Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9C94842B2928FAED319D3BB427B8BDD7D2B246FF.cer
File:                     9C94842B2928FAED319D3BB427B8BDD7D2B246FF.cer (raw, json)
Hash identifier:          DhSMcT7HI/u8NdGDpBHT41luwiwJbJSLyATu/aeNKRQ=
Subject key identifier:   9C:94:84:2B:29:28:FA:ED:31:9D:3B:B4:27:B8:BD:D7:D2:B2:46:FF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6044C836B75D18601D3F5AD913639FC1B5D76492
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/1/9C94842B2928FAED319D3BB427B8BDD7D2B246FF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 10:33:38 +0000
Certificate not after:    Thu 03 Apr 2025 10:38:38 +0000
Subordinate resources:    AS: 265143
                          IP: 143.255.92.0/22
                          IP: 2804:2b40::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 23:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:44:c8:36:b7:5d:18:60:1d:3f:5a:d9:13:63:9f:c1:b5:d7:64:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 10:33:38 2024 GMT
            Not After : Apr  3 10:38:38 2025 GMT
        Subject: CN=9C94842B2928FAED319D3BB427B8BDD7D2B246FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:cc:06:34:ef:fd:be:83:45:48:5c:d0:27:ab:
                    ca:b2:e8:d0:d9:3b:5e:01:de:a7:1b:f1:36:be:a1:
                    d5:58:a3:85:b5:5d:b1:36:a3:f7:7e:14:f8:a1:7d:
                    34:fe:d9:14:7d:e5:df:33:5d:2f:26:63:3c:b8:1e:
                    80:f4:04:fa:54:53:52:8a:3a:74:e9:3f:16:9a:b5:
                    7f:40:a3:15:ad:8e:e5:aa:29:a5:76:e1:f5:b9:19:
                    0c:5c:a8:97:44:a3:fd:db:75:42:8a:44:35:e6:88:
                    1b:61:19:a9:f0:3c:a7:bb:2e:34:1a:15:de:d8:e1:
                    22:67:8f:08:a8:8f:b4:59:a1:e4:76:cd:1f:d7:1e:
                    a3:9b:19:29:c6:f9:68:68:06:d4:dc:22:51:8c:dc:
                    88:56:95:58:db:c8:dd:fb:b5:5e:5c:63:6b:a7:c3:
                    5c:c7:5b:7d:c3:41:3e:99:14:9c:d7:7e:e2:ee:eb:
                    cf:35:1d:03:b9:c3:cd:e0:b0:22:e1:f4:bd:b1:34:
                    4d:f7:15:56:ba:49:c0:23:43:10:ca:be:cb:03:1f:
                    3a:5b:45:29:aa:fa:20:75:75:30:4a:66:14:53:93:
                    f2:0e:df:49:f2:9d:88:c9:70:d6:89:46:1d:de:20:
                    18:dd:19:fe:e9:da:b3:b0:58:f0:39:6e:0f:2e:ff:
                    96:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9C:94:84:2B:29:28:FA:ED:31:9D:3B:B4:27:B8:BD:D7:D2:B2:46:FF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/1/9C94842B2928FAED319D3BB427B8BDD7D2B246FF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.92.0/22
                IPv6:
                  2804:2b40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265143

    Signature Algorithm: sha256WithRSAEncryption
         3e:4c:33:b9:a3:31:b2:b4:28:34:07:c6:2f:f1:54:e9:91:4a:
         7d:a6:10:f7:05:dc:f4:8e:fe:c7:7e:e8:d7:ec:5c:d7:9d:c6:
         ce:40:86:ed:b0:12:36:f1:26:5a:b2:63:b9:5b:c1:3f:cd:6f:
         cd:f0:1f:90:a6:be:f7:04:09:c8:b0:5d:f2:a0:62:83:df:b4:
         f4:8d:d7:77:de:da:4f:5e:26:7b:72:d8:99:0b:33:26:13:aa:
         04:04:ec:9e:97:2e:dc:5a:70:77:c9:18:44:12:e7:fa:7b:b6:
         05:e2:8b:b8:0c:1e:f8:83:ce:3d:1c:65:04:de:58:af:c9:94:
         bd:20:aa:e0:1a:f8:21:51:91:96:ee:ca:26:02:e5:67:6e:4e:
         73:73:ea:1e:19:f9:ca:cf:09:b1:f3:03:29:4f:5a:56:9c:ea:
         4c:32:02:0c:f6:76:56:40:c0:73:01:f7:c6:f0:67:7d:6d:73:
         e6:2d:56:2b:7b:48:da:e8:8d:9d:74:df:32:c2:cd:52:fb:70:
         5e:25:2a:c2:09:38:5e:81:17:b8:6e:5d:1b:ab:c8:7e:8d:d3:
         7d:b3:6e:8d:30:ce:61:e6:84:67:34:82:e6:13:a4:33:16:97:
         b3:bc:60:14:34:61:79:f5:58:37:b7:55:23:2b:ca:8c:fa:59:
         af:e7:37:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 00:29:19 2024 by rpki-client on console-ams.rpki-client.org