Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.cer
File:                     B20E3C8281FB009A48EDFE56131C930D739F11C4.cer (raw, json)
Hash identifier:          2x+gBaaB57k51k5y6yXYToN7Zcfxdap1Q5fR0BL5NnE=
Subject key identifier:   B2:0E:3C:82:81:FB:00:9A:48:ED:FE:56:13:1C:93:0D:73:9F:11:C4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4A8F9891BC6A819A8DF51F8F44361F3CE53B55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 01:42:28 +0000
Certificate not after:    Thu 03 Apr 2025 01:47:28 +0000
Subordinate resources:    AS: 263972
                          IP: 138.255.128.0/22
                          IP: 2804:28a4::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 05:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:8f:98:91:bc:6a:81:9a:8d:f5:1f:8f:44:36:1f:3c:e5:3b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 01:42:28 2024 GMT
            Not After : Apr  3 01:47:28 2025 GMT
        Subject: CN=B20E3C8281FB009A48EDFE56131C930D739F11C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3b:fa:ea:8c:03:7a:13:58:c4:23:71:0e:df:
                    2a:15:f5:56:2b:7d:60:60:3c:22:d6:77:73:80:f0:
                    9b:9e:04:7a:b3:8f:36:9c:d2:d7:9e:60:7d:3e:bc:
                    fc:7b:55:8c:58:36:42:c6:b0:c9:b9:2b:21:1c:05:
                    27:a6:db:0f:27:68:0d:19:1f:11:4a:b6:1c:f7:a9:
                    e3:1b:a8:d0:91:34:77:70:25:17:ce:97:46:82:49:
                    7f:69:41:a8:75:71:86:00:06:ca:87:29:6f:72:80:
                    50:3d:db:d3:a1:b8:86:05:7b:cc:46:5f:7c:69:e1:
                    8a:68:5a:58:7e:cf:ea:e2:ca:90:cd:ae:2e:d8:cd:
                    ec:cc:99:a2:3d:29:b7:5c:10:be:65:ef:0e:93:e9:
                    38:30:5d:9d:50:07:18:53:4c:78:32:ca:67:ea:91:
                    e4:bc:e6:d4:69:d2:29:b5:4c:67:b8:ce:db:6d:5a:
                    a5:0c:36:06:1d:93:28:6e:7c:0c:24:f2:eb:a2:e0:
                    fe:23:12:ef:f6:c1:73:4a:e9:7a:46:ed:97:07:86:
                    30:62:47:64:f5:90:04:4b:ae:d2:ae:ba:4f:11:32:
                    fe:00:3a:c7:3d:9c:f7:38:18:e9:f6:21:5a:0a:a3:
                    27:5c:d0:61:74:fa:0e:93:b7:1b:1f:30:75:d6:f1:
                    83:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B2:0E:3C:82:81:FB:00:9A:48:ED:FE:56:13:1C:93:0D:73:9F:11:C4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.128.0/22
                IPv6:
                  2804:28a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263972

    Signature Algorithm: sha256WithRSAEncryption
         30:a2:05:d6:58:c8:b3:96:92:43:bc:bb:fa:b5:ba:99:9e:1c:
         1e:3c:da:36:1c:a5:4d:3b:32:ee:b5:75:8f:ca:af:37:27:0b:
         b2:86:ab:36:16:53:79:c1:39:10:a1:eb:1e:00:f8:ef:d3:54:
         fc:8a:1b:27:ca:5d:1d:fd:92:ed:25:aa:04:d2:ee:78:8a:93:
         5b:d5:7e:93:28:6b:72:68:47:f7:cc:c3:42:86:ac:7a:b2:09:
         66:5b:aa:aa:74:ba:3f:0f:b7:80:3f:cc:66:3d:bf:0f:47:64:
         ee:31:2c:1b:f5:5b:52:9b:43:30:f6:e0:c2:17:07:cf:b7:70:
         c2:68:a1:14:cc:d2:29:9e:e5:52:3d:aa:06:a7:a9:28:f1:dc:
         80:0b:b3:1b:ea:e6:b4:03:bf:03:a7:6c:1f:23:b4:78:9d:8b:
         a2:c8:04:64:e8:40:8a:6d:c3:7a:44:f5:17:5b:79:e7:a8:c0:
         1d:b2:91:bb:09:76:fc:0e:cc:c4:9d:6e:6d:44:1f:ef:34:5c:
         90:c9:44:86:01:f6:f6:d9:0e:97:e1:05:42:ed:83:19:97:de:
         52:96:da:4a:c6:d1:9c:d5:50:fc:56:6f:6f:77:3a:c4:43:94:
         01:b9:95:2a:55:98:a2:c3:5f:e5:3d:5a:e8:ae:a6:e9:c6:b4:
         e5:25:b8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 07:41:06 2024 by rpki-client on console-ams.rpki-client.org