Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F2738956AE39E8B7EBBDAEF909D996F13EDA7B48.cer
File:                     F2738956AE39E8B7EBBDAEF909D996F13EDA7B48.cer (raw, json)
Hash identifier:          zVR6V91ypfJyVa1F6mmfA4EkPPxSn8vGtIoPS5LHmdw=
Subject key identifier:   F2:73:89:56:AE:39:E8:B7:EB:BD:AE:F9:09:D9:96:F1:3E:DA:7B:48
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0CAC198BA33EBDDE80B04E087326B93524302443
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/1/F2738956AE39E8B7EBBDAEF909D996F13EDA7B48.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 21:25:24 +0000
Certificate not after:    Wed 02 Apr 2025 21:30:24 +0000
Subordinate resources:    AS: 268668
                          IP: 45.164.220.0/22
                          IP: 2804:54c0::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jul 2024 12:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ac:19:8b:a3:3e:bd:de:80:b0:4e:08:73:26:b9:35:24:30:24:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 21:25:24 2024 GMT
            Not After : Apr  2 21:30:24 2025 GMT
        Subject: CN=F2738956AE39E8B7EBBDAEF909D996F13EDA7B48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fb:8d:9e:4e:8b:63:fe:61:fb:65:93:53:d9:
                    1b:e8:1d:37:d4:57:69:5f:97:28:2a:7b:a7:af:bc:
                    65:1f:1e:7f:20:b1:90:2d:64:35:bb:27:c0:2b:6d:
                    63:a3:f6:4d:89:bc:ed:6f:c9:3d:79:c0:11:5e:bc:
                    27:76:7a:48:c4:a6:46:36:f8:d6:7f:55:9e:2b:bb:
                    c1:10:d9:39:37:25:db:47:7c:f8:4a:b4:6e:33:44:
                    8a:78:bf:62:29:d5:00:48:56:c3:39:c4:66:35:ad:
                    c2:39:52:6a:31:02:60:cb:90:56:56:5d:c3:16:2a:
                    c5:fe:45:0c:c2:63:52:df:92:20:6d:6d:38:c4:77:
                    58:8d:d5:03:55:fe:09:1c:bf:77:e0:7b:1b:50:a5:
                    65:4c:4d:2b:25:72:53:2a:0f:4b:34:ab:0b:d7:db:
                    2e:52:71:8a:3d:52:ca:57:93:fa:22:9a:d6:6b:81:
                    66:cb:b8:84:81:3a:e3:c2:6a:91:ed:a1:1f:fc:91:
                    ac:e9:f4:ac:7e:37:98:c0:4a:b6:f2:7c:5c:fc:2e:
                    30:26:c7:76:d3:bf:5e:1b:02:78:e9:f5:7f:03:ff:
                    4c:de:f2:a3:2b:aa:ed:15:06:d7:b3:70:1f:ff:59:
                    42:a1:11:65:8b:1b:9a:09:cc:62:c8:a2:37:84:3f:
                    bf:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F2:73:89:56:AE:39:E8:B7:EB:BD:AE:F9:09:D9:96:F1:3E:DA:7B:48
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/1/F2738956AE39E8B7EBBDAEF909D996F13EDA7B48.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.220.0/22
                IPv6:
                  2804:54c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268668

    Signature Algorithm: sha256WithRSAEncryption
         b9:4a:45:c8:0f:1d:5d:f2:de:1a:a6:90:f4:34:f4:91:9c:55:
         0e:d9:07:d2:13:ec:9d:a5:df:1f:43:25:b7:44:15:2e:87:06:
         47:9f:ef:95:e7:15:de:3a:8f:20:e8:0f:57:cc:cc:9c:85:25:
         9b:ec:f2:6d:95:97:68:c4:f7:d2:33:9b:40:47:44:99:88:3e:
         95:6e:18:ec:46:cb:fb:8f:4c:c5:5d:64:a7:3d:7f:51:42:0b:
         08:ae:d6:7c:ad:ac:87:9b:ce:1e:c5:70:80:c8:cf:60:f1:a2:
         69:16:aa:46:ad:ed:21:6d:4c:0f:73:91:b0:a0:24:59:0b:93:
         23:03:fe:f1:78:20:c2:02:cf:de:63:ad:e2:ea:64:02:2c:b1:
         91:e2:ed:d3:a5:de:06:f5:7b:56:2e:03:21:bf:29:a7:74:02:
         39:17:43:0e:c5:b8:19:9f:5b:70:45:3d:bf:63:b6:e1:ea:2c:
         c9:da:95:ea:57:1d:8b:18:47:94:65:36:8b:d0:4c:d2:65:aa:
         b4:6a:0f:a2:06:ec:f2:08:0a:5e:ec:0b:41:e5:75:83:16:f9:
         dc:8b:00:88:4b:26:4f:9b:98:de:9e:d1:af:79:3b:a5:f4:c7:
         3f:32:2c:d8:05:18:57:9a:36:bc:60:f2:55:ec:b7:3d:21:28:
         b9:86:51:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 11:00:53 2024 by rpki-client on console-fra.rpki-client.org