Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer
File:                     A99D272225729B303C95F28914878741C6AE29BE.cer (raw, json)
Hash identifier:          2zAA/Al10uydRqrlSBKlWhsviENNjygeNTULVytnzI4=
Subject key identifier:   A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5D051D94BC5D14927C09B6DF4CB2678BB7313DFC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 24 Apr 2024 14:32:10 +0000
Certificate not after:    Wed 23 Apr 2025 14:37:10 +0000
Subordinate resources:    AS: 28204
                          IP: 189.91.48.0/20
                          IP: 2804:414c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:05:1d:94:bc:5d:14:92:7c:09:b6:df:4c:b2:67:8b:b7:31:3d:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 24 14:32:10 2024 GMT
            Not After : Apr 23 14:37:10 2025 GMT
        Subject: CN=A99D272225729B303C95F28914878741C6AE29BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e5:07:07:22:86:9c:0e:04:b1:4f:ad:bb:1d:
                    57:6a:2e:8a:3a:1b:f8:e4:85:31:91:f7:7a:0e:37:
                    87:a5:c1:51:a4:20:09:d4:11:c9:b9:c1:e8:c7:b4:
                    fe:80:1f:13:b2:d7:cd:ff:7c:82:9d:3e:9e:a3:e2:
                    9b:f9:6c:e1:ad:74:1b:27:6e:52:49:65:76:de:4b:
                    29:ba:0e:88:9a:6a:2e:7a:59:3f:56:89:90:a5:2a:
                    61:4a:62:06:ec:ad:a9:01:e5:97:70:ad:fc:b3:66:
                    ac:a4:bc:d1:bc:38:79:29:b4:7b:eb:9a:9e:2e:bb:
                    50:8c:b0:c1:f4:6c:37:0a:bd:72:ba:82:59:b1:35:
                    13:ee:0b:b3:16:41:c3:3d:4c:d2:cb:66:c7:ec:99:
                    95:aa:a8:0e:16:5e:06:e4:c4:fb:10:f5:da:16:d0:
                    0b:6f:cd:b1:a4:0b:27:c9:f0:a8:1e:2a:82:2a:c8:
                    11:0d:03:c3:59:bd:c5:10:9d:18:2f:71:59:ba:4a:
                    a6:9a:92:30:3b:0b:58:b2:4b:6b:73:5c:a0:94:76:
                    cf:23:45:bb:db:05:5d:4b:b7:cb:f4:1a:77:98:c0:
                    d9:2b:28:33:9e:73:4c:78:87:a6:3a:4e:dd:57:f5:
                    12:54:f5:25:1c:e4:d5:1d:b6:04:82:4f:2b:29:c5:
                    75:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.48.0/20
                IPv6:
                  2804:414c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28204

    Signature Algorithm: sha256WithRSAEncryption
         29:d6:39:6a:b3:6f:7c:2e:1c:67:8f:1a:8a:bc:23:2a:96:54:
         46:17:48:a3:eb:50:1e:a1:df:c8:c3:b7:f2:7a:f9:ff:82:0b:
         6d:a0:36:60:e2:0f:5e:d9:40:19:c7:52:a5:bf:e9:5e:18:a1:
         c3:48:bc:c3:5d:f0:3f:8a:da:bc:7c:a5:9e:3d:8f:c7:cf:0f:
         01:a3:be:c5:8c:b5:96:d8:12:8d:da:58:67:8f:b5:70:0b:08:
         9d:17:e8:5f:ee:08:18:65:42:63:ce:d6:38:f9:d2:60:4e:ba:
         6c:cf:2b:f9:6c:c6:0a:52:fa:9c:f5:51:b5:66:29:28:af:44:
         21:55:53:4f:64:04:5b:00:3f:0e:ec:c4:4b:2e:8e:c9:4c:5f:
         4a:d2:6c:bc:9f:65:de:0e:dc:8b:2c:05:1c:c9:21:bb:3e:74:
         d7:bc:f0:cd:4c:60:12:e4:22:99:6a:b6:c6:58:00:47:78:67:
         6b:a6:71:24:ad:9d:61:3c:d7:07:53:ba:f9:92:13:ad:88:2c:
         d2:01:55:e6:21:ff:22:b7:e9:7f:96:5d:86:6f:03:c6:61:bd:
         0d:e4:f1:56:f8:b6:74:48:22:81:8a:d8:89:70:48:32:b8:25:
         d3:46:23:72:e0:5c:0e:5c:be:32:e1:ec:98:f6:fc:62:e1:ae:
         92:ce:ba:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:58 2024 by rpki-client on console-fra.rpki-client.org