Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A3C4E7D204362B3A03176ACF884FC0B91E9DFE1C.cer
File:                     A3C4E7D204362B3A03176ACF884FC0B91E9DFE1C.cer (raw, json)
Hash identifier:          8kngN1aNOyAykEGwethbbSCk8/lbOrZ97AoSV1Y9suw=
Subject key identifier:   A3:C4:E7:D2:04:36:2B:3A:03:17:6A:CF:88:4F:C0:B9:1E:9D:FE:1C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3F348562F8004F5F1AD245D4630FF68AC2364D01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/A3C4E7D204362B3A03176ACF884FC0B91E9DFE1C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 30 Aug 2024 20:12:22 +0000
Certificate not after:    Fri 29 Aug 2025 20:17:22 +0000
Subordinate resources:    AS: 262644
                          IP: 167.249.12.0/22
                          IP: 177.86.248.0/22
                          IP: 187.17.208.0/20
                          IP: 2804:2a64::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:34:85:62:f8:00:4f:5f:1a:d2:45:d4:63:0f:f6:8a:c2:36:4d:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 30 20:12:22 2024 GMT
            Not After : Aug 29 20:17:22 2025 GMT
        Subject: CN=A3C4E7D204362B3A03176ACF884FC0B91E9DFE1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6b:36:5c:4d:88:d2:a8:3f:3f:81:87:ef:1c:
                    b0:af:df:65:46:99:d9:d4:9a:14:1a:28:f8:d8:21:
                    f9:d3:75:aa:99:14:fb:4d:c8:d0:58:ba:01:47:1f:
                    92:cd:63:f6:89:5c:c1:32:0f:9f:94:bb:7b:82:9c:
                    3b:e9:4d:ec:8e:6a:4a:76:3f:95:1e:8c:b7:ab:96:
                    a0:ae:2f:de:94:4b:d5:fd:88:20:f5:c7:d6:b3:eb:
                    90:21:43:c8:9c:56:50:62:cd:5d:50:82:42:ad:4d:
                    85:11:23:29:e7:8f:1d:a9:66:47:68:f7:86:2c:86:
                    01:da:ac:c0:4e:1d:26:97:58:87:03:20:39:89:9e:
                    40:db:1f:5c:c0:35:b6:89:02:27:c5:c5:58:b5:2f:
                    ad:27:b6:cc:6f:a0:54:64:9e:58:3d:da:f7:9b:fb:
                    ae:f8:36:e5:26:45:ad:29:c8:d0:99:a1:9e:4a:f4:
                    ac:dc:47:72:cf:d2:72:80:cf:b3:35:54:20:91:43:
                    71:fa:db:80:4f:a8:40:17:44:d2:d4:4b:29:a9:cd:
                    0c:3a:53:d3:0c:dc:06:95:11:e2:fc:a3:a2:39:1d:
                    a4:b0:d8:3d:b0:c5:af:74:49:17:87:56:74:e5:50:
                    6a:72:b1:81:b2:1f:39:40:23:82:00:b1:fe:ac:21:
                    80:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A3:C4:E7:D2:04:36:2B:3A:03:17:6A:CF:88:4F:C0:B9:1E:9D:FE:1C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/A3C4E7D204362B3A03176ACF884FC0B91E9DFE1C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.12.0/22
                  177.86.248.0/22
                  187.17.208.0/20
                IPv6:
                  2804:2a64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262644

    Signature Algorithm: sha256WithRSAEncryption
         69:06:4a:8d:8d:12:9f:87:b7:0c:44:0e:ee:c7:31:65:33:1e:
         85:a7:d0:bb:5c:9e:3d:e2:87:f1:d2:83:93:66:15:2c:bf:23:
         06:5a:21:6b:6c:29:ea:d3:33:a7:72:33:74:03:0f:63:3f:50:
         ea:69:2f:07:da:7e:68:b3:9a:93:7e:7b:03:22:32:e8:fd:65:
         5b:af:9e:b6:06:16:e0:da:12:60:82:ea:f9:a2:9e:fd:f9:da:
         8f:3d:70:88:72:64:c9:3b:2e:e3:e6:39:70:cd:43:06:d4:b4:
         78:55:6d:23:c1:01:65:06:0f:9f:d7:60:5f:39:68:41:ac:6e:
         50:e4:7a:43:d0:07:7a:1f:58:30:a4:99:69:5a:c3:8b:2d:b2:
         fa:71:a4:cb:32:fc:20:da:79:1c:d2:18:57:85:d9:b7:2c:8d:
         64:88:78:66:00:76:9f:86:fc:23:c1:26:58:32:7a:98:98:e8:
         7e:40:89:dc:bd:f5:12:b1:03:10:90:bb:08:3f:9c:a9:e8:55:
         a5:d0:3c:c1:2c:68:41:1f:47:4a:15:b1:e1:b7:83:59:95:b8:
         73:c0:01:3e:4c:b0:a5:57:bf:cb:89:33:b2:ec:90:f8:ed:39:
         5c:40:36:34:88:36:86:84:42:2e:eb:06:3e:2a:d7:ea:a3:b7:
         7a:e2:3b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:46 2024 by rpki-client on console-fra.rpki-client.org