Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B8BF37906635F24C2D247EFC8F28584994678276.cer
File:                     B8BF37906635F24C2D247EFC8F28584994678276.cer (raw, json)
Hash identifier:          QQ+7qKeetVBbNcc/QnkLDdHMcLLT/5sgWhMDqny4fQ0=
Subject key identifier:   B8:BF:37:90:66:35:F2:4C:2D:24:7E:FC:8F:28:58:49:94:67:82:76
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       28DAFF31C7623EC01ADEA5AC21F01F10D07CE45A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9Jozdfbq1YVPQif9s1bij6UQuv1F5jFo1Mn2DBeDECYt/2/B8BF37906635F24C2D247EFC8F28584994678276.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9Jozdfbq1YVPQif9s1bij6UQuv1F5jFo1Mn2DBeDECYt/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 23:01:39 +0000
Certificate not after:    Thu 03 Apr 2025 23:06:39 +0000
Subordinate resources:    AS: 270963
                          IP: 189.50.60.0/22
                          IP: 2804:742c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:da:ff:31:c7:62:3e:c0:1a:de:a5:ac:21:f0:1f:10:d0:7c:e4:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 23:01:39 2024 GMT
            Not After : Apr  3 23:06:39 2025 GMT
        Subject: CN=B8BF37906635F24C2D247EFC8F28584994678276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0d:3f:7b:f8:78:ab:d6:da:52:a2:c8:f8:14:
                    62:d5:bd:c0:b6:32:bf:03:f5:62:42:a3:dd:78:25:
                    e6:78:6d:89:97:09:09:d4:19:02:34:6b:d5:98:8f:
                    2c:9f:b2:ed:ad:cd:2e:87:c5:39:0e:af:07:9b:76:
                    17:3a:05:62:96:01:4c:29:13:27:d0:66:05:e9:82:
                    a8:22:d1:15:68:fb:4b:1a:9c:54:30:e7:13:8f:b0:
                    fd:48:26:c1:a7:8d:a4:fb:b4:4f:02:5f:15:01:c7:
                    17:db:82:29:c7:73:02:e9:61:67:37:29:44:7e:fa:
                    f0:8e:94:8a:16:f2:b7:58:35:0a:20:c3:69:c5:f4:
                    bd:a8:0f:56:96:fe:0a:ce:97:0b:9f:12:08:04:ea:
                    54:09:d3:b5:68:4b:7f:a4:23:d3:e7:32:cf:8e:3b:
                    7a:5f:c4:4c:52:c6:c9:f8:3b:35:5a:b4:c4:f5:1d:
                    26:14:2e:8e:65:fa:75:a0:8e:97:80:d9:77:4e:18:
                    e0:0d:b5:91:22:8c:6f:e8:fa:9d:ee:c0:46:64:8b:
                    f9:b9:e5:50:c1:58:8a:1a:2e:91:c8:52:5c:9e:05:
                    f0:cb:e6:59:18:4e:9f:07:09:05:9a:ba:9e:8a:2c:
                    45:da:65:95:1b:03:fd:de:80:8e:d3:2a:4c:6d:1f:
                    d1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B8:BF:37:90:66:35:F2:4C:2D:24:7E:FC:8F:28:58:49:94:67:82:76
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9Jozdfbq1YVPQif9s1bij6UQuv1F5jFo1Mn2DBeDECYt/2
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9Jozdfbq1YVPQif9s1bij6UQuv1F5jFo1Mn2DBeDECYt/2/B8BF37906635F24C2D247EFC8F28584994678276.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.60.0/22
                IPv6:
                  2804:742c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270963

    Signature Algorithm: sha256WithRSAEncryption
         8a:84:a6:42:2e:bf:ec:e8:e4:ef:ac:06:01:f2:03:bf:45:e1:
         92:83:ee:09:32:68:d6:65:b0:29:0c:24:e2:2e:38:f2:e1:f0:
         c5:8c:8d:ba:b9:63:a9:c4:fa:52:22:24:5f:8d:62:1d:23:2f:
         01:23:de:a8:54:78:1c:b4:3d:f6:ae:09:35:df:81:49:9f:06:
         08:31:94:7d:7e:bd:90:95:d3:33:bb:fb:50:bf:47:53:1c:e2:
         67:0c:33:b8:23:d9:16:76:f0:65:d1:a6:d0:46:87:1c:e3:bb:
         04:2b:64:f1:bc:0e:5e:21:f6:e7:ab:3d:25:c5:f5:3e:b6:58:
         78:94:3d:f1:3b:8a:0c:19:02:df:c9:a1:0e:a9:da:de:28:f1:
         65:55:02:25:d0:c9:8d:09:bc:d3:0a:4e:fa:67:47:b7:fe:d9:
         a7:7c:68:31:7b:e1:25:78:0d:b0:a3:b1:3c:1e:3c:b6:2a:4e:
         5a:81:f8:07:0a:27:fd:6b:8b:a0:01:75:a2:3c:3b:61:06:af:
         7a:84:64:7d:b8:c1:2f:ac:06:90:cb:a2:67:73:c3:ce:56:30:
         3e:3d:94:ac:ee:a2:84:d2:59:26:67:8d:3f:91:2f:bf:29:5f:
         de:2d:9f:61:8a:9d:17:c4:dc:31:6d:bf:e6:ba:fe:b2:c1:1c:
         f6:1b:ec:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:56 2024 by rpki-client on console-fra.rpki-client.org