Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.cer
File:                     AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.cer (raw, json)
Hash identifier:          uYsBuHTbtidhOtgjNrPRonJHpjULr0EXgnilLUe4z1Q=
Subject key identifier:   AD:38:DC:BC:BE:1A:6D:1E:79:86:85:8F:CA:F4:AD:40:79:14:2D:2D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1CE6513E719B2B236B4CD619C8EF1A51BD05870E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 05 Aug 2024 20:06:13 +0000
Certificate not after:    Mon 04 Aug 2025 20:11:13 +0000
Subordinate resources:    AS: 273320
                          IP: 2804:8ce0::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e6:51:3e:71:9b:2b:23:6b:4c:d6:19:c8:ef:1a:51:bd:05:87:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  5 20:06:13 2024 GMT
            Not After : Aug  4 20:11:13 2025 GMT
        Subject: CN=AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:97:59:38:05:81:2b:1c:62:a4:a8:37:2d:8f:
                    19:54:cd:89:09:42:99:23:e6:43:9b:9f:6e:7e:06:
                    31:38:5d:07:ac:1c:ca:60:d3:23:f6:24:5c:72:db:
                    00:98:87:53:ad:e9:f9:73:9b:ac:9d:e4:5a:fd:a7:
                    85:e1:4f:23:52:a8:8f:db:1d:14:97:8d:75:1b:7b:
                    ee:f3:2a:4f:43:cc:37:0e:e6:70:59:bd:30:80:32:
                    b1:9a:f9:18:d3:ec:b0:79:66:63:f1:a8:ad:90:d2:
                    1f:72:68:39:0e:e8:ce:5a:09:00:83:51:6f:11:3c:
                    61:44:20:c7:13:5c:83:80:7b:f1:e8:ef:ed:69:5f:
                    f8:51:95:1e:26:95:33:06:90:f8:10:7b:a9:4e:af:
                    d9:2d:54:e2:ac:4a:76:d5:a5:93:ad:83:cf:82:ce:
                    3a:4a:9e:70:a4:9a:28:f1:17:f3:7d:71:d6:01:37:
                    b3:8f:85:80:44:b8:3e:71:af:25:94:a3:3d:f8:6d:
                    b0:d7:fb:d7:f7:53:47:e2:00:8c:2c:ef:c9:01:7b:
                    62:81:56:f4:59:db:51:de:45:33:cd:99:43:a0:56:
                    90:65:0e:c4:e0:d5:7f:05:79:5a:54:23:02:63:e9:
                    bb:9f:b1:a1:38:cd:38:63:a7:83:24:fa:53:b0:e0:
                    ae:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AD:38:DC:BC:BE:1A:6D:1E:79:86:85:8F:CA:F4:AD:40:79:14:2D:2D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ce0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273320

    Signature Algorithm: sha256WithRSAEncryption
         85:0b:25:a4:f0:6b:40:d1:6a:4b:74:9f:c0:e5:28:34:11:3a:
         c5:00:e1:fb:a9:b7:78:9c:3b:67:23:1d:b0:ee:ea:b3:88:ee:
         e6:55:ed:78:bb:85:a5:c4:17:a5:36:f4:50:82:60:4b:10:49:
         72:f1:69:8b:14:b1:71:07:17:e1:d0:66:ce:fe:04:08:1a:6c:
         a2:67:1b:4a:a6:b7:e1:42:82:5e:9b:c4:e5:8f:f0:dd:c2:f0:
         2b:63:ca:27:38:35:19:1b:cf:f4:5f:ca:ce:21:b9:fb:8b:bb:
         0f:bc:93:5c:16:77:c1:78:e2:83:d2:16:84:b4:e8:80:12:f0:
         c4:81:8f:0a:60:36:1b:fa:aa:ac:0a:6f:7c:8c:41:4a:cf:92:
         2b:6e:f2:61:ac:14:8a:cf:80:39:fa:d3:0d:23:98:28:47:40:
         10:f9:db:39:1b:4e:53:50:d9:57:79:36:99:76:f8:61:4d:b3:
         f8:3f:10:2a:16:ad:1c:45:03:58:db:bb:58:f4:95:01:d7:7a:
         ec:32:8c:09:37:12:03:24:2d:29:08:9f:9c:16:52:53:3e:da:
         9d:f5:74:a5:bc:f0:2e:7d:7d:05:18:18:39:a7:e1:ab:26:31:
         76:f9:88:bb:b1:fe:16:ea:d4:a3:5e:83:bf:d5:e7:21:9c:51:
         81:74:d8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:44:19 2024 by rpki-client on console-ams.rpki-client.org