Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A3E0072A9CB70CCBEFC692DF992D90232A22C500.cer
File:                     A3E0072A9CB70CCBEFC692DF992D90232A22C500.cer (raw, json)
Hash identifier:          aTuDXJkQMqStZiWl1H3XtscBOChLqeRVKoI0ubAoz8Q=
Subject key identifier:   A3:E0:07:2A:9C:B7:0C:CB:EF:C6:92:DF:99:2D:90:23:2A:22:C5:00
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       040D1B19926DDEDE939FB02F978C0CCFB245A0AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Eb4drTVKnMn6jVfkMcXRhCSniHrp3TBQ8e6gKgw7obtr/0/A3E0072A9CB70CCBEFC692DF992D90232A22C500.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Eb4drTVKnMn6jVfkMcXRhCSniHrp3TBQ8e6gKgw7obtr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 10 Aug 2024 22:56:43 +0000
Certificate not after:    Sat 09 Aug 2025 23:01:43 +0000
Subordinate resources:    AS: 266416
                          IP: 170.81.108.0/22
                          IP: 2804:3774::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 00:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:0d:1b:19:92:6d:de:de:93:9f:b0:2f:97:8c:0c:cf:b2:45:a0:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 10 22:56:43 2024 GMT
            Not After : Aug  9 23:01:43 2025 GMT
        Subject: CN=A3E0072A9CB70CCBEFC692DF992D90232A22C500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:64:d3:29:15:72:31:9e:99:cd:76:8d:a4:bd:
                    09:cd:55:f0:ea:8d:96:88:7b:ec:d9:2a:7a:2b:46:
                    5e:91:a8:4c:b0:0e:48:f5:f0:80:81:07:7e:e7:a0:
                    9b:39:66:8e:9b:87:67:fb:4f:21:25:f2:33:28:a4:
                    e1:27:a2:f3:4a:b8:84:99:d3:05:90:49:b0:0a:45:
                    a9:2e:c0:d5:dd:2a:02:aa:7b:f9:9c:e3:14:6b:b4:
                    ef:e0:ab:79:72:64:e6:84:4f:8d:94:f8:79:54:15:
                    bb:68:1d:ef:e1:e0:53:53:9e:a7:30:e9:da:0d:00:
                    0d:73:be:7d:0f:4d:7e:ae:6e:33:a8:8e:e2:14:c7:
                    70:f9:68:bd:c4:d8:8f:e4:22:ca:0b:07:39:86:ea:
                    b4:07:7f:e5:34:70:ed:62:1b:aa:5f:31:1b:47:bc:
                    83:e1:82:6e:1b:52:22:a8:13:94:4f:31:f6:17:f7:
                    0f:60:8f:ed:e4:a7:c4:2e:1d:b7:cb:a1:05:19:c7:
                    61:94:40:62:53:3d:b8:11:1e:a0:8b:50:6d:ff:a9:
                    2e:4e:79:b6:5a:c8:98:39:7c:e2:99:61:92:04:f8:
                    8b:4a:8c:20:c0:73:7d:11:14:86:de:14:7b:2c:4c:
                    5c:c5:8d:7c:ff:f4:fd:3d:b7:8d:ac:09:b1:cf:af:
                    fe:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A3:E0:07:2A:9C:B7:0C:CB:EF:C6:92:DF:99:2D:90:23:2A:22:C5:00
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Eb4drTVKnMn6jVfkMcXRhCSniHrp3TBQ8e6gKgw7obtr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Eb4drTVKnMn6jVfkMcXRhCSniHrp3TBQ8e6gKgw7obtr/0/A3E0072A9CB70CCBEFC692DF992D90232A22C500.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.108.0/22
                IPv6:
                  2804:3774::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266416

    Signature Algorithm: sha256WithRSAEncryption
         16:e0:6e:4f:7b:2e:f3:28:ec:28:3e:e4:53:fe:d8:f1:a3:2f:
         f6:b1:80:d3:cc:56:20:a8:e5:54:a5:68:53:6d:96:73:e9:6f:
         c1:ee:30:8c:f1:9b:1d:7f:9d:08:eb:0b:27:cd:e0:a9:74:1e:
         c3:0a:69:d6:7b:eb:d0:e8:9b:b5:1d:12:45:91:a4:d6:87:57:
         ba:f9:f6:33:8e:61:69:bc:b0:26:a2:40:33:60:93:63:74:fd:
         96:ad:c7:85:7f:c2:5e:a3:24:88:94:0d:4a:4d:fc:ce:97:57:
         75:16:64:82:31:ba:40:5d:11:b2:c5:54:aa:8a:6e:1f:f3:56:
         50:1b:9d:ac:a2:56:a9:21:0e:a5:b9:10:4f:69:a3:95:54:ca:
         73:8e:c8:0e:c9:76:97:df:44:8b:00:3a:57:f1:a8:3c:66:f7:
         d1:82:b4:20:de:0c:21:8b:fd:2a:b5:8d:73:2a:5f:9f:3c:3a:
         61:0a:97:9a:d2:7b:1c:3b:5b:93:a2:d5:44:a2:c4:da:1c:44:
         d5:e9:b0:f8:2e:a1:f3:33:01:dc:71:81:3d:71:c6:75:a2:a5:
         e3:63:a8:13:49:52:98:c9:d4:1e:61:d2:71:bb:01:5e:05:13:
         c6:a7:b3:fc:52:08:48:56:21:7a:06:a5:9e:29:bc:65:89:f3:
         95:67:3c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:00:18 2024 by rpki-client on console-ams.rpki-client.org