Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AD3E03F0337609F9F56ECDE68343DB12CC14C9A0.cer
File:                     AD3E03F0337609F9F56ECDE68343DB12CC14C9A0.cer (raw, json)
Hash identifier:          TFM6TZ4fOmDxgZj81E8nBPzk5XQgI6ZWyqHrCFzPIYw=
Subject key identifier:   AD:3E:03:F0:33:76:09:F9:F5:6E:CD:E6:83:43:DB:12:CC:14:C9:A0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3BF40612EE937EDD6BEC4D5F672FC7864A350D29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7sWMo72DSd3mnGyX2t1svXo3eRkLqiqY2AD8wpJ5C8L3/0/AD3E03F0337609F9F56ECDE68343DB12CC14C9A0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7sWMo72DSd3mnGyX2t1svXo3eRkLqiqY2AD8wpJ5C8L3/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 26 Apr 2024 18:24:19 +0000
Certificate not after:    Fri 25 Apr 2025 18:29:19 +0000
Subordinate resources:    AS: 273782
                          IP: 2804:8c24::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:f4:06:12:ee:93:7e:dd:6b:ec:4d:5f:67:2f:c7:86:4a:35:0d:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 26 18:24:19 2024 GMT
            Not After : Apr 25 18:29:19 2025 GMT
        Subject: CN=AD3E03F0337609F9F56ECDE68343DB12CC14C9A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:33:3c:47:af:71:34:5f:ff:b8:de:ac:33:9e:
                    7d:80:ad:79:b2:5d:e3:c0:fd:9f:46:49:27:52:02:
                    b8:b8:85:02:67:85:a9:e5:6a:a7:6b:49:3a:eb:38:
                    5e:27:a6:d5:2b:cb:2a:c1:3f:4e:f8:f4:76:a0:12:
                    32:27:c6:8c:9f:60:97:3c:96:a4:f0:9b:0e:af:d7:
                    34:b8:44:37:f7:43:64:49:07:de:a6:6d:62:2a:eb:
                    73:c0:98:49:f1:a9:fe:0f:83:ff:54:a5:5b:5f:78:
                    9e:bc:d9:4e:6b:ca:83:8e:f0:56:1a:88:03:a1:ff:
                    5e:f7:e8:b3:b7:a7:37:57:51:18:01:0a:36:54:7a:
                    89:81:52:14:be:03:4b:29:7c:36:30:20:4a:8c:11:
                    97:3c:25:bf:99:e5:cd:fd:ee:76:19:ce:49:56:37:
                    41:f3:22:b5:36:08:9b:2b:51:1b:bc:51:24:c1:65:
                    94:d0:37:4e:4c:c1:04:eb:d1:0b:2f:d6:78:5c:60:
                    db:ce:98:6f:04:95:1a:3e:f8:0c:d5:bf:86:5e:3f:
                    a1:3e:24:1e:48:0e:8e:05:f2:36:39:12:a1:b0:4a:
                    51:92:69:60:59:33:43:73:b8:4d:0c:94:b0:ed:d1:
                    0a:79:50:67:44:7b:88:77:65:7d:11:b1:51:9e:6a:
                    d8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AD:3E:03:F0:33:76:09:F9:F5:6E:CD:E6:83:43:DB:12:CC:14:C9:A0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7sWMo72DSd3mnGyX2t1svXo3eRkLqiqY2AD8wpJ5C8L3/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7sWMo72DSd3mnGyX2t1svXo3eRkLqiqY2AD8wpJ5C8L3/0/AD3E03F0337609F9F56ECDE68343DB12CC14C9A0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c24::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273782

    Signature Algorithm: sha256WithRSAEncryption
         76:ed:5a:7e:c0:c5:32:36:2d:73:ca:d2:34:1e:d3:3c:60:4e:
         37:52:a2:f5:25:c7:fb:92:11:6a:c0:50:0f:30:19:1f:5b:ac:
         68:b3:d4:25:c0:41:cc:19:13:32:46:d2:6a:a7:41:63:45:be:
         ec:02:37:ce:b2:ed:75:e7:30:0e:6a:04:3a:91:d8:31:17:87:
         20:17:aa:c8:02:16:b7:a8:bd:37:0c:e6:0d:89:66:c7:40:f7:
         4f:65:a3:15:84:e2:4b:c9:d2:4a:a5:f7:0c:81:3a:80:64:21:
         4c:af:b7:e4:13:ae:29:e2:cb:35:36:96:f5:dc:bf:04:0c:73:
         2b:3e:13:b7:cf:c0:5d:70:0e:01:f9:16:1e:aa:c1:be:0c:0e:
         3b:d9:94:72:87:53:8c:1e:6a:cb:d3:2c:49:8c:f8:16:f7:e6:
         5b:2f:c4:89:f7:37:18:bb:35:90:ef:78:95:be:46:24:be:96:
         ae:cc:2c:72:53:cb:c1:d5:1e:59:78:eb:5b:79:c9:f6:79:eb:
         06:1d:26:11:f4:1f:4c:df:56:2e:28:27:21:34:1f:0f:e6:21:
         3b:3c:af:b9:23:85:1f:09:f8:60:e2:af:fe:18:82:10:4a:cf:
         a9:12:d1:9e:a4:ce:ec:9c:8b:0f:93:6f:2a:43:3a:d0:f7:29:
         18:23:46:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:55 2024 by rpki-client on console-fra.rpki-client.org