Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B.cer
File:                     E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B.cer (raw, json)
Hash identifier:          55B+V3Wcbp32IfcF39hJDqN+nbsNyBARJFjaKVMr58o=
Subject key identifier:   E1:91:DE:39:00:DF:8B:A2:32:F6:BB:C8:D0:29:D8:0A:32:B4:CB:7B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0AE5F28F0128DDE5D8B23FDC109863DC901D0E00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 08 Jun 2024 17:50:45 +0000
Certificate not after:    Sat 07 Jun 2025 17:55:45 +0000
Subordinate resources:    AS: 263292
                          IP: 45.166.84.0/22
                          IP: 170.78.20.0/22
                          IP: 170.150.80.0/22
                          IP: 177.71.92.0/22
                          IP: 177.85.44.0/22
                          IP: 189.126.40.0/21
                          IP: 2804:1690::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Jun 2024 18:10:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e5:f2:8f:01:28:dd:e5:d8:b2:3f:dc:10:98:63:dc:90:1d:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  8 17:50:45 2024 GMT
            Not After : Jun  7 17:55:45 2025 GMT
        Subject: CN=E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a2:7f:35:d8:5d:95:6f:80:9b:cb:28:df:2e:
                    8a:3c:72:8d:74:c2:db:83:52:62:61:05:1f:f1:84:
                    96:c2:ee:e8:aa:b3:ed:3b:ba:b7:75:12:9b:42:a0:
                    ee:cf:8f:ce:0a:7d:2f:ce:63:e9:70:8b:14:91:8c:
                    23:96:f8:dc:08:03:1d:3f:2e:6d:47:ed:17:37:9d:
                    21:5a:7e:ab:4d:ef:d4:1a:e6:43:e2:da:5f:a5:8b:
                    c8:06:ae:c8:8c:5b:6a:5d:b7:d3:46:82:23:af:b4:
                    73:f9:42:23:9e:ba:04:3f:75:82:fd:4d:b3:e7:32:
                    b9:4c:a7:98:1d:48:84:4b:0f:94:ab:6a:e5:c4:56:
                    27:ee:5b:a9:7e:0f:e9:25:3e:fd:e8:ac:2a:26:52:
                    96:3c:0e:c2:ec:93:23:a5:89:0b:4a:2a:fc:ba:63:
                    5e:12:ea:06:31:94:9e:e5:09:39:71:ab:b3:18:9c:
                    da:7d:d0:5e:ed:01:7c:ae:2c:d0:ec:80:aa:91:13:
                    94:89:13:cc:d0:6b:82:ca:2a:ab:e3:fe:15:23:3a:
                    80:d1:b8:86:3a:1e:b3:c8:0e:ed:18:f6:4d:20:8d:
                    a7:22:79:95:fb:58:21:16:19:d4:91:7d:88:aa:89:
                    fd:7c:f8:90:2c:7b:1b:66:c0:f2:5a:c5:31:5e:c0:
                    4a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E1:91:DE:39:00:DF:8B:A2:32:F6:BB:C8:D0:29:D8:0A:32:B4:CB:7B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.84.0/22
                  170.78.20.0/22
                  170.150.80.0/22
                  177.71.92.0/22
                  177.85.44.0/22
                  189.126.40.0/21
                IPv6:
                  2804:1690::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263292

    Signature Algorithm: sha256WithRSAEncryption
         72:b4:5e:17:63:fa:c1:c7:c2:a1:28:e9:ab:0e:e2:4a:01:0a:
         15:fd:3b:14:f8:18:c0:5c:0a:89:e5:b0:1e:01:43:59:4e:79:
         27:ad:1c:e8:a8:27:db:38:54:6e:3d:d5:3f:1b:e8:2f:1d:e1:
         bd:dd:1c:75:ba:07:9c:a4:2d:8b:f5:dc:7c:e7:5a:f9:9b:02:
         a5:1a:97:f0:c5:3b:3c:14:04:ad:3e:84:fa:b7:e8:a4:60:ff:
         1e:7c:dd:52:32:bf:cc:d5:84:ab:54:3f:35:c1:3e:8e:7c:17:
         06:4f:4c:ba:dc:ea:f5:b0:bf:bd:41:9d:2d:e9:4c:88:18:4a:
         2a:43:b7:3c:7a:fa:b0:60:4a:e5:9b:d0:d1:f5:47:5a:b7:37:
         57:e7:76:43:8c:59:81:d8:e2:2f:56:7d:95:99:a5:0a:66:bc:
         c2:b6:bc:ef:6c:01:02:8f:7f:40:7f:12:15:9f:fd:36:b4:87:
         66:fe:9e:2e:a1:4c:15:91:fc:aa:d9:9f:6b:c7:98:01:b5:e9:
         a4:b8:c0:f4:d4:3c:6e:f1:f7:48:fc:a2:48:1e:9d:bc:41:f4:
         35:50:46:3c:c0:8f:f0:2c:9a:d9:83:10:5a:f1:77:db:fb:be:
         13:20:6e:58:d0:b3:c4:68:a8:e6:d6:b8:a2:ff:e3:ab:51:a9:
         70:cc:4d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 18:19:30 2024 by rpki-client on console-ams.rpki-client.org