Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B92001871A07D03B31A6C890436B41249FAC3A6E.cer
File:                     B92001871A07D03B31A6C890436B41249FAC3A6E.cer (raw, json)
Hash identifier:          K3+asgQAHgJSaP4CFKbu2TRIKx+AT1qKWgM9jQLUADo=
Subject key identifier:   B9:20:01:87:1A:07:D0:3B:31:A6:C8:90:43:6B:41:24:9F:AC:3A:6E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       452A5BD136DACC03666C8FA1BF62E4EBE177B54E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/1/B92001871A07D03B31A6C890436B41249FAC3A6E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 22:07:15 +0000
Certificate not after:    Thu 03 Apr 2025 22:12:15 +0000
Subordinate resources:    AS: 61754
                          IP: 131.100.40.0/22
                          IP: 143.202.52.0/22
                          IP: 170.83.68.0/22
                          IP: 2804:1be0::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:2a:5b:d1:36:da:cc:03:66:6c:8f:a1:bf:62:e4:eb:e1:77:b5:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 22:07:15 2024 GMT
            Not After : Apr  3 22:12:15 2025 GMT
        Subject: CN=B92001871A07D03B31A6C890436B41249FAC3A6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5a:4f:1e:13:95:42:ad:64:de:de:0e:cd:e6:
                    0d:84:53:22:3f:c9:3d:10:16:28:0e:b1:ea:8b:61:
                    34:21:b2:fd:d6:a3:f2:aa:7b:e8:50:6e:a3:6e:0a:
                    eb:e3:bf:9e:f5:28:48:a6:4e:f7:ef:39:2b:99:03:
                    79:f9:56:0d:5e:39:46:e8:c0:f4:cb:da:66:df:61:
                    e2:19:6e:8b:2a:6c:b6:26:48:08:cf:28:bf:fe:21:
                    ba:c1:61:f3:97:13:11:15:48:17:97:91:54:c0:e1:
                    06:19:9c:25:3b:e0:39:20:ad:89:8a:04:25:6e:71:
                    4f:dd:0a:df:44:f1:26:84:61:5e:61:41:66:97:f7:
                    b1:74:5d:a5:9a:a4:07:d9:2b:31:f7:7f:ff:2f:25:
                    8b:71:fa:9d:d3:d1:f5:8d:fd:f9:09:4f:66:f6:3c:
                    9f:19:e3:7a:b1:a0:2f:c8:ed:cb:35:a9:b3:81:54:
                    b6:dd:cf:60:84:49:02:82:02:ec:f6:5c:8b:a9:33:
                    e7:e1:d7:57:4b:92:74:1e:9f:a5:e4:85:6d:99:43:
                    05:c9:95:9b:e5:12:bc:22:4f:64:fe:39:88:b5:a9:
                    e8:69:7e:69:0f:0c:fa:99:48:bf:5e:ae:5a:aa:2a:
                    52:9c:0c:2e:16:60:9c:93:65:ff:a4:81:46:47:9e:
                    67:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B9:20:01:87:1A:07:D0:3B:31:A6:C8:90:43:6B:41:24:9F:AC:3A:6E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/1/B92001871A07D03B31A6C890436B41249FAC3A6E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.40.0/22
                  143.202.52.0/22
                  170.83.68.0/22
                IPv6:
                  2804:1be0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61754

    Signature Algorithm: sha256WithRSAEncryption
         07:41:f2:b0:14:0c:3a:a4:29:f5:54:1e:1f:31:25:3b:fb:df:
         9a:71:f1:1c:3d:3d:6c:ea:34:5f:89:41:f1:77:63:4c:f5:4f:
         86:9f:8b:d2:8d:83:b8:14:21:68:8b:46:2f:5a:a4:ab:f9:5c:
         ae:27:b0:99:62:5e:0a:f4:8f:de:b5:c6:d4:f9:36:18:89:b4:
         de:8e:c3:0e:77:50:87:77:1a:36:43:b2:7f:3d:3c:75:0a:8a:
         07:29:c1:46:a6:b1:1b:5e:a6:79:d6:5d:a4:43:d6:85:aa:07:
         85:ec:6f:75:88:b4:64:a9:ea:32:99:6e:a9:4f:9e:d2:2f:8e:
         cf:b2:90:bd:2b:ca:52:3d:e1:2d:2b:2e:ec:96:f2:bb:42:b5:
         b3:18:5b:d5:21:2d:9d:fe:a5:ab:e0:93:56:53:a5:c8:20:3f:
         73:cc:40:84:9b:05:59:91:7b:db:d2:a3:95:18:da:e5:7d:0f:
         b7:a3:5d:a1:36:87:6d:bc:4e:aa:02:6b:21:ad:08:7a:63:dc:
         7e:14:84:10:d7:4c:f5:3c:b4:37:52:dd:29:6f:31:61:93:07:
         a3:cb:ad:a7:1d:2f:f3:3f:96:9f:b3:e6:02:2e:71:8c:a4:6c:
         aa:7a:00:f1:40:a9:ed:d7:f7:4f:ff:07:48:9f:db:ec:73:26:
         9d:2a:8b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:56 2024 by rpki-client on console-fra.rpki-client.org