Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F0A91B48CC984B1956E0C296E2876B54F91800B5.cer
File:                     F0A91B48CC984B1956E0C296E2876B54F91800B5.cer (raw, json)
Hash identifier:          NCanEfXXO1FEokyhUdz7qo+NSUlmS5uBOcPewybWMBw=
Subject key identifier:   F0:A9:1B:48:CC:98:4B:19:56:E0:C2:96:E2:87:6B:54:F9:18:00:B5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2E46C973DE7529F24F4A767D88E2497FCF790A3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2fcryUt6tZxGMcsBWirDueP7pdVkKMZz3ZXoqe6uvR7m/1/F0A91B48CC984B1956E0C296E2876B54F91800B5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2fcryUt6tZxGMcsBWirDueP7pdVkKMZz3ZXoqe6uvR7m/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 14:35:52 +0000
Certificate not after:    Thu 03 Apr 2025 14:40:52 +0000
Subordinate resources:    AS: 264367
                          IP: 131.108.32.0/22
                          IP: 138.185.216.0/22
                          IP: 168.196.136.0/22
                          IP: 2804:1d68::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 02:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:46:c9:73:de:75:29:f2:4f:4a:76:7d:88:e2:49:7f:cf:79:0a:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 14:35:52 2024 GMT
            Not After : Apr  3 14:40:52 2025 GMT
        Subject: CN=F0A91B48CC984B1956E0C296E2876B54F91800B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:58:8f:18:de:20:7b:35:55:7f:c7:a1:da:ff:
                    ec:fd:81:fc:cb:1a:ae:c1:63:7e:7a:e3:84:26:5e:
                    8c:23:59:f6:d8:e5:57:62:90:5d:11:02:99:10:5e:
                    a3:db:93:87:62:61:c2:94:5a:93:ff:0a:95:aa:dc:
                    fc:a3:11:ca:6c:c5:a5:9b:03:45:ff:f1:40:c2:8b:
                    d9:2f:a4:3b:42:41:74:c2:bf:31:93:23:37:9c:4b:
                    84:35:64:66:b2:01:64:e1:0f:05:e5:47:d2:9e:f9:
                    37:dc:ef:d0:06:94:b0:ad:c6:c1:89:9a:e4:fe:c0:
                    ad:5c:66:55:c0:bf:2c:3f:0e:44:7c:9d:48:ed:5e:
                    0e:06:0f:ae:cc:3b:8f:bc:48:74:41:3f:57:59:be:
                    27:3d:95:7d:11:10:e8:e1:9d:f3:1e:4a:c7:65:64:
                    b5:94:ca:90:58:9b:3f:1b:12:d7:9c:94:6b:50:b0:
                    68:0c:bb:e4:84:21:99:3f:96:b4:73:9f:6c:35:3b:
                    49:de:93:51:53:a7:03:31:12:53:1d:7a:7a:76:70:
                    52:a7:88:c7:9a:02:8e:1f:a7:2a:d5:b3:6a:19:4a:
                    b3:9c:15:22:be:9d:c8:73:c6:b3:7c:fc:a8:ca:92:
                    57:18:33:81:f4:54:1a:8e:af:07:62:f1:5d:ff:d5:
                    9b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F0:A9:1B:48:CC:98:4B:19:56:E0:C2:96:E2:87:6B:54:F9:18:00:B5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2fcryUt6tZxGMcsBWirDueP7pdVkKMZz3ZXoqe6uvR7m/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2fcryUt6tZxGMcsBWirDueP7pdVkKMZz3ZXoqe6uvR7m/1/F0A91B48CC984B1956E0C296E2876B54F91800B5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.32.0/22
                  138.185.216.0/22
                  168.196.136.0/22
                IPv6:
                  2804:1d68::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264367

    Signature Algorithm: sha256WithRSAEncryption
         ae:90:08:4c:e2:59:99:4b:bd:f1:9c:7a:ba:22:51:29:5b:36:
         d1:44:b3:b7:b6:2b:da:f7:4a:f0:4b:34:71:a8:5a:b5:f2:25:
         2f:b4:94:ef:30:02:7b:49:6b:b9:53:60:79:cc:cd:f9:87:16:
         f6:46:35:1a:6b:14:40:0f:44:fc:bc:84:97:a1:fa:0f:99:3b:
         86:a4:0e:46:99:7a:df:19:db:41:63:7b:a8:22:60:48:33:b1:
         8e:c4:9d:62:8a:19:03:95:6d:c3:15:19:75:99:19:68:5b:4f:
         bb:e0:c5:3f:2d:1d:8e:c1:67:96:e9:85:9e:f5:7b:53:01:11:
         77:fa:a2:65:6a:36:9a:d2:64:dd:ca:1b:47:e8:80:39:9b:fe:
         24:2d:12:5e:5f:64:4a:0b:82:5b:34:dd:96:38:7f:85:13:86:
         f8:74:9d:6e:6b:6b:0b:7f:f9:12:0f:df:de:4c:b8:2d:80:a9:
         00:e0:68:6d:ed:1d:ca:32:85:4e:63:31:c9:7e:ec:6a:63:40:
         11:59:d9:6f:e1:fd:4d:5a:f1:e2:53:c3:0c:5a:5c:87:66:09:
         c5:44:81:d8:61:87:3a:5b:52:97:1e:d1:fa:0c:c4:2b:70:a0:
         42:7c:1d:3e:06:f0:3b:ab:b2:e0:b8:2e:16:2b:f2:58:04:c2:
         6d:52:37:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:06:43 2024 by rpki-client on console-fra.rpki-client.org