Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer
File:                     9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer (raw, json)
Hash identifier:          Z7l8aMcaLcadko1GhT0KVwE6lEZVrB9TlD8Og4G76Kw=
Subject key identifier:   9C:96:A5:BD:45:B0:FB:8E:B4:DC:60:35:24:F9:AF:E8:41:D3:0D:5A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       199C8A3E2414333A23A8D984924B21301CE91C9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 02 Jul 2024 17:39:19 +0000
Certificate not after:    Tue 01 Jul 2025 17:44:19 +0000
Subordinate resources:    AS: 263586
                          IP: 132.255.16.0/22
                          IP: 138.117.64.0/22
                          IP: 168.228.104.0/22
                          IP: 177.155.88.0/21
                          IP: 2804:f74::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:9c:8a:3e:24:14:33:3a:23:a8:d9:84:92:4b:21:30:1c:e9:1c:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  2 17:39:19 2024 GMT
            Not After : Jul  1 17:44:19 2025 GMT
        Subject: CN=9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a7:a6:30:ff:5f:db:6f:35:cb:cc:da:b9:87:
                    25:8f:97:19:bd:0f:66:c3:94:1d:5b:a0:8f:c2:61:
                    0f:e0:40:96:c7:65:2b:49:a7:01:a3:f3:9f:ee:0a:
                    48:a1:60:d1:07:f2:f1:be:2e:f8:63:d1:03:55:fb:
                    98:1b:14:c9:ef:f9:38:35:32:46:80:9a:42:61:cb:
                    90:1d:74:c8:b8:2f:e8:dc:c7:61:12:52:c2:25:15:
                    f6:30:5d:e7:f6:e4:7b:14:13:c7:57:d6:dd:e7:e4:
                    a8:18:75:3e:8c:aa:2b:63:7a:02:fd:c2:58:e9:50:
                    88:37:c8:d5:4e:1e:19:94:da:f0:87:b5:cc:35:e3:
                    87:80:72:c0:30:a4:08:78:72:e2:75:c4:fb:60:d3:
                    95:1b:62:7a:cc:96:08:c4:14:c3:91:25:f3:26:06:
                    48:32:bf:d8:af:39:d4:a1:28:31:ca:ce:5d:92:84:
                    64:ff:41:e7:f6:98:ce:86:9c:50:0a:85:4e:16:32:
                    bf:2b:75:fb:d3:44:10:14:86:64:62:44:b6:24:46:
                    a0:fe:9b:bb:bc:b2:e5:53:d6:16:f4:02:6f:d7:c5:
                    3e:53:1e:f3:70:89:5c:5e:51:36:98:18:d8:4f:c9:
                    69:64:81:27:5d:11:a2:6d:62:b1:73:41:c8:20:91:
                    cf:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9C:96:A5:BD:45:B0:FB:8E:B4:DC:60:35:24:F9:AF:E8:41:D3:0D:5A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.16.0/22
                  138.117.64.0/22
                  168.228.104.0/22
                  177.155.88.0/21
                IPv6:
                  2804:f74::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263586

    Signature Algorithm: sha256WithRSAEncryption
         8e:fa:29:c7:fb:e5:d9:cc:f2:fa:90:64:5f:44:bf:b1:a9:96:
         2a:64:90:8b:74:2b:88:93:ca:0a:b7:51:40:36:01:fc:60:18:
         b4:18:20:2c:0f:e9:22:b7:27:80:69:01:64:38:69:45:7b:bb:
         64:8e:0c:4c:79:e5:fc:2f:1e:3e:1e:5c:86:eb:b9:d9:73:d9:
         47:ba:90:83:20:5b:e5:4f:c7:8d:0d:0f:e8:d2:ae:3f:3d:02:
         02:2f:c0:de:0b:d7:98:d7:a2:5c:08:17:6e:6a:28:c4:81:2c:
         8f:c2:10:4f:68:93:b0:ec:cb:be:fe:54:e3:2c:61:7d:64:2c:
         93:86:61:7b:f5:72:7b:dd:a5:6b:2e:cc:f6:1b:bf:e8:8b:1c:
         30:fe:e5:ac:58:e2:49:8c:1c:e8:f6:21:a1:e8:68:9c:61:3d:
         e5:e2:43:b7:19:a3:90:fd:59:74:65:e6:64:4a:87:a4:3b:04:
         05:7d:5a:a1:00:28:8d:f9:c5:b2:da:7c:73:f3:a5:0e:33:3c:
         c6:d8:01:41:13:48:b6:76:23:04:e4:a9:2d:dd:e1:54:fc:20:
         51:ef:a1:4d:7a:5f:da:45:be:f9:b7:ef:dc:af:27:00:92:b9:
         81:4f:da:8a:b5:b7:9d:6d:ce:8a:fe:0e:8e:7f:6c:8f:95:f6:
         b4:93:49:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:44:15 2024 by rpki-client on console-ams.rpki-client.org