Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F261A4A527B62FE3115DF7AF213290B9F54F37FF.cer
File:                     F261A4A527B62FE3115DF7AF213290B9F54F37FF.cer (raw, json)
Hash identifier:          ouQ2PN4hbrJk0NAK0f8QCHnuGUrSJ6UInSIpxmfljC8=
Subject key identifier:   F2:61:A4:A5:27:B6:2F:E3:11:5D:F7:AF:21:32:90:B9:F5:4F:37:FF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       78D108BEC57296FD7EA81AD96340AB249F315D70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/F261A4A527B62FE3115DF7AF213290B9F54F37FF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 11 May 2024 14:21:39 +0000
Certificate not after:    Sat 10 May 2025 14:26:39 +0000
Subordinate resources:    AS: 265295
                          IP: 168.90.212.0/22
                          IP: 2804:2da8::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 01:38:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:d1:08:be:c5:72:96:fd:7e:a8:1a:d9:63:40:ab:24:9f:31:5d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 11 14:21:39 2024 GMT
            Not After : May 10 14:26:39 2025 GMT
        Subject: CN=F261A4A527B62FE3115DF7AF213290B9F54F37FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c5:2c:0b:11:0a:a1:73:32:27:02:56:7f:b7:
                    eb:fc:e6:b2:73:cb:c8:14:40:72:33:14:61:57:c7:
                    d7:55:26:38:45:9d:3e:85:80:ff:94:00:c2:f1:44:
                    af:e7:fa:41:5e:d6:12:a2:25:5a:8b:d7:df:99:f7:
                    41:b6:84:47:5c:12:7e:0e:6e:68:05:5c:2f:c2:0f:
                    d9:da:a3:3e:d1:4d:7d:e4:e6:26:dc:53:ea:92:13:
                    bf:8d:55:89:b5:c9:3f:12:2f:ae:60:72:84:9e:04:
                    35:35:99:69:9e:fc:cf:01:f0:d8:0e:9b:13:19:f5:
                    a9:22:c9:06:04:ee:59:dc:45:ae:c7:5f:bd:51:e7:
                    db:b8:58:d7:81:39:58:e6:21:8a:7d:0b:04:d7:bc:
                    97:df:3e:86:17:05:cf:04:51:26:f2:c3:0c:1a:60:
                    df:42:7a:f4:56:b7:3c:e6:ac:f9:a2:0a:65:0c:cb:
                    6b:f1:a2:5b:18:cd:86:6f:b2:c3:4b:0d:2f:47:29:
                    48:47:e6:10:d8:73:3f:45:a7:6e:9d:4e:c7:63:0d:
                    d2:79:47:78:5f:33:ea:e7:4e:54:de:fa:ad:d2:fa:
                    cc:05:f1:c7:63:3f:a2:16:08:2b:b1:c6:a9:85:95:
                    80:ae:d7:cf:48:8c:89:b7:1d:b7:9f:95:55:f4:e5:
                    fc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F2:61:A4:A5:27:B6:2F:E3:11:5D:F7:AF:21:32:90:B9:F5:4F:37:FF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/F261A4A527B62FE3115DF7AF213290B9F54F37FF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.212.0/22
                IPv6:
                  2804:2da8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265295

    Signature Algorithm: sha256WithRSAEncryption
         85:ae:6d:cb:eb:b2:f3:c5:8f:a2:36:47:fb:d1:a6:78:81:cf:
         8d:d0:c4:03:1e:7b:36:ba:a6:51:9e:94:89:6d:1c:f7:d5:10:
         87:ad:e5:f4:d8:c1:6c:d5:43:7b:9c:c1:34:4d:b5:e0:4f:c0:
         d1:b5:5b:78:c7:ec:34:7e:d1:60:59:48:b1:7b:ac:45:25:c9:
         6b:3d:79:7c:35:67:f6:0b:89:92:df:b1:da:dc:95:a4:0b:f5:
         4e:3e:58:ff:ce:6c:75:68:5f:e4:81:b8:a8:39:33:42:ff:75:
         3c:a5:db:08:61:02:00:f4:e1:ef:df:ef:b9:59:5d:c1:ea:37:
         b2:1d:88:4c:52:2f:8e:cc:67:50:fb:97:fe:30:48:b2:b5:3b:
         c8:f5:42:7b:ce:19:b5:7f:bc:67:04:a4:ed:55:17:6c:37:25:
         dd:ee:02:e5:44:f9:e8:e0:f7:8a:0e:bb:b5:21:2b:7a:db:bc:
         a6:d4:b6:3f:2d:00:95:c6:0e:88:11:b8:ac:5b:b3:eb:95:43:
         cb:a5:f2:74:f8:63:a2:b0:b3:d9:fc:35:0a:f0:3b:1f:e5:c3:
         ce:83:b6:65:e6:16:d2:a9:26:78:ae:b8:0b:e8:9b:02:d0:ea:
         15:7f:a5:ba:af:26:27:85:a4:cf:f8:88:e2:5d:cd:ca:7e:ce:
         b5:4e:d1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:01:19 2024 by rpki-client on console-ams.rpki-client.org