Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CBEDD33A18D94E1A62EBFB24001CD544D5C59966.cer
File:                     CBEDD33A18D94E1A62EBFB24001CD544D5C59966.cer (raw, json)
Hash identifier:          wo0fI+HKZWDoFrtCmZAih7EpOVFlbyHOF47yhyVKtUg=
Subject key identifier:   CB:ED:D3:3A:18:D9:4E:1A:62:EB:FB:24:00:1C:D5:44:D5:C5:99:66
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4837CA3DFEB9BCC741AD29D77F67574607D84F0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HXo6MTCVNArAXZrbArkDYu9aoExFvsNsovHajh6c9Lim/1/CBEDD33A18D94E1A62EBFB24001CD544D5C59966.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HXo6MTCVNArAXZrbArkDYu9aoExFvsNsovHajh6c9Lim/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 13:35:24 +0000
Certificate not after:    Thu 03 Apr 2025 13:40:24 +0000
Subordinate resources:    AS: 263259
                          IP: 200.10.48.0/21
                          IP: 2804:17f0::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 02:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:37:ca:3d:fe:b9:bc:c7:41:ad:29:d7:7f:67:57:46:07:d8:4f:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 13:35:24 2024 GMT
            Not After : Apr  3 13:40:24 2025 GMT
        Subject: CN=CBEDD33A18D94E1A62EBFB24001CD544D5C59966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e5:88:5c:ac:6e:7b:91:e0:f4:2a:e6:e2:0e:
                    f7:94:29:d8:6b:d5:c1:ea:bd:d0:d9:f4:f8:2c:bd:
                    19:f0:87:f9:18:ed:8e:d9:58:ae:6d:b6:e8:2a:58:
                    dd:99:73:9c:98:4f:f2:81:a1:a5:44:67:7d:6c:ae:
                    11:92:39:c1:51:e1:ce:5c:00:a2:23:90:ae:09:cd:
                    74:76:24:3b:b4:89:73:92:a2:07:d5:ef:c5:b7:26:
                    a7:59:c3:35:32:78:ae:1a:28:30:98:8a:fd:2e:c4:
                    57:df:85:e9:10:a1:dc:01:3a:ca:ec:d5:8a:2f:16:
                    a1:3d:68:ce:44:8f:03:9e:ae:16:60:09:00:18:e6:
                    a6:6c:07:d1:25:c7:ab:8d:48:1c:29:fd:9e:77:b6:
                    83:33:73:ba:77:25:2f:a7:61:42:24:0a:f3:5e:df:
                    29:90:33:4f:b3:d0:ba:2b:c5:13:63:75:cb:02:c2:
                    13:09:bb:b7:d7:1e:14:92:7a:47:74:59:d3:ac:6f:
                    f5:9f:3e:5f:6e:72:cb:d8:5c:74:b8:cf:78:46:5b:
                    30:d8:29:0c:e7:cb:d6:14:86:f4:3d:e1:75:d5:97:
                    7a:50:6b:ee:42:04:ae:ef:3d:6d:86:74:83:5f:98:
                    e0:b8:82:37:ce:d8:72:d2:78:ab:4b:9a:60:a6:c2:
                    e8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CB:ED:D3:3A:18:D9:4E:1A:62:EB:FB:24:00:1C:D5:44:D5:C5:99:66
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HXo6MTCVNArAXZrbArkDYu9aoExFvsNsovHajh6c9Lim/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HXo6MTCVNArAXZrbArkDYu9aoExFvsNsovHajh6c9Lim/1/CBEDD33A18D94E1A62EBFB24001CD544D5C59966.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.48.0/21
                IPv6:
                  2804:17f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263259

    Signature Algorithm: sha256WithRSAEncryption
         04:9a:97:12:fa:a6:c5:b0:d0:ea:42:6a:fb:3f:9d:59:68:f2:
         d1:48:58:26:7c:13:66:fc:25:b9:72:6d:81:2d:a5:d8:ad:30:
         a8:87:79:5e:3b:67:2f:37:07:87:04:e8:f4:75:06:6f:5c:d2:
         4c:59:9a:68:52:ef:36:d8:59:9e:9b:cc:5d:ad:30:4f:28:e8:
         12:9d:4b:d1:8f:7f:ad:a1:e7:ba:32:f1:cc:48:a8:47:be:37:
         a7:d6:7f:0d:1a:0b:43:8b:ff:5e:a0:64:fb:18:69:cb:44:72:
         45:3a:28:e2:fb:1b:a8:87:e4:35:31:65:07:05:19:4f:13:69:
         7b:b4:bb:38:37:cb:4a:f5:b6:03:b5:11:b8:95:f6:87:5d:fa:
         0f:22:bc:92:62:c2:1c:5c:3c:dc:94:6b:99:d2:ff:74:92:4f:
         68:9c:43:c7:ce:0d:d2:cd:19:b8:c0:f0:6a:b4:3e:06:0d:2e:
         0a:4a:0c:e9:96:da:89:2b:af:1f:c9:fe:c3:13:19:cf:8d:02:
         94:64:15:bc:78:83:15:23:8f:8e:24:9b:e3:2b:b6:76:e0:05:
         98:50:e3:92:19:db:84:e7:84:f0:48:77:3f:af:27:03:e8:5f:
         cc:70:81:c1:c7:ee:dd:9f:8b:ad:3c:ca:a3:37:52:15:d4:47:
         ee:a7:cc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:06:41 2024 by rpki-client on console-fra.rpki-client.org