Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F1884EF6E788EB8A39510CE0A51DB48C6523379E.cer
File:                     F1884EF6E788EB8A39510CE0A51DB48C6523379E.cer (raw, json)
Hash identifier:          xObxtusrt6rEcvyXEh7g4xZZXxbA46DwiAeB3Vjwllk=
Subject key identifier:   F1:88:4E:F6:E7:88:EB:8A:39:51:0C:E0:A5:1D:B4:8C:65:23:37:9E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6279C7024023D1A33A7D5BBD411CC51510903CAD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/1/F1884EF6E788EB8A39510CE0A51DB48C6523379E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 10 Apr 2024 20:31:42 +0000
Certificate not after:    Wed 09 Apr 2025 20:36:42 +0000
Subordinate resources:    AS: 265066
                          IP: 168.121.200.0/22
                          IP: 170.79.96.0/22
                          IP: 170.231.112.0/22
                          IP: 179.42.148.0/22
                          IP: 179.125.20.0/22
                          IP: 2804:3244::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:79:c7:02:40:23:d1:a3:3a:7d:5b:bd:41:1c:c5:15:10:90:3c:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 10 20:31:42 2024 GMT
            Not After : Apr  9 20:36:42 2025 GMT
        Subject: CN=F1884EF6E788EB8A39510CE0A51DB48C6523379E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3e:7f:6a:5d:13:36:b7:64:63:ad:00:aa:2c:
                    aa:b2:c0:6b:19:3d:fe:ba:16:b2:c2:84:d6:1a:f8:
                    2a:cc:b9:16:ba:e4:d4:03:b8:05:ae:33:da:fa:9f:
                    42:ed:4f:4f:81:3a:06:15:4d:c5:9f:6a:94:ac:8a:
                    0f:ca:a5:fa:1c:50:91:99:b1:15:38:71:7f:e4:90:
                    5d:02:ed:4a:6a:b8:09:73:90:3e:c8:b1:1f:77:7b:
                    f8:56:22:a9:42:06:25:9a:99:00:17:55:33:70:36:
                    61:02:a0:c0:cb:f9:66:31:9d:b6:e0:f9:a2:09:da:
                    92:a7:c9:a4:2f:dc:9a:67:82:0c:97:85:90:60:bf:
                    ae:fb:03:b6:27:8f:4f:10:7d:7b:e5:ec:4a:9d:93:
                    0e:5b:c3:00:77:20:9c:a3:49:93:d9:51:e6:f0:76:
                    9f:a4:ce:8f:a7:77:02:fa:3c:a1:7d:a6:c2:ca:d7:
                    2c:2d:9b:97:3d:6d:96:76:41:39:48:f4:2a:68:26:
                    eb:12:34:53:e1:88:28:76:07:1e:ce:dc:ac:79:1f:
                    76:4f:c0:72:48:27:e6:a2:a7:50:06:6d:81:b8:ca:
                    94:f7:58:58:76:a5:17:16:34:4a:27:60:cb:d5:46:
                    e0:db:1a:c4:3d:1f:83:be:d9:57:87:99:98:52:51:
                    34:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F1:88:4E:F6:E7:88:EB:8A:39:51:0C:E0:A5:1D:B4:8C:65:23:37:9E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/1/F1884EF6E788EB8A39510CE0A51DB48C6523379E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.200.0/22
                  170.79.96.0/22
                  170.231.112.0/22
                  179.42.148.0/22
                  179.125.20.0/22
                IPv6:
                  2804:3244::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265066

    Signature Algorithm: sha256WithRSAEncryption
         a0:52:9c:c4:44:bd:d7:1e:fb:e6:27:7b:ae:84:b5:0b:23:42:
         f4:f0:4d:e7:dd:f8:27:a9:53:2f:65:72:c3:7f:50:b8:2f:e6:
         aa:25:1d:f8:d1:fb:8f:70:b5:a7:42:4d:95:63:6f:96:f8:ef:
         ab:d1:dd:47:6d:32:50:8b:f7:05:ef:e4:dd:6f:4e:f8:31:e4:
         9f:c8:49:ab:d4:19:b3:80:63:a1:90:21:07:ea:1e:85:bc:5a:
         eb:7c:66:80:70:fa:d7:0d:1b:9a:c5:c3:03:5a:37:cf:e5:f7:
         8e:e8:56:2c:dc:14:a7:99:34:ff:0b:83:fe:60:b5:5f:3c:db:
         6e:ea:12:25:01:5f:02:43:9e:bb:84:99:a5:5d:a0:67:99:92:
         48:49:02:02:60:c2:19:48:e4:be:fe:94:96:d4:e7:4d:0a:6c:
         73:86:96:4b:db:64:61:28:e4:d0:77:1b:9f:4f:76:51:5c:bc:
         40:17:91:57:97:2e:f2:e6:88:52:82:bf:9c:a4:a0:12:82:e0:
         df:05:f2:cf:25:d0:93:c7:2f:56:9e:ad:2a:bc:67:2d:cf:50:
         d9:56:11:b0:78:48:4c:ae:42:11:48:b7:d9:9a:65:1c:88:21:
         1c:8f:eb:ce:41:95:15:fe:5f:db:ae:a9:c9:3c:e5:99:84:19:
         7c:b2:c7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:09 2024 by rpki-client on console-fra.rpki-client.org