Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A91A7A0DFE9D4E42EA161E14DE8BAA8977E29FEB.cer
File:                     A91A7A0DFE9D4E42EA161E14DE8BAA8977E29FEB.cer (raw, json)
Hash identifier:          verdKtH8Ypv7vXyu1EhGrBcmb7Xf9z0kzEPxpOcWcPw=
Subject key identifier:   A9:1A:7A:0D:FE:9D:4E:42:EA:16:1E:14:DE:8B:AA:89:77:E2:9F:EB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6E3D38DB52B0985DAB9EC7812D7FC3D781EFF35C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/1/A91A7A0DFE9D4E42EA161E14DE8BAA8977E29FEB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 07:23:35 +0000
Certificate not after:    Thu 03 Apr 2025 07:28:35 +0000
Subordinate resources:    AS: 61664
                          IP: 131.108.60.0/22
                          IP: 2804:1c98::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 05:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:3d:38:db:52:b0:98:5d:ab:9e:c7:81:2d:7f:c3:d7:81:ef:f3:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 07:23:35 2024 GMT
            Not After : Apr  3 07:28:35 2025 GMT
        Subject: CN=A91A7A0DFE9D4E42EA161E14DE8BAA8977E29FEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b7:a6:0a:9a:5f:e0:c9:aa:01:78:61:c3:5b:
                    8d:ae:f9:d8:9c:15:fb:3a:49:1c:70:d1:f8:04:03:
                    14:ba:6a:c7:d6:60:03:f5:8e:99:3d:01:eb:ea:74:
                    e7:9a:53:49:26:b9:6f:38:a4:c6:cb:f1:45:ff:bb:
                    55:7c:e3:22:20:a6:2f:b1:a2:44:be:c7:6d:a6:03:
                    b3:25:98:de:74:06:06:2a:90:3d:9c:f2:ab:28:90:
                    e8:49:32:e4:e3:68:76:43:2b:6f:cc:15:b7:b4:3d:
                    70:fc:d4:26:07:79:dd:93:18:a3:f5:23:3b:bd:43:
                    57:dc:0e:8b:ed:78:09:49:94:ec:0f:52:4b:b2:1e:
                    4c:30:3e:97:f9:bc:ce:33:ab:0a:bf:ab:e1:06:3c:
                    2b:92:a7:ff:42:42:91:5e:d1:a7:cd:ba:78:d6:79:
                    ad:15:41:ca:83:c0:51:cd:ca:51:de:27:17:96:4a:
                    37:46:d6:a9:8d:2b:2e:21:5b:05:a1:60:85:9b:7d:
                    35:a9:11:ff:ac:9a:ab:78:7a:ca:e2:3b:aa:bb:77:
                    31:b4:65:3f:ba:8e:fa:39:08:28:46:b7:13:94:3d:
                    bb:01:f7:4a:0a:0a:f7:51:e5:b7:06:ca:f8:a5:74:
                    2e:00:d3:15:37:02:47:b1:d0:3c:3f:4e:ce:64:0c:
                    c9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A9:1A:7A:0D:FE:9D:4E:42:EA:16:1E:14:DE:8B:AA:89:77:E2:9F:EB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/1/A91A7A0DFE9D4E42EA161E14DE8BAA8977E29FEB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.60.0/22
                IPv6:
                  2804:1c98::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61664

    Signature Algorithm: sha256WithRSAEncryption
         17:5f:7b:68:47:e1:47:e0:ac:d3:e3:48:5e:10:c4:e3:a9:2b:
         b2:7a:06:e8:1a:0f:60:07:42:44:84:d5:fd:c7:8d:63:5b:f3:
         f1:08:e4:1a:9b:29:ea:76:85:9f:b4:9a:9c:4d:10:01:ad:ca:
         33:b5:bd:dc:46:b7:57:9d:96:42:b5:7f:ea:aa:d2:47:52:ca:
         a3:1e:58:3c:ac:6a:ff:f3:58:18:aa:32:9c:53:b9:b5:4f:d3:
         dc:8f:88:e1:77:58:c7:40:a4:cd:fa:ce:fe:f4:40:7c:35:f6:
         16:ba:90:c1:0e:a7:7b:46:6d:34:09:f1:51:1e:4b:f0:48:34:
         26:f5:18:94:61:0f:9e:7f:b3:3c:be:af:63:8c:ce:39:8b:8e:
         4a:f5:19:50:b3:31:07:11:c7:17:f1:79:2e:5e:d0:92:a5:1b:
         a2:de:41:be:df:d8:4d:21:52:18:a8:76:73:10:52:1c:4d:c1:
         a7:db:ae:3e:52:d0:54:88:79:c1:25:d1:55:96:f6:9c:01:53:
         46:ea:f4:12:61:4d:6c:c3:c4:06:86:a1:ff:e6:02:92:33:96:
         09:30:f5:b4:4b:a2:6a:e9:bc:bf:48:64:da:c0:bf:75:4c:a2:
         ab:98:7b:11:c7:19:8e:00:22:34:47:10:c4:d5:b6:2f:0d:66:
         69:a4:0c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 06:20:15 2024 by rpki-client on console-fra.rpki-client.org