Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BDE1DA2EE12E7623CD58696CFC32A1D68980F4F4.cer
File:                     BDE1DA2EE12E7623CD58696CFC32A1D68980F4F4.cer (raw, json)
Hash identifier:          POMeFxJE+YwlX7O0tMER6hJpf6L6ojGmQ9uF2vtLXYY=
Subject key identifier:   BD:E1:DA:2E:E1:2E:76:23:CD:58:69:6C:FC:32:A1:D6:89:80:F4:F4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4387876F1982C23D834850AFA270FEF8A16C6A84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2LDCBWd83mNGY9Cq5pEdUJm4kYrcECuAQS1SpAxT7rd1/0/BDE1DA2EE12E7623CD58696CFC32A1D68980F4F4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2LDCBWd83mNGY9Cq5pEdUJm4kYrcECuAQS1SpAxT7rd1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 16 May 2024 14:51:00 +0000
Certificate not after:    Thu 15 May 2025 14:56:00 +0000
Subordinate resources:    AS: 273480
                          IP: 190.111.96.0/22
                          IP: 2804:8f44::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 23:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:87:87:6f:19:82:c2:3d:83:48:50:af:a2:70:fe:f8:a1:6c:6a:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 16 14:51:00 2024 GMT
            Not After : May 15 14:56:00 2025 GMT
        Subject: CN=BDE1DA2EE12E7623CD58696CFC32A1D68980F4F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:89:fc:98:3a:be:22:21:05:3e:7e:bf:eb:e1:
                    70:0a:7b:25:80:5e:ce:df:ec:ab:e0:32:73:d0:cc:
                    db:fa:59:85:0b:36:f0:7f:e4:ec:60:75:14:74:c9:
                    49:28:18:a9:96:71:32:96:a1:b7:5f:33:ef:1c:86:
                    5a:e3:1c:82:c6:fe:d6:7e:83:5e:8c:ec:4c:f2:c0:
                    67:4e:d6:e3:60:7b:d5:54:ac:fd:d4:25:25:40:6d:
                    e7:5f:ce:32:b5:53:a4:58:24:8c:a3:13:ea:d6:c8:
                    dd:9a:19:68:7a:51:a2:75:6b:25:6d:b7:22:20:6d:
                    c1:8e:d6:81:35:9e:18:fa:87:c0:38:9a:b5:38:90:
                    f4:ff:92:11:11:ea:56:17:52:45:4a:ee:d2:2e:4a:
                    d2:bc:1f:70:84:13:4f:27:aa:44:d6:b6:41:ba:b6:
                    d8:2e:c1:a5:2f:ed:06:2f:4c:7a:65:20:6f:14:75:
                    5a:a0:d2:aa:71:87:23:69:49:78:72:72:e4:87:34:
                    b6:9e:e7:68:3c:85:0c:97:79:8e:09:11:2f:ae:16:
                    5a:5e:3a:a4:73:c3:1a:f9:59:ea:f8:19:2a:ba:40:
                    47:ad:45:47:9c:64:ad:8e:3c:9e:50:b6:3b:22:52:
                    90:8b:5c:f3:76:71:cd:ff:cd:3f:53:45:9c:b0:88:
                    46:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BD:E1:DA:2E:E1:2E:76:23:CD:58:69:6C:FC:32:A1:D6:89:80:F4:F4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2LDCBWd83mNGY9Cq5pEdUJm4kYrcECuAQS1SpAxT7rd1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2LDCBWd83mNGY9Cq5pEdUJm4kYrcECuAQS1SpAxT7rd1/0/BDE1DA2EE12E7623CD58696CFC32A1D68980F4F4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.96.0/22
                IPv6:
                  2804:8f44::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273480

    Signature Algorithm: sha256WithRSAEncryption
         5c:7e:f6:91:cb:68:74:12:d1:39:bf:23:15:06:fd:80:d3:4a:
         0a:cb:ea:60:42:bb:a6:14:45:34:38:29:e2:0f:07:12:28:e7:
         cc:e8:05:1a:ad:41:6f:f2:2e:a9:5f:db:62:0d:0f:15:b6:a5:
         de:34:dd:97:32:a9:d5:49:78:11:8f:04:e9:3a:1c:a5:01:cd:
         b9:72:09:be:86:65:66:fd:95:17:4f:c3:07:c4:3f:a3:d2:24:
         ba:f9:63:4e:18:6f:02:fe:c0:70:6f:c2:32:22:6a:8e:9d:60:
         1f:50:c4:73:f9:eb:2f:a7:4a:cf:2a:f0:77:35:7c:14:55:91:
         ba:29:07:04:00:cb:60:b8:b3:1c:ed:28:06:59:0f:d5:58:eb:
         ed:ec:cb:43:86:c8:45:94:52:ef:01:28:51:8f:ac:ee:41:d7:
         dd:3e:55:b0:fd:7f:a0:7b:4e:b3:d3:5d:78:1d:18:4b:f1:c8:
         82:50:7f:ba:c0:47:28:43:1e:70:60:ec:01:ca:ea:bc:0f:7c:
         68:2a:74:af:dd:50:20:11:63:06:43:d6:04:1e:30:43:50:2f:
         d9:b0:6e:b1:bc:1b:36:22:45:b9:05:0c:e4:99:30:a8:59:fa:
         ff:1b:62:7d:e6:45:79:4a:13:90:32:62:0d:bd:7f:4e:92:2b:
         a6:a4:b0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:43:34 2024 by rpki-client on console-fra.rpki-client.org