Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer
File:                     CA9F7609986EAF1A517249B9120F2B69069A604A.cer (raw, json)
Hash identifier:          Tgtq+WQwIA9om/EPRhKv7gMkYlE4YKi5FJlDxWpY3/A=
Subject key identifier:   CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3C494D3254F04D0E1FE18CAF6EF01DED5045198B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:25:31 +0000
Certificate not after:    Wed 02 Apr 2025 18:30:31 +0000
Subordinate resources:    AS: 266505
                          IP: 170.244.76.0/22
                          IP: 2804:38d8::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 02:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:49:4d:32:54:f0:4d:0e:1f:e1:8c:af:6e:f0:1d:ed:50:45:19:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:25:31 2024 GMT
            Not After : Apr  2 18:30:31 2025 GMT
        Subject: CN=CA9F7609986EAF1A517249B9120F2B69069A604A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:97:9d:bc:ed:41:32:b8:38:98:06:83:a6:dc:
                    1b:7a:c8:cc:2d:dd:a9:f7:db:2f:41:6c:0b:fd:12:
                    7a:45:6d:4b:fc:e8:81:29:0a:4a:70:c2:35:c3:fd:
                    89:71:c7:fd:18:dd:85:95:82:8c:fc:d7:3a:7c:68:
                    37:cf:b8:ee:0e:0f:4f:17:f6:e8:2c:f8:18:7d:43:
                    62:7a:61:79:73:7c:64:50:c2:07:8c:eb:2c:aa:fa:
                    cc:95:07:18:35:68:3e:06:2b:12:67:79:05:62:b3:
                    f0:34:41:ab:29:1c:b2:2f:f5:15:bc:7a:d3:bb:9f:
                    00:35:4b:ea:f3:af:92:55:cd:ee:db:9f:61:1e:53:
                    fd:54:fa:66:26:bd:ba:b7:45:84:f4:9d:82:51:ce:
                    51:be:a2:34:cd:e6:1e:df:b5:3a:af:2c:23:08:23:
                    4b:b1:81:02:7d:03:09:81:21:31:4f:9c:93:93:49:
                    0e:0c:41:e9:20:b1:a0:d8:cc:c4:94:2c:6b:3c:99:
                    b3:cb:ec:a9:08:a5:e8:b3:96:3d:03:04:04:b9:c5:
                    ad:ad:e2:96:f7:e2:8d:b1:68:9d:bf:ef:bd:b8:80:
                    75:d5:9d:66:a4:f1:06:d8:83:74:7d:37:e2:14:dc:
                    4c:89:7f:65:9a:24:9d:b8:0c:59:90:a0:73:f0:8e:
                    10:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.76.0/22
                IPv6:
                  2804:38d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266505

    Signature Algorithm: sha256WithRSAEncryption
         45:00:3c:3d:6b:2d:0a:e5:6a:76:fe:65:2a:e1:0c:93:d1:82:
         0c:38:b5:8b:fe:15:91:d6:61:ba:2c:a9:fd:66:00:f8:f3:d6:
         8a:90:cc:9e:e6:50:2b:7f:e2:9b:b7:24:db:83:56:21:b0:f9:
         b0:a9:51:f3:16:de:bf:23:52:b0:dc:9c:e8:10:48:60:a7:51:
         73:54:66:8b:34:ea:a4:0e:44:84:1f:e3:9d:4c:cf:7b:08:bd:
         72:7d:fc:cf:84:5d:30:ef:1d:25:e1:a8:79:0d:3a:ac:7d:c1:
         53:ab:16:8c:9c:c7:50:e5:7d:d2:48:20:a1:0e:8c:f5:97:00:
         86:2f:35:bf:ca:52:b8:f1:b0:c5:1f:6d:0b:4b:ff:bd:57:7b:
         ce:f8:bd:7a:db:92:83:19:d8:4c:91:d9:4d:73:5f:85:48:33:
         d2:c7:21:17:fd:b4:da:c3:c9:fd:80:c2:8f:25:d4:9b:1b:c7:
         ea:91:a0:1e:77:aa:58:4d:3b:05:59:a9:d5:6c:3f:11:a0:bc:
         d1:e1:bf:42:d1:59:77:4c:e9:89:7b:4d:96:a0:1c:b6:4d:ac:
         0c:e6:b2:e9:1c:67:98:ba:ac:fa:11:97:79:d0:5d:68:0a:c8:
         2e:1f:83:8f:30:7a:2c:a7:fe:bd:c4:7d:ad:74:d1:cf:fc:41:
         68:02:c1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:06:41 2024 by rpki-client on console-fra.rpki-client.org