Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer
File:                     9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer (raw, json)
Hash identifier:          TU2O6M2lFV5jgIiqjJbN1VUw2RAwuTkiTx5kRyo35bI=
Subject key identifier:   9D:B9:9B:4A:1C:D5:6B:1C:7C:10:4F:A2:5E:FD:E5:18:59:6F:D2:21
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7E44BD77B3DCD058D7C5BC2FB3FDF4909A1D0C30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 03:50:52 +0000
Certificate not after:    Thu 03 Apr 2025 03:55:52 +0000
Subordinate resources:    AS: 270899
                          IP: 177.91.228.0/22
                          IP: 2804:7328::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:44:bd:77:b3:dc:d0:58:d7:c5:bc:2f:b3:fd:f4:90:9a:1d:0c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 03:50:52 2024 GMT
            Not After : Apr  3 03:55:52 2025 GMT
        Subject: CN=9DB99B4A1CD56B1C7C104FA25EFDE518596FD221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0f:b3:6a:83:3c:de:76:e3:b9:c9:85:d9:b8:
                    12:55:f7:16:82:c4:c7:ac:ae:f6:71:1a:1f:a5:53:
                    f5:a4:68:71:68:f9:af:98:31:99:5e:f9:42:d3:d5:
                    94:90:ab:1f:92:60:dc:87:7b:9e:bc:d9:9c:6d:f3:
                    e0:89:70:cc:62:92:ab:d6:47:55:00:d7:17:8d:b7:
                    2b:68:e3:8b:19:2c:7f:e9:1c:c0:69:e3:17:f9:9c:
                    fe:1d:04:c7:3f:bb:34:32:08:fe:57:c3:d2:7f:ef:
                    41:16:7e:82:b0:fd:86:18:f3:f2:53:1f:c5:8f:23:
                    7e:8e:7d:31:d6:59:ca:9d:de:2f:90:31:b9:58:85:
                    c0:52:04:ed:a8:d3:a3:aa:32:e4:23:d7:b9:50:8d:
                    5f:29:7c:5d:a7:a9:99:24:df:e5:4f:29:5f:f0:ed:
                    77:db:86:9b:d3:2d:bf:21:9c:20:1a:9a:25:b4:c5:
                    4e:7b:a7:fa:77:83:98:9d:5e:9d:fe:93:d8:eb:cd:
                    b6:33:da:86:8b:ab:2f:fb:25:af:2b:f1:69:9b:c0:
                    19:78:86:cb:63:c7:56:72:90:68:11:ca:7f:2e:f6:
                    2e:17:0f:80:9b:f6:68:00:26:e8:a3:1e:83:4e:b3:
                    b2:7a:70:7a:52:56:8b:15:56:a8:2d:ef:d9:f1:f9:
                    37:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9D:B9:9B:4A:1C:D5:6B:1C:7C:10:4F:A2:5E:FD:E5:18:59:6F:D2:21
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.228.0/22
                IPv6:
                  2804:7328::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270899

    Signature Algorithm: sha256WithRSAEncryption
         65:ba:a1:d6:b6:66:a9:93:a1:09:51:b0:d8:18:45:59:67:d8:
         8c:09:9f:72:9a:89:03:cf:b7:08:ba:7c:60:4a:60:16:b5:7d:
         c8:6d:06:b3:e2:e4:bb:27:c2:5e:96:46:46:56:4f:ec:d8:23:
         8b:cf:43:df:5a:90:dd:4d:8a:c9:eb:c0:f0:96:72:58:25:dc:
         49:cf:40:30:75:94:5f:2d:49:7c:9a:55:78:74:6c:91:c1:d7:
         d0:54:80:e2:85:d4:5a:26:e9:3d:ff:ad:51:43:8f:fc:c2:4b:
         aa:31:74:ac:6b:93:f3:cc:34:5e:cb:62:70:55:b5:e4:04:37:
         9c:d6:4b:30:27:91:e7:c6:30:22:ba:d1:66:c5:66:8c:ab:8c:
         b4:b6:4a:d5:47:c9:ee:1b:91:02:4c:0d:7f:d4:ef:b0:8e:be:
         45:8a:c4:43:4d:66:a1:6a:d6:4b:e7:98:9a:5c:49:54:23:03:
         e4:db:ef:b1:6e:e8:63:8f:42:19:2b:99:ed:cc:8d:ed:5e:be:
         db:fb:c6:6d:73:bc:1b:84:aa:a7:2e:f3:f3:60:53:45:61:80:
         9b:17:07:26:ca:52:6a:30:0f:5e:c5:c3:63:85:51:9d:67:94:
         c9:1a:88:31:9e:6f:94:bf:85:0d:77:50:4d:07:89:d5:43:bb:
         09:7d:28:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:49 2024 by rpki-client on console-fra.rpki-client.org