08:a1:ee:55:
         cd:4e:9f:74:36:93:ee:bd:c4:bd:fb:d8:39:a8:d7:a7:29:a9:
         cc:41:08:dc:21:2c:88:ee:d5:70:fc:46:d1:d8:fe:00:95:2b:
         fa:4e:e8:ec:b3:2f:4e:65:dd:cf:36:7d:79:b9:dd:ea:a6:26:
         e1:41:11:44:82:02:ac:d5:4f:e7:42:e0:f6:1f:00:3d:fc:43:
         1b:9a:4d:46:53:54:5b:4d:6f:3d:4d:58:8e:1e:94:50:c1:26:
         d6:45:f7:bb:3a:ef:d6:70:21:b7:56:cb:a0:69:97:7a:82:26:
         6a:40:55:c3:54:a9:f5:ba:ee:f0:be:ed:e5:b9:f8:3c:02:a4:
         f5:44:5d:a7:12:d1:ed:d5:a2:49:2e:ce:ed:75:2b:a4:48:08:
         18:29:40:31:9b:b1:84:e5:23:11:03:bb:2e:66:ad:bf:e1:a6:
         de:c0:78:c3:a0:82:79:75:43:58:5d:34:19:e7:0a:9a:5b:05:
         c9:4b:97:bb:00:aa:fe:7b:2e:a8:23:a0:d7:f5:01:2c:be:85:
         6b:c4:43:0a:b0:0b:0b:05:ef:e8:d1:ba:ef:10:e9:57:02:84:
         67:94:de:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 07:41:05 2024 by rpki-client on console-ams.rpki-client.org