Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.cer
File:                     B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.cer (raw, json)
Hash identifier:          xOLZgGp9xki6c2njv8fSg+SNR2Xhf2hvnHt3rkJ7t2w=
Subject key identifier:   B4:EF:C8:8C:CA:99:9E:CC:4D:A6:D0:30:45:FF:CE:FF:AF:85:22:1D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       057999352F9A9DE3129EDFDF13FF44319376771C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/1/B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Apr 2024 05:38:14 +0000
Certificate not after:    Fri 04 Apr 2025 05:43:14 +0000
Subordinate resources:    AS: 272658
                          IP: 2804:86a8::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 18:08:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:79:99:35:2f:9a:9d:e3:12:9e:df:df:13:ff:44:31:93:76:77:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  5 05:38:14 2024 GMT
            Not After : Apr  4 05:43:14 2025 GMT
        Subject: CN=B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:86:d1:89:d0:ef:d1:8e:ae:c1:52:8f:79:34:
                    b1:74:b2:50:15:03:f7:f4:6e:f0:4e:2c:87:61:13:
                    71:5d:c5:98:76:bc:96:95:ea:fc:c5:76:80:1f:5b:
                    70:60:6e:1f:77:b1:84:fb:c6:a6:be:34:ed:e5:10:
                    05:71:9c:88:2f:38:03:82:45:33:e0:74:7f:72:9f:
                    63:c3:d4:60:19:c9:9f:72:b1:57:10:a0:e8:ba:9f:
                    e1:d2:30:d2:36:98:41:19:67:fa:93:f2:6d:39:cf:
                    31:f3:ed:f3:ab:d9:de:61:93:1e:41:f5:e7:bc:11:
                    89:72:32:70:d6:0e:71:bd:bc:13:85:33:b0:49:5a:
                    bb:1d:3d:d0:2d:69:d6:2b:0b:c8:9f:da:1f:d8:bc:
                    34:7f:c1:f8:eb:ef:15:81:d2:03:fb:23:49:a0:ae:
                    57:27:50:22:09:00:45:be:37:2c:55:de:49:fe:e8:
                    57:fc:62:a7:2a:db:10:19:11:d3:72:f9:88:b2:bc:
                    1d:1c:38:8a:ba:38:38:11:82:77:70:47:27:6c:1f:
                    9f:47:be:10:30:a3:b5:41:b3:d6:ba:14:dc:71:ed:
                    b9:10:41:97:bb:23:41:2e:71:12:2c:f3:31:a7:32:
                    78:58:10:0a:8e:17:4e:67:cc:11:c3:1d:b2:5d:48:
                    e6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:EF:C8:8C:CA:99:9E:CC:4D:A6:D0:30:45:FF:CE:FF:AF:85:22:1D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/1/B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:86a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272658

    Signature Algorithm: sha256WithRSAEncryption
         c7:83:82:c8:01:ae:cf:69:6d:89:9f:b7:6e:f3:eb:44:f7:45:
         ba:b7:a5:3d:a1:54:62:45:8d:31:70:a9:8a:ae:33:3d:c4:5b:
         71:d9:c6:7b:14:bb:0d:a3:f9:f6:79:0a:a0:4b:b2:76:4d:8b:
         01:6a:e6:6c:e1:81:07:ef:28:d8:94:ea:3f:37:6f:ff:3a:57:
         12:2f:53:3a:5c:58:ef:b4:bf:96:0e:f6:11:6d:4e:ef:2c:5a:
         97:55:6c:eb:07:e5:50:2a:3f:e8:a9:e2:8e:94:6f:d0:9e:75:
         78:74:6f:b4:fe:72:98:cf:72:bc:69:df:01:21:9d:0e:2f:8f:
         47:6a:6d:4e:10:fd:aa:8a:25:81:0f:f0:cf:f2:10:a5:58:a6:
         b4:4a:23:61:2d:54:13:90:50:a6:f0:fd:d7:69:13:7f:94:15:
         24:a2:ee:04:d4:ad:eb:62:4c:53:40:69:a7:b9:08:c3:c7:9a:
         31:f6:5e:02:07:9c:54:a3:6c:8a:94:5c:f0:8f:32:cd:8e:67:
         7f:4e:09:46:f9:25:d1:86:d7:28:01:b8:f4:5c:ef:c5:7f:74:
         89:4a:93:d7:e7:1c:99:29:6e:2f:82:1e:dd:45:6a:0b:d7:fd:
         fd:68:d6:4d:9e:f8:7f:50:17:fd:22:fe:5e:15:0f:7f:62:51:
         d2:9b:4f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 17:34:22 2024 by rpki-client on console-ams.rpki-client.org