Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.cer
File:                     E98018CD2C68060BD13517BC1BB31EAD6E73038A.cer (raw, json)
Hash identifier:          H/OV5Biu0L4MyXnspg4R0Iti2KV9dKSW/YBOcmJjaYg=
Subject key identifier:   E9:80:18:CD:2C:68:06:0B:D1:35:17:BC:1B:B3:1E:AD:6E:73:03:8A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       35A0D267C11DD6751458EFEC2403AB9E099E4976
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:25:18 +0000
Certificate not after:    Wed 02 Apr 2025 18:30:18 +0000
Subordinate resources:    AS: 262755
                          IP: 138.0.32.0/22
                          IP: 168.0.248.0/22
                          IP: 170.81.188.0/22
                          IP: 170.238.88.0/22
                          IP: 186.224.0.0 -- 186.224.23.255
                          IP: 2804:19c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 05:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a0:d2:67:c1:1d:d6:75:14:58:ef:ec:24:03:ab:9e:09:9e:49:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:25:18 2024 GMT
            Not After : Apr  2 18:30:18 2025 GMT
        Subject: CN=E98018CD2C68060BD13517BC1BB31EAD6E73038A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9e:3d:4c:1f:5c:e8:cf:4d:40:88:f9:cb:e5:
                    6f:6d:23:f6:50:aa:e1:2c:e7:d3:2e:ea:34:71:fb:
                    ae:02:bf:12:07:17:ba:cd:69:e4:d8:80:dd:c5:6f:
                    9a:81:b6:da:d1:23:3f:2d:9b:a2:8a:16:80:eb:d8:
                    d6:ba:9e:4b:79:de:30:82:9f:19:89:9c:0e:ef:e7:
                    61:f3:99:99:f6:ec:18:ba:cb:f3:c7:25:c6:ea:e0:
                    5a:4c:b3:d5:12:54:23:1e:ab:a9:a1:c0:b2:97:da:
                    21:69:a0:6b:19:5f:59:25:5d:86:da:62:eb:4c:b4:
                    3a:ea:e4:d6:58:41:7c:58:f0:b6:b0:1f:ee:c7:46:
                    71:d8:af:d5:fb:92:9f:0b:42:54:f1:de:4f:15:5a:
                    36:1c:db:c7:89:ad:28:1b:58:a0:d0:48:d5:8f:1d:
                    16:af:25:76:8b:79:a3:90:64:46:90:f4:3e:a5:e7:
                    8c:de:de:39:7d:be:9d:6e:84:cd:1a:c8:68:6b:a5:
                    4f:ef:ca:9b:83:79:b5:0b:c2:a8:56:36:ef:92:10:
                    22:9b:4e:d0:85:83:76:1b:89:ec:0c:4d:e7:88:2a:
                    da:7d:00:86:dd:2c:68:42:07:4b:99:ff:ae:41:9d:
                    44:62:d8:ba:ff:cd:b4:54:59:96:be:5c:59:63:cd:
                    d5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E9:80:18:CD:2C:68:06:0B:D1:35:17:BC:1B:B3:1E:AD:6E:73:03:8A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.32.0/22
                  168.0.248.0/22
                  170.81.188.0/22
                  170.238.88.0/22
                  186.224.0.0-186.224.23.255
                IPv6:
                  2804:19c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262755

    Signature Algorithm: sha256WithRSAEncryption
         04:30:0d:4c:24:cb:4d:31:ab:e6:48:e7:64:1f:41:3a:24:a1:
         1f:d5:d3:d8:ad:60:17:b5:42:d7:54:6f:f6:6f:02:af:a1:91:
         19:49:0b:f0:62:48:0e:26:60:fd:53:01:2b:c4:72:2a:eb:63:
         14:77:4f:4a:6b:6a:7d:89:db:72:83:26:64:37:87:75:7a:dd:
         4f:36:2c:43:2e:c7:18:78:ed:fb:85:a3:b1:fb:b2:a0:a2:26:
         bf:94:0d:06:8d:9a:14:73:8d:c0:cb:b3:01:d6:1e:b6:12:f9:
         59:8c:47:53:a6:12:f3:6f:47:dd:00:a1:4b:e6:ca:fe:a8:ec:
         e9:3b:25:f8:e7:10:12:0e:9f:d6:90:21:2a:5f:be:48:a3:c2:
         17:40:24:12:7d:1f:3e:77:fd:dd:a6:e2:5f:2c:8b:a6:98:6e:
         92:bb:3b:c2:f6:22:15:a9:c1:5a:06:05:40:b1:47:83:90:83:
         7d:15:b8:6d:45:f0:0d:33:28:95:29:19:b2:2d:85:be:8e:e8:
         ca:35:0a:b1:3d:82:e8:f5:51:ee:6c:5d:14:bf:9f:fd:68:54:
         15:f8:40:4b:2f:d1:d4:09:12:fe:17:89:8a:33:dc:d1:99:c1:
         f0:15:06:d7:dc:ca:d4:a5:2f:2b:ac:5c:66:f2:07:f9:e0:ab:
         e5:f5:b9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 06:20:20 2024 by rpki-client on console-fra.rpki-client.org