Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.cer
File:                     B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.cer (raw, json)
Hash identifier:          crfdWtowWabqNREL+qojrjbH73CfOcg5MlthQA/Sm8c=
Subject key identifier:   B4:02:2F:9C:6A:00:6A:A6:CF:0F:6C:3A:F5:C0:A2:4B:BE:14:B0:A2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       33EA833B6279506F5B43B9733D0CFD9780983F0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 24 Apr 2024 18:35:00 +0000
Certificate not after:    Wed 23 Apr 2025 18:40:00 +0000
Subordinate resources:    AS: 266143
                          IP: 160.20.20.0/22
                          IP: 2804:3b58::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 04:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ea:83:3b:62:79:50:6f:5b:43:b9:73:3d:0c:fd:97:80:98:3f:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 24 18:35:00 2024 GMT
            Not After : Apr 23 18:40:00 2025 GMT
        Subject: CN=B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ee:60:69:f6:87:5c:66:fb:16:3d:aa:f3:67:
                    35:84:57:61:bf:37:df:58:96:76:e2:16:4b:aa:f5:
                    a3:6e:89:85:fc:3f:56:0c:e2:a7:e4:f4:5b:c9:d0:
                    80:94:77:ec:ce:df:74:6b:28:82:fc:df:bd:08:af:
                    2f:1c:eb:41:6e:0e:c8:6d:7e:03:8a:1d:fe:ae:9f:
                    ff:e3:cb:92:76:e1:00:8a:21:e9:33:cb:23:51:5e:
                    6a:87:69:f6:44:89:4c:fd:85:c4:f4:5f:c3:75:f2:
                    54:ad:05:e5:e6:57:24:c3:c6:57:df:e3:d3:24:6d:
                    45:f8:c0:9e:79:e8:ac:08:33:bc:e4:59:af:c4:83:
                    9b:af:ad:02:15:c8:a7:76:4f:fb:0d:51:26:15:43:
                    d4:e8:a8:6e:42:3d:25:f2:55:93:d8:07:92:62:d4:
                    98:67:e3:96:e5:6b:9b:96:c7:e8:2c:4d:13:8e:52:
                    b5:d6:06:f5:e4:df:4e:c8:b0:88:5d:dc:b1:df:91:
                    d5:2d:80:f7:c9:50:92:3c:6e:3d:a9:b3:17:c2:a9:
                    0c:8c:0f:65:47:bc:65:b0:fb:3a:de:53:09:09:94:
                    f3:60:e4:db:15:01:5a:60:7f:18:86:b7:9d:de:4b:
                    f8:e7:04:33:05:fa:43:3e:26:11:81:e3:63:b1:40:
                    b4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:02:2F:9C:6A:00:6A:A6:CF:0F:6C:3A:F5:C0:A2:4B:BE:14:B0:A2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.20.0/22
                IPv6:
                  2804:3b58::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266143

    Signature Algorithm: sha256WithRSAEncryption
         bc:90:45:9c:80:f6:b7:89:a9:48:40:1f:81:43:0f:bb:41:0a:
         1c:7c:68:34:9d:68:03:36:21:10:45:61:b7:c7:d6:19:ed:2b:
         97:9d:b9:c2:09:1b:f6:b4:c8:73:a4:ca:86:3b:f0:2a:e5:11:
         90:af:a5:68:ac:4a:28:8c:55:dd:c7:85:52:62:93:b4:2f:4c:
         64:e9:43:1e:9f:58:13:67:f5:5d:17:a2:b7:59:5b:99:8d:06:
         40:55:12:06:97:4c:d4:2b:f8:90:36:75:15:65:bb:db:07:99:
         c5:7a:83:29:31:22:09:6b:53:38:ef:29:f8:ec:6b:53:34:b9:
         58:57:b2:c9:bd:1b:71:f1:17:21:24:7a:85:19:fa:ed:12:ad:
         a8:41:de:a6:6f:67:f3:db:0e:e7:4c:49:a8:f2:0e:ed:bc:6c:
         45:99:c1:72:f2:df:8b:cf:d1:13:8d:81:a2:62:b5:fb:b7:6a:
         74:f1:0a:70:64:2f:26:3e:47:2a:23:a4:7c:b2:c8:8f:e3:8e:
         49:8e:1e:48:1b:23:d0:0d:75:05:0d:5b:3a:85:5d:db:82:ff:
         00:81:7b:3b:6a:66:77:33:b9:3b:ce:ad:64:e3:59:ac:c2:4c:
         d9:31:b2:df:a6:d3:c8:72:19:64:ad:8c:a6:e0:19:ef:3b:c2:
         99:68:60:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:36:48 2024 by rpki-client on console-ams.rpki-client.org