Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B803BC9703804FF887278F7D7670E2C3CDEB88F2.cer
File:                     B803BC9703804FF887278F7D7670E2C3CDEB88F2.cer (raw, json)
Hash identifier:          MmhhHbYF1Am5GQaR9Fo1rozDshaf2CObTZh8tl8s30Y=
Subject key identifier:   B8:03:BC:97:03:80:4F:F8:87:27:8F:7D:76:70:E2:C3:CD:EB:88:F2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0FD97F19BA402BCC1713E54B9EB14FFF39D5B4C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/B803BC9703804FF887278F7D7670E2C3CDEB88F2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 11 Dec 2024 11:54:04 +0000
Certificate not after:    Wed 10 Dec 2025 11:59:04 +0000
Subordinate resources:    AS: 267560
                          IP: 181.191.216.0/22
                          IP: 2804:4348::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 22:48:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:d9:7f:19:ba:40:2b:cc:17:13:e5:4b:9e:b1:4f:ff:39:d5:b4:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 11 11:54:04 2024 GMT
            Not After : Dec 10 11:59:04 2025 GMT
        Subject: CN=B803BC9703804FF887278F7D7670E2C3CDEB88F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6e:07:f4:33:b4:60:25:a3:57:01:1f:f6:dd:
                    a9:40:19:0e:dd:9b:77:83:c9:48:f5:45:30:04:60:
                    d1:36:d5:e5:68:8b:d5:b0:f2:41:f7:34:99:3e:11:
                    c0:e5:a5:81:18:9f:a6:d6:17:e3:5e:9a:9f:40:c4:
                    cf:56:5d:c7:7f:1e:a7:2c:2c:c8:dc:5e:88:9d:0e:
                    d5:46:1b:88:f7:80:dd:02:e5:88:23:bd:29:80:f6:
                    b1:1d:2e:49:f4:15:fd:ea:a5:58:41:70:db:76:ee:
                    63:e7:2b:e0:59:41:db:80:e6:99:99:5f:9d:a5:40:
                    ea:19:a0:b0:1a:fe:05:0a:04:53:e3:18:9b:cb:96:
                    31:74:1e:43:27:a1:ad:c3:bd:e6:bb:8f:28:7a:87:
                    d9:4a:2c:8f:77:60:c5:49:30:be:8a:90:ae:4f:10:
                    31:bd:e6:b3:c4:a7:26:ac:5c:77:68:3f:52:91:9c:
                    d2:24:20:83:93:75:41:2a:9b:5b:42:cf:57:45:34:
                    21:3f:e4:dd:40:1d:27:28:91:24:5e:9d:7a:e7:a1:
                    60:2b:04:d9:38:7c:1f:7f:48:9d:df:f8:c7:95:a7:
                    ba:0d:68:44:ca:96:3d:da:ef:fc:78:ec:7a:19:a2:
                    16:fe:d8:4e:1f:1f:1a:ee:93:a1:ce:73:42:46:72:
                    6a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B8:03:BC:97:03:80:4F:F8:87:27:8F:7D:76:70:E2:C3:CD:EB:88:F2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/B803BC9703804FF887278F7D7670E2C3CDEB88F2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.216.0/22
                IPv6:
                  2804:4348::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267560

    Signature Algorithm: sha256WithRSAEncryption
         8b:63:ac:9a:31:90:34:77:1e:08:86:b6:c6:d7:01:20:97:e4:
         fe:7a:86:43:7b:71:9b:b4:e2:57:27:29:46:e2:8b:f1:45:42:
         54:13:55:de:4a:02:86:f1:fc:83:e2:dc:be:44:f1:3b:9e:6c:
         9a:f8:4b:1a:87:73:42:d8:2e:92:1d:97:bf:82:76:50:3a:89:
         f5:78:aa:75:19:38:1a:92:7b:10:a7:4c:63:7d:f1:4e:62:2c:
         08:ef:70:7a:df:20:7d:0d:b2:a7:c2:2e:63:9b:62:30:01:90:
         df:85:8e:a0:dc:1b:56:d8:03:da:c1:67:3e:89:59:00:f5:a7:
         1e:dc:7e:ab:08:1b:c6:1b:9f:ec:03:a2:70:ad:22:07:4a:f4:
         41:bf:77:4b:c5:67:d7:9c:48:71:9c:b4:ab:d1:5d:05:d7:34:
         58:98:b1:6a:ca:54:f2:31:01:3b:d5:2f:80:dc:1e:cc:30:e7:
         43:ae:0a:f4:25:5f:43:4a:d2:fa:c6:95:a9:19:cc:d8:63:c0:
         a1:d3:da:af:b2:95:ec:74:b0:a3:b6:1a:ce:20:d9:3a:11:9a:
         29:c3:54:ca:d0:2e:aa:f6:d8:bb:07:19:d5:8a:2f:cc:46:81:
         7b:b0:28:c3:79:c2:ab:24:02:e2:e5:ba:da:0f:97:c5:95:86:
         f7:72:8d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:07 2025 by rpki-client