Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9E303FEF2BC6F34D7B2988B806A0BEAAF07DC1FF.cer
File:                     9E303FEF2BC6F34D7B2988B806A0BEAAF07DC1FF.cer (raw, json)
Hash identifier:          wt93SxjftEKSYHPISPP/xpGgUslospmCqTAweqX1gb8=
Subject key identifier:   9E:30:3F:EF:2B:C6:F3:4D:7B:29:88:B8:06:A0:BE:AA:F0:7D:C1:FF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3DA7A6B379B2C519DB2C4AB17EDD329A6BE27062
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ft8iia2we44ZUNaXP16s7VQ7bTCRuqUk4TnnR43hTsd8/0/9E303FEF2BC6F34D7B2988B806A0BEAAF07DC1FF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ft8iia2we44ZUNaXP16s7VQ7bTCRuqUk4TnnR43hTsd8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Nov 2024 13:44:30 +0000
Certificate not after:    Tue 04 Nov 2025 13:49:30 +0000
Subordinate resources:    AS: 269668
                          IP: 45.191.28.0/22
                          IP: 2804:6814::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 00:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:a7:a6:b3:79:b2:c5:19:db:2c:4a:b1:7e:dd:32:9a:6b:e2:70:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  5 13:44:30 2024 GMT
            Not After : Nov  4 13:49:30 2025 GMT
        Subject: CN=9E303FEF2BC6F34D7B2988B806A0BEAAF07DC1FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:3b:da:00:da:5d:51:5a:62:2b:c7:9a:78:7c:
                    bc:17:61:15:6a:af:85:ac:7c:68:47:b0:82:11:fd:
                    87:56:3b:df:b3:e8:ea:74:ed:36:1a:6a:98:ef:ff:
                    76:0c:a7:65:ef:43:be:ec:be:69:63:4f:6a:0a:a0:
                    db:4c:66:a0:c1:e3:6b:3d:fb:66:00:f4:6d:2e:47:
                    70:bb:5a:e6:d7:b3:c4:89:f5:32:22:50:a2:e6:71:
                    cb:94:43:68:ed:ba:26:1d:9c:b8:f5:a4:17:ef:93:
                    bb:c5:91:60:32:b1:25:11:f5:eb:c9:a4:91:f2:ac:
                    10:68:ec:46:ad:31:c2:ad:d8:d4:34:66:fb:07:d4:
                    6f:4b:3f:4f:95:83:d6:ec:c2:3b:51:23:ef:81:41:
                    fa:b0:5e:1a:20:4f:dd:aa:20:ec:17:a0:ac:c7:a9:
                    a7:43:d9:9f:17:02:0a:38:14:5d:e5:87:aa:08:d7:
                    d7:2d:0a:8e:14:b0:bb:ea:67:73:ac:0b:8e:85:cc:
                    99:95:9a:9f:3a:5c:b0:79:eb:3d:8c:15:3a:78:4c:
                    38:33:00:d0:48:9d:83:c3:1d:47:69:36:3f:90:3b:
                    2e:c4:a6:cd:91:9b:28:72:ae:47:2a:d1:55:91:01:
                    9e:0c:a9:4a:5d:cf:b0:f7:f7:e4:45:92:e7:de:b0:
                    b9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9E:30:3F:EF:2B:C6:F3:4D:7B:29:88:B8:06:A0:BE:AA:F0:7D:C1:FF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ft8iia2we44ZUNaXP16s7VQ7bTCRuqUk4TnnR43hTsd8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ft8iia2we44ZUNaXP16s7VQ7bTCRuqUk4TnnR43hTsd8/0/9E303FEF2BC6F34D7B2988B806A0BEAAF07DC1FF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.28.0/22
                IPv6:
                  2804:6814::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269668

    Signature Algorithm: sha256WithRSAEncryption
         4e:90:4c:ae:9a:52:f5:70:39:1f:4f:81:4e:66:e9:9f:57:9e:
         fb:ab:9a:11:97:cf:00:38:7a:95:ba:7a:fc:2d:a6:60:c7:e1:
         cb:ab:53:90:8c:3e:49:7b:73:cf:ee:46:84:7a:b3:c6:b6:58:
         d7:07:6e:06:04:0d:1b:6a:9a:69:8e:ef:4f:ed:b5:51:d9:db:
         30:b9:a7:3e:3c:8e:14:16:61:eb:c9:33:ea:37:36:5b:e4:1f:
         44:f4:23:9e:8b:37:d2:84:aa:00:3e:68:e8:99:8c:27:6a:27:
         d5:f9:5d:d3:86:19:f2:03:8c:29:4c:15:c6:f8:01:06:07:c6:
         3b:35:72:42:bf:43:99:c5:f8:65:2c:d7:62:ef:2c:ee:dc:3a:
         01:e9:40:88:23:c7:0a:cc:a5:4f:44:81:eb:9d:e8:79:9d:4c:
         b5:9e:9e:b1:44:be:f0:b8:c8:f4:e9:ed:0b:bd:5a:77:e4:82:
         01:a5:1d:f8:57:29:83:4e:d3:68:e6:e4:71:55:d2:eb:f1:33:
         ab:b4:60:cc:d7:fb:8c:45:28:e5:e2:4b:b0:45:09:50:0e:e6:
         a9:55:77:f0:7e:4a:bd:22:da:a2:6d:1c:d1:c0:45:63:9b:44:
         64:d3:8a:9d:e4:37:fb:fd:9a:a0:e5:aa:ba:25:73:f0:03:35:
         40:d4:da:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:16:50 2024 by rpki-client on console-fra.rpki-client.org