Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.cer
File:                     D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.cer (raw, json)
Hash identifier:          FLhcbZgI/xpiD+MsFTSC2RfF7xCg/DN8pqb2Gkp/VzQ=
Subject key identifier:   D9:C9:4E:0B:7C:90:50:30:F4:DB:01:C3:3B:F8:C1:68:2B:2E:04:2F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1F0D4B0E94A5F673D31B66DC5AB38C8F40078113
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 02:57:11 +0000
Certificate not after:    Thu 03 Apr 2025 03:02:11 +0000
Subordinate resources:    AS: 61659
                          IP: 131.108.28.0/22
                          IP: 2804:1c84::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 18:08:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:0d:4b:0e:94:a5:f6:73:d3:1b:66:dc:5a:b3:8c:8f:40:07:81:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 02:57:11 2024 GMT
            Not After : Apr  3 03:02:11 2025 GMT
        Subject: CN=D9C94E0B7C905030F4DB01C33BF8C1682B2E042F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5a:21:44:e5:f0:c6:01:1a:8f:3b:13:9d:50:
                    cf:c9:96:92:04:a9:c5:ae:a2:a7:88:b2:7e:28:80:
                    ca:52:a5:48:19:94:be:f1:eb:b9:4d:8b:fa:bb:f3:
                    78:5f:37:3a:99:f5:42:4b:70:d2:dc:2c:9b:a4:f9:
                    e4:1b:cc:da:b1:9e:72:a2:a0:2b:1d:05:7d:39:a6:
                    40:98:91:28:f9:68:28:f6:9d:e0:a8:3a:64:63:72:
                    fd:29:78:eb:20:c6:5c:ca:7a:1e:a2:0c:1d:88:08:
                    78:aa:48:65:75:e3:90:82:8e:90:9d:48:d3:3d:fc:
                    e9:9f:cf:71:6b:68:9d:ff:7e:6e:66:5b:f3:bc:2f:
                    6a:99:84:a4:9f:75:f2:cb:aa:62:ef:c9:0e:ad:f2:
                    6e:02:c2:e3:00:3b:6b:96:89:ef:0c:18:88:fa:b8:
                    73:33:f3:88:e2:52:65:2f:aa:7f:91:95:20:f6:86:
                    07:27:ae:7a:2a:b6:a1:3e:3b:b0:db:a1:b5:88:6c:
                    8d:f5:9b:b6:d0:5c:c2:c0:f3:ee:98:02:a1:c8:47:
                    08:ad:4c:06:f7:b4:65:8a:e8:da:92:95:43:67:5b:
                    e7:2d:4b:c3:81:ad:98:69:c9:ad:be:12:29:21:d2:
                    89:05:06:b8:dc:30:15:1c:7d:24:96:88:d1:87:3a:
                    67:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D9:C9:4E:0B:7C:90:50:30:F4:DB:01:C3:3B:F8:C1:68:2B:2E:04:2F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.28.0/22
                IPv6:
                  2804:1c84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61659

    Signature Algorithm: sha256WithRSAEncryption
         14:22:a2:5a:a0:31:bd:10:65:bf:3e:e4:77:10:20:ce:8c:fb:
         c5:f1:f1:d0:8b:90:2e:41:bb:8f:cb:ce:f8:df:08:ee:de:79:
         a7:4c:69:45:ab:c0:54:62:fe:6a:1a:b8:e9:35:87:fa:fb:b9:
         ca:9d:5d:c6:7a:0e:c6:11:e1:0d:fb:8e:e6:77:75:98:68:83:
         1c:e9:b9:a9:fb:3f:06:5a:75:13:db:69:5a:f8:ad:57:12:75:
         97:41:44:fa:c7:e2:a9:44:ab:1d:f1:db:97:cb:33:22:4b:12:
         d2:53:02:79:41:ac:76:a9:9e:f1:bf:ca:05:aa:b5:b8:e4:7a:
         75:93:a4:68:cf:bf:44:cf:49:03:dd:b6:1c:10:98:66:16:20:
         7e:6f:fb:5b:3b:d0:45:a7:e2:bd:a7:7b:bf:d8:bb:ce:8f:c4:
         f8:94:74:10:c7:56:f1:25:6f:85:85:76:bc:29:10:88:56:5d:
         d7:e8:e3:46:a5:20:b8:ae:4a:f4:ae:8b:5d:82:4c:3b:d7:ff:
         fe:5c:e6:6f:ba:c4:ee:67:d6:95:7f:c5:6e:0f:ed:39:64:77:
         21:2b:b4:c0:3a:c8:5f:fa:11:a9:8b:c8:4f:3a:af:e5:ac:70:
         cd:b4:b7:75:53:a0:35:12:21:33:ff:fd:01:e7:f7:29:45:fd:
         a0:2e:82:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 17:34:29 2024 by rpki-client on console-ams.rpki-client.org