Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D3B41FA186B792CCCB5555A7A82DB2B7359D3038.cer
File:                     D3B41FA186B792CCCB5555A7A82DB2B7359D3038.cer (raw, json)
Hash identifier:          K4zDENSvm4ehff6LVDAZktDU4NbIDSdHI9X8CKgcg9o=
Subject key identifier:   D3:B4:1F:A1:86:B7:92:CC:CB:55:55:A7:A8:2D:B2:B7:35:9D:30:38
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       011DCB16E4BBB993C243BFEF7B8258F6534D7CEB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/1/D3B41FA186B792CCCB5555A7A82DB2B7359D3038.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 19:01:42 +0000
Certificate not after:    Thu 03 Apr 2025 19:06:42 +0000
Subordinate resources:    AS: 262324
                          IP: 143.202.128.0/22
                          IP: 177.67.28.0/22
                          IP: 177.124.136.0/22
                          IP: 2804:7d0::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 15 Jun 2024 03:23:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:1d:cb:16:e4:bb:b9:93:c2:43:bf:ef:7b:82:58:f6:53:4d:7c:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 19:01:42 2024 GMT
            Not After : Apr  3 19:06:42 2025 GMT
        Subject: CN=D3B41FA186B792CCCB5555A7A82DB2B7359D3038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:60:06:af:7e:8c:ad:eb:dd:94:b6:a1:20:04:
                    b6:ff:fa:1c:f0:20:ec:4a:35:b5:29:b7:a1:98:2c:
                    f6:22:28:54:48:85:5a:b4:f9:25:0d:e5:90:35:98:
                    28:97:dd:e4:5b:8e:bd:3e:57:41:24:19:4c:f5:6f:
                    7f:d8:6a:57:dd:0f:83:b4:f6:28:64:fa:c8:00:8c:
                    6b:77:37:71:55:68:62:b0:d7:c4:8a:96:bb:5c:7f:
                    e6:d3:77:c2:12:d6:cf:82:fa:fe:4e:93:0c:a3:9c:
                    0b:09:89:43:a2:b8:02:92:f2:c2:96:cd:50:18:a3:
                    2e:2a:ae:8f:d0:3b:5d:a1:3c:e1:87:53:44:4e:f6:
                    13:5d:3f:31:c8:9e:84:a0:b4:6d:0e:40:2e:08:ca:
                    da:13:8e:7c:e3:82:c6:4b:17:9a:0a:50:9a:29:c3:
                    a4:98:79:08:64:e1:da:2b:0c:7b:63:d0:c0:52:61:
                    d9:e4:da:05:bc:32:24:f0:89:fa:95:03:cd:31:a8:
                    14:3a:38:ea:1a:bb:df:87:27:f8:4e:e7:98:41:10:
                    a4:ba:e8:2c:a6:93:8d:77:57:4c:05:d3:e6:13:18:
                    34:68:84:b1:65:39:5e:59:51:1a:08:f1:ca:87:6f:
                    23:7b:bc:4d:d8:d7:45:8c:4a:b2:39:8b:2e:9d:73:
                    ea:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D3:B4:1F:A1:86:B7:92:CC:CB:55:55:A7:A8:2D:B2:B7:35:9D:30:38
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/1/D3B41FA186B792CCCB5555A7A82DB2B7359D3038.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.128.0/22
                  177.67.28.0/22
                  177.124.136.0/22
                IPv6:
                  2804:7d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262324

    Signature Algorithm: sha256WithRSAEncryption
         a7:0c:bd:98:b7:92:ae:34:92:e3:81:a7:83:6d:0a:46:34:52:
         d0:2b:1a:2d:92:59:7a:f2:f0:d4:b2:a8:2f:f0:6e:e1:89:74:
         58:d7:55:50:27:7d:44:75:43:9c:7d:77:17:09:b2:ca:d3:9a:
         66:fc:d9:65:6b:00:fd:17:66:12:4c:90:5c:f8:27:d2:33:8a:
         7f:38:d0:e7:bd:8a:02:cf:7b:b9:df:1a:fe:0f:d6:b9:b4:ea:
         ba:52:fe:bd:a1:eb:76:ab:21:35:fd:11:6d:94:89:62:f0:ec:
         d7:fc:04:51:4f:fe:13:c2:6a:cb:3e:48:23:90:6d:d9:ae:f2:
         2b:34:b6:f2:73:62:59:0d:8c:ed:eb:7f:32:44:6a:e6:24:98:
         96:a2:d8:2c:47:56:5e:51:48:d4:c7:1f:7b:2e:c3:d9:0f:2f:
         c4:23:91:a3:77:98:90:24:fe:ec:c8:47:15:2e:df:0c:4e:29:
         2f:3b:44:be:c5:f1:92:40:52:63:44:5d:fe:55:b4:e4:71:70:
         45:31:9d:16:a5:04:18:0c:07:73:9c:55:74:80:0f:79:75:59:
         65:4a:39:91:2e:b2:83:a9:92:44:47:e7:e7:9a:69:1e:1a:16:
         31:ae:fb:b2:86:85:83:5d:44:7e:c0:59:09:65:fd:93:3e:fe:
         a4:3c:6b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 01:27:55 2024 by rpki-client on console-ams.rpki-client.org