Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer
File:                     B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer (raw, json)
Hash identifier:          2zddWCO9CLxWhua+4m5QooASUOVsq/H4cUa3xBew2Zs=
Subject key identifier:   B4:35:88:C8:AB:54:53:3C:6B:AF:EC:39:CA:9E:C4:E2:6E:05:D7:7B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4C580F04C9BB8640C2A3B11E2B0A42FFC41C9231
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:25:23 +0000
Certificate not after:    Wed 02 Apr 2025 18:30:23 +0000
Subordinate resources:    AS: 28292
                          IP: 177.54.48.0/20
                          IP: 179.127.80.0/20
                          IP: 189.28.176.0/20
                          IP: 189.124.112.0/20
                          IP: 2001:12a0::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 05:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:58:0f:04:c9:bb:86:40:c2:a3:b1:1e:2b:0a:42:ff:c4:1c:92:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:25:23 2024 GMT
            Not After : Apr  2 18:30:23 2025 GMT
        Subject: CN=B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bb:f2:4a:d7:df:1d:96:49:53:09:a9:89:4d:
                    81:76:c0:2e:bb:33:08:00:23:8a:f4:50:89:50:03:
                    c3:a2:fa:e4:b3:ed:87:03:12:14:ca:b4:33:94:85:
                    56:9b:1f:e3:6a:d9:20:dd:62:b8:e9:03:ab:29:1d:
                    2d:67:85:01:63:67:c1:b3:f6:35:51:dd:97:f5:d4:
                    f1:23:95:4a:17:bf:fc:92:98:f0:2d:ce:dd:ec:1c:
                    7a:d1:fb:5c:b8:56:e6:c8:6f:86:2a:27:f2:52:4c:
                    b5:2c:04:83:eb:7b:fa:bb:8f:6a:46:7f:f6:8f:95:
                    3e:4a:a6:97:4d:a3:89:36:90:a9:4d:3d:a7:47:1b:
                    33:6f:77:ef:8f:21:c9:0f:11:64:9d:45:d3:4d:79:
                    7d:24:71:34:2c:8a:07:29:e8:81:74:a1:36:32:e6:
                    b3:f6:50:69:f7:12:11:a4:87:83:d2:48:76:4b:6c:
                    7b:0a:7e:c9:9b:a0:79:33:9a:c0:33:a8:67:5d:61:
                    51:03:25:59:72:79:97:64:87:c3:48:a1:ec:f5:28:
                    7f:0c:71:12:d8:f6:2e:a5:57:da:f9:f5:6c:3a:38:
                    1e:bd:58:0d:0a:00:ca:8a:c5:af:23:1c:89:b7:72:
                    6b:24:4a:09:3b:bc:a4:34:a2:96:65:b0:19:5c:c6:
                    9c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:35:88:C8:AB:54:53:3C:6B:AF:EC:39:CA:9E:C4:E2:6E:05:D7:7B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.48.0/20
                  179.127.80.0/20
                  189.28.176.0/20
                  189.124.112.0/20
                IPv6:
                  2001:12a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28292

    Signature Algorithm: sha256WithRSAEncryption
         68:14:b0:71:b0:0e:3d:98:2e:b7:80:8b:df:58:4a:87:7d:69:
         3e:fc:83:b3:02:e7:af:7a:e9:36:5f:11:be:91:e3:47:7c:ab:
         74:bd:45:3d:9f:be:3e:c8:25:95:5c:ef:20:4b:35:fc:96:18:
         1d:c7:d9:f7:fe:1d:16:26:2b:b9:78:8b:95:97:99:63:44:ec:
         3f:95:65:fe:81:39:9e:b5:06:d8:d2:30:7c:16:36:75:be:1e:
         a4:59:fb:ba:b9:9c:4e:cb:4c:81:89:13:7d:93:5d:fa:83:76:
         03:b1:71:fe:ab:17:75:f2:f5:03:17:b2:25:e7:0b:a7:b9:76:
         f6:74:57:dc:7e:e9:0c:c8:32:ec:a8:8e:f0:cb:40:c0:df:ab:
         9a:57:11:a6:01:2e:7a:35:10:aa:ff:f3:3c:56:96:75:e9:3c:
         90:d2:8f:80:a1:f2:59:0a:48:d2:8e:4c:dc:a8:7f:eb:2b:cb:
         04:0f:d7:63:1c:57:7c:5a:99:fa:5c:a1:af:7b:7b:1b:03:2b:
         00:80:62:e8:1c:bd:fc:0f:60:6e:e7:39:2f:01:cc:66:1c:e3:
         9a:c3:47:c4:5c:a8:74:f3:ee:ce:56:b7:e7:11:bc:57:55:64:
         2e:05:6e:fa:00:96:81:14:5d:5c:e7:23:86:bd:45:3a:33:47:
         ed:fc:25:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 07:41:06 2024 by rpki-client on console-ams.rpki-client.org