Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer
File:                     F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer (raw, json)
Hash identifier:          ekQvYiCTBJSebFsSM6s98ZXfBH5QAZfrOI9l0lUpB9w=
Subject key identifier:   F0:A9:8F:77:9D:3B:EF:65:95:96:B6:4B:32:B2:8E:B6:AF:E8:EA:B5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7B9B2CDA46AB45DFF86CBCB83C356D92974FAEB6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 00:30:43 +0000
Certificate not after:    Thu 03 Apr 2025 00:35:43 +0000
Subordinate resources:    AS: 263083
                          IP: 179.106.192.0/18
                          IP: 186.233.12.0/22
                          IP: 2801:b6::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:9b:2c:da:46:ab:45:df:f8:6c:bc:b8:3c:35:6d:92:97:4f:ae:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 00:30:43 2024 GMT
            Not After : Apr  3 00:35:43 2025 GMT
        Subject: CN=F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:16:04:fc:f1:47:1b:97:92:ed:09:dc:a9:07:
                    42:1e:d7:73:be:3e:ca:96:80:64:72:43:de:e6:45:
                    4e:12:9c:2e:39:fb:f7:b1:8a:26:dd:35:25:df:ed:
                    60:93:4d:58:1e:2f:f2:18:00:46:1c:b8:a6:1b:4f:
                    a3:e3:1a:c0:22:b0:be:dc:d0:10:32:28:30:13:c4:
                    33:7f:f7:c4:41:aa:42:e1:ca:b9:de:30:88:4b:b4:
                    71:3b:f4:a0:ab:24:b1:56:83:2d:15:8d:05:75:d7:
                    6e:ca:e5:d0:30:0f:48:d7:cb:f3:b2:ca:06:a3:f0:
                    45:25:b6:11:9f:75:03:1c:87:e7:5a:5d:cf:e1:79:
                    af:21:7e:cd:c0:4b:97:29:f6:5e:17:0e:3c:f1:7a:
                    f6:58:5b:2f:d4:4a:65:e8:fa:c2:b6:d8:6c:e8:26:
                    0c:2b:77:d6:96:82:22:5d:6a:0b:62:88:24:1c:20:
                    ba:f7:32:cd:79:e9:15:83:53:2d:d8:ba:c8:d5:dd:
                    b9:67:a3:a6:8c:a2:36:ff:86:35:1a:ee:60:b5:e0:
                    10:ea:d2:12:24:94:4e:70:05:1d:a6:27:c9:c6:68:
                    84:78:8e:10:58:5b:1f:6f:a1:62:ce:2d:87:af:27:
                    f7:ee:97:63:db:f9:12:bd:14:9d:f4:86:2a:a0:21:
                    a0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F0:A9:8F:77:9D:3B:EF:65:95:96:B6:4B:32:B2:8E:B6:AF:E8:EA:B5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.192.0/18
                  186.233.12.0/22
                IPv6:
                  2801:b6::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263083

    Signature Algorithm: sha256WithRSAEncryption
         b9:3a:82:10:50:c7:26:bc:b7:64:f8:98:c0:df:65:4f:a8:bd:
         05:ff:d8:49:8c:25:fa:c8:d9:04:e3:72:b6:ed:0b:d9:3a:cf:
         d6:e5:09:8f:fa:94:7d:c0:2e:9a:64:5b:aa:8e:db:0a:79:6f:
         98:27:c7:ce:81:c6:d4:ac:a1:da:cc:52:9e:94:3e:56:48:92:
         41:21:62:a5:96:85:a6:76:c1:49:fe:e9:d3:fc:ff:6d:59:39:
         ed:f0:a0:a8:2f:82:b9:3a:a4:f0:4a:aa:60:5d:4a:c9:7a:43:
         6e:81:3a:ab:b1:33:cb:97:b9:25:8c:a2:46:db:f8:b4:42:ed:
         36:8d:b7:67:91:be:4b:d5:b8:2b:0d:4c:33:35:d1:42:77:f8:
         90:68:1f:55:50:c7:fd:fc:da:49:54:a0:d0:3d:d1:e1:05:b8:
         7f:31:c2:d9:7d:fa:b7:b7:ef:bd:68:bc:8c:96:7f:b3:5a:cf:
         14:44:d6:97:fd:f9:2a:33:03:f1:06:af:b7:d6:66:1a:a2:d1:
         58:b7:c0:9c:57:5f:d2:95:ba:42:46:7d:0b:01:32:97:1e:41:
         ca:d8:85:ed:75:db:b5:f9:b3:79:ab:cb:a7:90:c5:d2:97:e1:
         e2:c2:05:8d:30:14:7d:8f:83:56:0c:92:69:a3:1b:ce:25:a3:
         76:d3:fd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:06:42 2024 by rpki-client on console-ams.rpki-client.org