Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.cer
File:                     AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.cer (raw, json)
Hash identifier:          srQ6OTZDiAvkMFbev0WhwiAimzh0YalziovlsahDIQs=
Subject key identifier:   AB:40:03:9B:1E:5D:05:09:C5:1C:C3:58:7B:EF:6E:D2:A0:DF:E7:3E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       15F60CB2210B7FD16CE30942B1141AAAA376F3A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 18:19:01 +0000
Certificate not after:    Thu 03 Apr 2025 18:24:01 +0000
Subordinate resources:    AS: 264936
                          IP: 168.232.80.0/22
                          IP: 2804:3034::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 00:05:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:f6:0c:b2:21:0b:7f:d1:6c:e3:09:42:b1:14:1a:aa:a3:76:f3:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 18:19:01 2024 GMT
            Not After : Apr  3 18:24:01 2025 GMT
        Subject: CN=AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8a:44:6d:54:8a:0d:b5:f6:d6:36:f8:f1:3e:
                    b5:31:28:cf:c8:ee:41:ff:76:4b:a3:68:4b:60:18:
                    47:c4:3f:7a:93:4a:df:c2:45:e9:c5:93:fc:d6:99:
                    08:30:ab:8e:e9:c9:80:13:78:aa:6b:22:f6:85:75:
                    a0:c6:38:d7:c0:ef:d0:ae:51:ef:c9:17:51:b5:1a:
                    63:1c:cf:e8:4e:f7:06:6d:ab:35:09:08:72:0b:9b:
                    67:eb:a6:3f:c0:80:5a:f0:0c:88:cf:93:94:e7:ab:
                    bd:1e:8a:61:25:ca:02:5f:f8:2d:0d:99:fc:54:3f:
                    de:d4:e6:98:15:9e:12:45:e1:a5:b7:a6:89:6f:4a:
                    06:47:3d:02:f5:0f:38:36:ba:af:1b:c8:26:f5:c8:
                    45:8a:6b:70:3f:4e:04:c3:55:e2:91:1f:d7:db:dd:
                    c8:59:94:da:41:d6:52:cb:db:6e:ec:05:83:33:a7:
                    70:d4:ca:94:5d:f4:48:10:9b:11:dc:a7:3f:f3:3e:
                    39:25:b4:d7:95:3f:cb:b2:b1:aa:2c:43:a1:56:8e:
                    54:2f:08:f5:88:2e:07:74:a9:85:de:da:cb:35:ba:
                    4e:f3:03:be:4c:eb:b7:c9:dd:c9:8f:0a:aa:65:3f:
                    58:03:ab:6b:70:19:6b:38:60:be:ef:4f:51:62:63:
                    83:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AB:40:03:9B:1E:5D:05:09:C5:1C:C3:58:7B:EF:6E:D2:A0:DF:E7:3E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.80.0/22
                IPv6:
                  2804:3034::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264936

    Signature Algorithm: sha256WithRSAEncryption
         3d:47:00:76:33:7c:8d:0f:5f:7f:2a:01:8b:0e:0f:d4:cb:b1:
         06:51:24:09:c2:c9:5d:d7:15:5f:31:87:01:49:79:e8:de:cb:
         25:56:70:d6:ab:52:0a:c0:42:d1:d7:35:60:69:3a:21:58:86:
         e3:b3:f1:5d:c7:cb:14:65:0e:1c:59:1f:fe:69:2f:b1:e9:61:
         03:1b:c3:dc:f5:d6:d2:05:18:6c:9f:20:c6:d9:4d:ea:cc:14:
         27:74:f0:98:47:6d:7a:7a:33:f5:41:95:49:bb:9b:2f:cd:6b:
         09:3d:81:d3:fd:e9:d2:cd:ac:23:c0:69:af:85:c6:fd:bb:76:
         a7:a4:2b:a2:79:d0:ff:10:38:f2:76:30:0c:8b:48:95:cf:60:
         20:c6:da:3b:cb:fd:30:c1:c4:a0:b5:67:47:93:30:3c:cf:fe:
         d6:f9:59:0f:5b:ef:17:f5:94:79:91:1b:a5:78:df:c3:e6:1e:
         47:4f:b6:ee:5e:58:d5:45:0f:ee:23:47:28:64:b0:36:02:0b:
         e4:c6:c7:ea:12:01:f0:8c:cd:08:6e:67:3e:38:4a:4a:b2:81:
         81:ea:6c:32:1d:e5:f1:23:83:a1:a7:10:f7:0d:60:99:cd:42:
         cd:0a:1f:a9:d0:60:f0:17:9e:43:87:1c:cf:6f:84:fb:a1:a6:
         83:ab:04:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 22:40:43 2024 by rpki-client on console-fra.rpki-client.org