Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D2B319B1450F44E4DA3E3080C1BD341451656202.cer
File:                     D2B319B1450F44E4DA3E3080C1BD341451656202.cer (raw, json)
Hash identifier:          CJlm3D5RoNMUTIgxVAbTQc2p4PSJEtOHmdg2E6/M1Xw=
Subject key identifier:   D2:B3:19:B1:45:0F:44:E4:DA:3E:30:80:C1:BD:34:14:51:65:62:02
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       199B5B950AE12A6BCEA3A4EF5B4CD5229FCBEA83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/1/D2B319B1450F44E4DA3E3080C1BD341451656202.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 18:45:01 +0000
Certificate not after:    Thu 03 Apr 2025 18:50:01 +0000
Subordinate resources:    AS: 268444
                          IP: 45.161.64.0/22
                          IP: 2804:514c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 01:38:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:9b:5b:95:0a:e1:2a:6b:ce:a3:a4:ef:5b:4c:d5:22:9f:cb:ea:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 18:45:01 2024 GMT
            Not After : Apr  3 18:50:01 2025 GMT
        Subject: CN=D2B319B1450F44E4DA3E3080C1BD341451656202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1a:b7:56:88:a6:41:93:fa:bd:9d:b9:4b:f6:
                    e7:a7:5a:d5:92:84:9d:29:70:63:04:c6:c5:33:5e:
                    38:4f:39:df:ba:c8:ff:f7:69:63:d4:17:01:6e:06:
                    f6:d0:54:33:29:5f:c0:24:bb:ed:aa:cd:34:00:54:
                    96:cf:d9:96:0f:f9:36:1c:96:9e:77:dc:7d:97:fa:
                    58:56:a3:5c:58:7f:01:ae:ff:0e:6a:55:65:16:e7:
                    69:e9:b8:ba:20:9d:a7:bc:92:13:a8:86:5c:d3:b1:
                    8d:57:0d:b2:13:e3:f5:ec:08:25:04:7a:5c:a9:58:
                    a3:86:db:ac:97:5e:a9:cf:20:de:4f:9d:1a:d7:19:
                    c8:db:4e:f8:95:2a:95:09:e9:63:25:8e:eb:4a:a3:
                    b4:4f:0e:ed:99:c2:cc:4d:ce:d3:52:ea:b7:93:f5:
                    71:3e:0e:25:20:f0:7e:68:d5:47:3e:50:c1:2a:59:
                    5e:c1:fd:c9:fa:d8:1f:b0:64:ad:88:52:f3:d6:41:
                    e1:9a:5d:10:b1:48:fb:a5:b2:c0:38:56:ef:43:cd:
                    76:df:14:cd:ca:cb:4d:6e:cc:1c:b1:c9:4b:d5:31:
                    9d:65:9a:1b:1a:36:c5:12:b6:56:4b:be:d5:9e:b0:
                    f1:f7:ee:ca:fb:34:1a:82:83:f7:f0:e4:39:18:13:
                    b9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D2:B3:19:B1:45:0F:44:E4:DA:3E:30:80:C1:BD:34:14:51:65:62:02
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/1/D2B319B1450F44E4DA3E3080C1BD341451656202.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.64.0/22
                IPv6:
                  2804:514c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268444

    Signature Algorithm: sha256WithRSAEncryption
         aa:9d:55:02:45:a7:d5:df:5a:70:ab:31:5a:24:37:91:de:7a:
         b0:d1:87:34:db:a8:32:03:4f:5f:e9:87:86:11:23:a7:ea:84:
         71:18:93:3c:64:99:43:4f:59:c0:82:82:81:80:ac:aa:96:b3:
         d9:ce:8a:12:c5:a9:a5:c8:2b:57:7d:42:c3:d1:86:c2:c4:f5:
         c9:5e:e2:e9:bb:7d:cb:4f:4a:f5:0c:d4:f7:b0:11:37:e8:14:
         94:60:3f:66:58:f1:82:7d:39:c9:c1:b4:01:83:2c:1f:eb:80:
         7e:71:17:3a:59:05:77:a2:08:a1:3b:30:b7:f0:42:31:85:af:
         11:e5:e8:f5:a9:58:b8:52:d4:3c:3a:0d:c2:4e:82:0c:69:93:
         a1:23:38:63:52:eb:ec:13:fc:8c:25:1d:d3:f2:d0:fa:9e:e5:
         8d:bb:c1:86:6b:14:14:8f:0c:df:81:84:c8:f9:38:55:8b:52:
         80:c3:44:2c:aa:17:5a:b1:2a:ca:41:58:1e:b2:75:32:28:2f:
         e3:08:99:46:7e:3c:e7:83:d2:98:30:44:e2:0a:6b:21:05:c9:
         63:1f:f0:fd:dc:ad:35:21:e3:89:24:d8:8a:79:53:15:35:09:
         5c:2c:94:05:cb:1e:c6:76:fc:4c:81:16:6c:eb:07:6d:91:d2:
         0f:78:68:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:01:14 2024 by rpki-client on console-ams.rpki-client.org