Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D297690F68F4535C1EEA34AA4421792C2944DF34.cer
File:                     D297690F68F4535C1EEA34AA4421792C2944DF34.cer (raw, json)
Hash identifier:          GP7I7oA8okJ07/Tm5PX0bcCO1P99J3ABtKQc8fX0W+M=
Subject key identifier:   D2:97:69:0F:68:F4:53:5C:1E:EA:34:AA:44:21:79:2C:29:44:DF:34
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       77CBDAC2D3AC6A17975A8DDEB945FEAF14892DDF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/D297690F68F4535C1EEA34AA4421792C2944DF34.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 15:36:14 +0000
Certificate not after:    Thu 03 Apr 2025 15:41:14 +0000
Subordinate resources:    AS: 11432
                          IP: 200.155.128.0/18
                          IP: 200.170.192.0/18
                          IP: 200.194.248.0/21
                          IP: 200.201.128.0/19
                          IP: 2804:138::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jul 2024 05:09:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:cb:da:c2:d3:ac:6a:17:97:5a:8d:de:b9:45:fe:af:14:89:2d:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 15:36:14 2024 GMT
            Not After : Apr  3 15:41:14 2025 GMT
        Subject: CN=D297690F68F4535C1EEA34AA4421792C2944DF34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b6:31:25:6a:80:06:4e:67:d4:b5:15:d8:d4:
                    cc:28:8b:11:e0:87:a7:17:d7:98:0e:a0:d8:9a:7d:
                    18:53:25:e8:0f:43:c2:33:66:f1:b5:2c:99:9d:e7:
                    0b:11:e8:7b:79:7e:a1:af:f4:4b:6a:3d:05:28:e4:
                    b2:eb:0f:cb:9e:af:ff:90:e0:9a:9c:58:cf:01:ad:
                    02:a2:4f:95:8a:0e:1a:17:06:3b:e2:21:f2:b1:05:
                    f2:27:62:34:34:5a:d7:be:bd:22:50:bc:f8:4b:0f:
                    dc:df:dc:78:ef:b0:b9:9e:3d:ff:17:6a:50:82:5e:
                    c2:40:49:af:a1:ff:f7:43:bd:d0:7e:b3:d4:a6:b5:
                    2a:8c:07:ca:2d:50:b2:fa:79:dd:46:52:5d:4c:97:
                    d0:36:bf:ac:ea:59:d4:e9:1b:62:0c:6b:42:5e:3f:
                    51:c0:78:6e:ba:0d:a4:47:93:df:03:00:88:8f:47:
                    6b:e9:7c:ce:ca:5e:55:38:a4:d7:4b:d1:4e:4c:ee:
                    b8:d7:fb:cc:41:af:00:5a:ae:02:f5:b9:b5:17:48:
                    cb:55:87:4d:2c:e1:a3:c3:b8:34:69:ce:c8:43:f9:
                    04:c3:d6:91:72:96:b5:20:53:1b:fd:99:eb:18:eb:
                    97:af:89:ef:e2:85:03:f2:44:58:24:9d:4b:d1:9e:
                    ae:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D2:97:69:0F:68:F4:53:5C:1E:EA:34:AA:44:21:79:2C:29:44:DF:34
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/D297690F68F4535C1EEA34AA4421792C2944DF34.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.155.128.0/18
                  200.170.192.0/18
                  200.194.248.0/21
                  200.201.128.0/19
                IPv6:
                  2804:138::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11432

    Signature Algorithm: sha256WithRSAEncryption
         9f:1b:02:2d:05:ca:4d:4f:47:4f:af:a4:9d:3a:f4:8c:f5:64:
         c3:a9:b5:65:89:a3:28:27:aa:bd:b6:57:cb:6e:fd:e7:23:07:
         90:35:59:b4:c9:f4:f6:19:79:e6:d7:8c:46:4b:e3:97:9b:78:
         81:e7:87:46:e8:81:5a:84:b9:80:0c:b0:f3:ea:47:6a:55:ef:
         79:46:07:8c:2c:b7:0b:2e:bd:78:48:98:0f:db:72:09:16:f1:
         33:7d:ad:8e:c8:0a:de:78:87:4b:d8:e5:76:10:73:37:07:e3:
         13:93:7a:3b:0e:67:2f:8b:5d:86:13:68:ad:8a:5e:9f:28:60:
         b7:2a:07:b5:52:33:48:16:a6:7a:92:75:6e:df:a6:11:74:bd:
         00:37:ee:01:49:59:04:33:03:32:5c:58:ca:0b:49:31:55:53:
         6b:07:5a:78:bb:59:ac:5a:59:d6:fc:ca:2a:5a:2a:b4:07:6f:
         cf:38:2c:4c:1f:0c:2a:18:b2:67:c4:52:56:ec:2d:06:b6:5b:
         a9:7f:d1:3e:d3:2f:66:7d:cd:30:7b:3c:b3:24:5e:7c:f8:6b:
         e8:71:95:f5:68:84:b5:94:4d:a0:64:63:ae:3f:73:fb:8c:48:
         7e:5e:ff:88:e7:71:c1:cf:d3:cc:51:e4:d8:81:0c:79:19:f7:
         e4:f8:39:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 02:59:40 2024 by rpki-client on console-fra.rpki-client.org