Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.cer
File:                     AEE1F2C62335FF3372773DE72545E8B38F0BFC21.cer (raw, json)
Hash identifier:          OxfIB7elXDhyQVzEXqP9cxxN4IWq+qTRvFjqmomuFVI=
Subject key identifier:   AE:E1:F2:C6:23:35:FF:33:72:77:3D:E7:25:45:E8:B3:8F:0B:FC:21
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6DDD31C0EDB8DA4106DC9F0766A8B1654FDE2DCB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 18:03:53 +0000
Certificate not after:    Thu 03 Apr 2025 18:08:53 +0000
Subordinate resources:    AS: 264197
                          IP: 138.97.148.0/22
                          IP: 2804:2404::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jul 2024 05:09:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:dd:31:c0:ed:b8:da:41:06:dc:9f:07:66:a8:b1:65:4f:de:2d:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 18:03:53 2024 GMT
            Not After : Apr  3 18:08:53 2025 GMT
        Subject: CN=AEE1F2C62335FF3372773DE72545E8B38F0BFC21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:09:35:a8:14:d4:ef:d9:87:7b:74:7d:18:42:
                    87:4d:24:47:32:e0:3b:21:89:63:9f:0f:47:95:d7:
                    9d:66:72:45:6d:50:12:e3:41:cb:a7:02:84:15:53:
                    68:f2:cd:b7:ca:27:0a:d9:d0:99:c1:77:bc:de:04:
                    49:3e:8f:8e:96:71:e7:ce:43:9f:ba:d8:be:67:38:
                    95:ac:df:4c:a6:15:60:cb:04:cf:ff:fc:dd:2f:20:
                    b5:c9:29:2c:d8:d1:71:6d:1d:32:e4:d2:22:eb:2c:
                    02:26:27:38:69:21:9b:4c:bf:20:70:e7:a3:19:4d:
                    8f:68:33:09:7f:ae:09:00:4b:b0:80:d2:cb:96:8f:
                    98:90:ee:95:61:de:d6:5e:c6:7b:a9:88:a6:0f:e7:
                    87:5c:c3:69:58:a0:c5:50:16:7f:c0:8c:70:c4:15:
                    a8:ea:7d:56:3a:53:9c:63:d6:35:f9:e4:33:0f:e0:
                    ab:f1:d7:82:56:fc:ed:6b:1e:cc:56:46:39:27:5c:
                    9e:55:e4:94:ec:b1:f6:2b:c4:29:27:47:dd:5d:73:
                    c0:ca:7c:2d:d4:d5:b5:bd:c7:d5:dd:d2:44:b0:a8:
                    61:af:32:72:55:51:22:f1:b2:fa:a0:ce:f5:c0:bc:
                    87:96:fe:e5:41:0b:06:b6:d5:db:71:6f:5e:93:ad:
                    34:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AE:E1:F2:C6:23:35:FF:33:72:77:3D:E7:25:45:E8:B3:8F:0B:FC:21
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.148.0/22
                IPv6:
                  2804:2404::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264197

    Signature Algorithm: sha256WithRSAEncryption
         1a:02:8a:d0:aa:37:e8:c4:f5:bb:90:2b:86:53:d3:e9:09:ff:
         14:97:33:f4:19:a2:0a:d4:34:c9:7d:c2:6d:08:87:7e:46:dd:
         5b:1e:cf:85:19:1d:61:fa:90:4c:a1:f5:2f:87:a0:bb:32:bc:
         88:6c:7b:9e:7f:ad:e7:9c:ac:ff:46:ca:4c:ca:17:1f:1f:f5:
         81:7d:95:b5:d4:b9:c9:9c:fb:98:da:fd:11:64:e9:d4:44:be:
         79:0e:8d:cd:32:07:8c:cc:5f:05:7f:4a:f0:1c:8f:16:02:6e:
         0b:0e:7f:d3:93:0d:01:6d:24:30:18:5e:e4:28:5e:47:d9:3e:
         ae:11:83:01:59:20:1c:d7:6f:35:99:4e:3c:13:67:53:6a:88:
         47:a4:eb:bf:ec:89:6e:22:00:91:c6:e3:bf:2e:36:c6:c3:df:
         3b:e3:44:27:25:bd:f3:e2:7b:fa:15:67:67:aa:d5:3a:db:d8:
         01:50:db:a0:76:c6:b2:7f:71:37:e7:90:cb:e3:63:a8:1d:25:
         0c:bb:9c:8a:1f:9b:35:23:5b:30:06:86:7f:a3:90:9c:e2:45:
         b4:8c:e8:50:ee:41:05:91:be:ca:15:1b:26:02:f2:95:2b:8e:
         7a:99:5f:01:89:b7:6a:33:03:05:3e:ff:47:20:4a:4c:52:30:
         ea:30:7e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 02:59:37 2024 by rpki-client on console-fra.rpki-client.org