Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DC624F8841FFED451F1A9D746E838491790743C0.cer
File:                     DC624F8841FFED451F1A9D746E838491790743C0.cer (raw, json)
Hash identifier:          Nq1nCoPm9HeD2GCwYzLtx2SuY6sW9ZhouY6rIfABjaY=
Subject key identifier:   DC:62:4F:88:41:FF:ED:45:1F:1A:9D:74:6E:83:84:91:79:07:43:C0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       35B53BD6BDA1A884D224B48994B44A76696A9807
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H3bPnUivH3Ap3T8TEoidSQmXuLUNFUPWLRpFiM6CQCwU/1/DC624F8841FFED451F1A9D746E838491790743C0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H3bPnUivH3Ap3T8TEoidSQmXuLUNFUPWLRpFiM6CQCwU/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 03:00:09 +0000
Certificate not after:    Thu 03 Apr 2025 03:05:09 +0000
Subordinate resources:    AS: 265439
                          IP: 168.195.188.0/22
                          IP: 2804:3428::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 03:32:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:b5:3b:d6:bd:a1:a8:84:d2:24:b4:89:94:b4:4a:76:69:6a:98:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 03:00:09 2024 GMT
            Not After : Apr  3 03:05:09 2025 GMT
        Subject: CN=DC624F8841FFED451F1A9D746E838491790743C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:69:87:c6:ff:09:46:b3:e8:66:d3:7f:93:c2:
                    88:28:26:4e:da:ee:42:82:ec:6d:9f:e8:3e:4d:27:
                    a4:f8:73:3e:fd:8b:9d:8b:6b:98:01:66:73:bb:75:
                    15:4c:29:f0:b2:6f:8a:40:bc:f7:b8:0e:db:bc:d2:
                    2e:5c:37:31:b8:2e:54:af:a9:21:9c:6d:8c:2c:10:
                    e2:ac:19:cb:c5:53:c2:b1:8a:56:38:07:97:f2:22:
                    16:ca:3d:a0:2c:b3:ae:e8:bc:18:0d:ae:76:5f:77:
                    50:c7:ca:fa:8e:b6:eb:7b:7b:85:4f:aa:19:f5:6f:
                    da:ce:52:e0:26:26:76:7f:d3:53:c1:af:36:89:ee:
                    82:74:0f:e0:f3:33:aa:f8:04:5f:9a:2b:9b:75:e1:
                    b6:4f:3c:01:70:a5:24:38:ed:56:bf:16:38:ee:34:
                    25:19:56:b8:bd:0d:e2:31:e9:7e:3a:01:cb:76:fc:
                    a2:9a:26:66:a4:1e:04:7c:a6:97:a9:ac:c6:17:2c:
                    fa:df:74:a2:5f:6b:2e:4b:52:ea:1a:d1:d7:b9:5d:
                    00:f8:38:a8:3a:25:24:6d:fa:d0:a6:cb:30:99:ba:
                    ad:1d:11:50:8b:b7:f2:4a:1c:c3:ff:a9:40:f1:e5:
                    31:74:f0:2c:a6:f9:d6:29:d1:07:1f:8c:a0:8e:34:
                    76:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DC:62:4F:88:41:FF:ED:45:1F:1A:9D:74:6E:83:84:91:79:07:43:C0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H3bPnUivH3Ap3T8TEoidSQmXuLUNFUPWLRpFiM6CQCwU/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H3bPnUivH3Ap3T8TEoidSQmXuLUNFUPWLRpFiM6CQCwU/1/DC624F8841FFED451F1A9D746E838491790743C0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.188.0/22
                IPv6:
                  2804:3428::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265439

    Signature Algorithm: sha256WithRSAEncryption
         c3:08:ba:a6:37:3e:5a:68:ba:b3:53:fe:43:0b:85:62:08:2c:
         b6:d9:b4:8c:26:8a:84:51:7c:33:59:79:91:2b:3b:5e:57:72:
         c1:ed:f9:35:37:23:0f:b7:2b:f3:be:ba:4e:76:c0:87:ac:89:
         0d:49:3d:92:49:5d:9d:54:ae:88:45:0c:50:c3:31:9c:db:8a:
         bc:9c:1c:3f:3b:8d:bb:4c:f7:85:6f:75:b6:30:b9:c2:e8:d1:
         58:b5:5c:55:1d:84:77:62:99:aa:e3:45:b3:50:f1:03:5a:54:
         0c:1f:a7:a5:3a:19:c7:70:dc:40:73:a0:b1:cd:40:1e:19:a8:
         42:74:7d:42:8e:40:54:23:90:7e:25:7b:69:65:71:dc:f8:68:
         7d:48:f7:5c:ce:7c:9c:3d:0a:38:8d:2b:84:5c:4a:26:74:f9:
         05:4b:51:51:97:c9:e2:02:d9:97:ab:d5:fe:06:25:b3:a1:68:
         93:fa:06:88:76:9e:4e:67:6f:35:89:05:91:08:85:08:b8:92:
         be:74:10:74:90:b3:74:3c:7f:87:c8:23:e7:ab:06:63:58:22:
         50:74:84:d3:d9:2d:4b:f9:6c:9f:b0:cf:32:68:ed:a1:d4:73:
         4d:99:b3:d8:cc:e4:aa:c0:51:4c:99:30:96:03:7b:46:f0:a3:
         c9:69:89:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:35:24 2024 by rpki-client on console-fra.rpki-client.org