Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FEB471909D761B4C2CDF20121D0BF43D091C1D28.cer
File:                     FEB471909D761B4C2CDF20121D0BF43D091C1D28.cer (raw, json)
Hash identifier:          LCvESjZdFiDZk+3DJH1hOT631zSpPYRZcnQvSyUQMo8=
Subject key identifier:   FE:B4:71:90:9D:76:1B:4C:2C:DF:20:12:1D:0B:F4:3D:09:1C:1D:28
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       301444DDB3E29672886290F9476E4663A4A4AE76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/1/FEB471909D761B4C2CDF20121D0BF43D091C1D28.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 10:23:53 +0000
Certificate not after:    Thu 03 Apr 2025 10:28:53 +0000
Subordinate resources:    AS: 267672
                          IP: 45.224.196.0/22
                          IP: 2804:4518::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 03:32:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:14:44:dd:b3:e2:96:72:88:62:90:f9:47:6e:46:63:a4:a4:ae:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 10:23:53 2024 GMT
            Not After : Apr  3 10:28:53 2025 GMT
        Subject: CN=FEB471909D761B4C2CDF20121D0BF43D091C1D28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:62:cd:64:60:fc:53:43:17:6d:e4:cc:3d:e5:
                    c6:b1:ca:e7:9f:58:5f:30:00:e2:0d:24:97:e9:af:
                    1c:26:7f:a9:ee:cf:f5:4b:0e:84:d3:b0:6a:ae:26:
                    0a:2a:2c:ba:be:2b:42:54:88:11:5c:98:84:42:11:
                    18:5d:69:c9:e0:32:a3:ec:46:fb:b4:3b:2a:9b:df:
                    96:b7:9b:f8:a7:66:59:f1:d5:d7:0e:6f:1d:a0:fd:
                    00:75:1e:83:ba:f3:37:6f:a1:58:93:c9:8d:31:fd:
                    51:4a:30:97:cb:09:a2:ca:ff:85:27:a1:4e:c7:89:
                    c7:66:43:d2:be:b4:2e:82:7e:40:aa:04:32:96:2e:
                    47:3b:97:64:5b:a6:8e:cb:29:25:be:73:9d:92:a7:
                    32:2a:dc:73:f0:91:26:ad:78:79:be:f8:20:7e:f5:
                    e0:a6:28:29:af:c9:56:d6:0e:34:94:7f:b2:e2:44:
                    2c:06:cc:a7:83:82:8d:f4:8e:8f:99:d7:a1:5e:cf:
                    d6:55:20:f6:36:ad:f1:a2:e8:33:37:25:4a:bb:c7:
                    78:00:4a:69:fb:e8:64:86:13:4e:62:34:93:3e:b5:
                    28:61:df:d6:de:d9:22:62:ff:a2:5f:3c:86:66:2f:
                    0b:42:88:ef:10:9a:16:1f:30:bc:d1:58:ab:a9:33:
                    70:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FE:B4:71:90:9D:76:1B:4C:2C:DF:20:12:1D:0B:F4:3D:09:1C:1D:28
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/1/FEB471909D761B4C2CDF20121D0BF43D091C1D28.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.196.0/22
                IPv6:
                  2804:4518::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267672

    Signature Algorithm: sha256WithRSAEncryption
         b9:ad:2c:9f:dd:2d:4b:ba:05:aa:2e:44:07:2f:f6:24:4b:14:
         f2:fd:c5:c0:79:b7:24:3c:d3:1b:54:36:70:b4:33:07:0b:77:
         02:91:e2:cb:5b:64:ae:8b:9a:04:6f:7d:34:4f:35:61:af:02:
         4c:fd:4d:fb:6b:10:93:ef:01:d1:92:fb:36:0f:0b:82:ab:72:
         fd:71:b5:2a:e3:72:5a:55:5b:90:0a:b9:09:1f:d0:31:0b:94:
         8f:f6:f6:bc:e0:44:65:72:82:08:ca:1d:93:b8:0f:52:ff:62:
         ff:72:4e:74:ea:4a:91:d8:24:a4:cb:62:e4:ac:20:8e:6c:99:
         0f:e0:71:bc:ee:4c:8f:3e:55:78:d7:12:58:5c:ce:5b:d5:69:
         bb:86:71:26:65:88:93:46:16:e9:f3:9a:10:b2:3f:a7:81:21:
         45:50:4e:4e:6f:d0:c3:ba:0d:d2:78:82:b9:e2:bb:d9:2c:b1:
         c3:00:0c:5c:c4:cd:18:a3:c2:1c:56:fb:53:d1:9e:35:94:e8:
         c9:9a:85:0d:24:c6:b9:0b:01:76:d7:cd:90:c2:de:5c:5b:00:
         8f:45:31:44:9d:5a:20:64:b5:5f:ab:9e:74:80:5f:0c:45:0f:
         63:8c:4d:33:af:1c:a2:f1:d1:c3:5e:9d:4b:7e:96:34:7d:e4:
         5d:08:39:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:39:21 2024 by rpki-client on console-ams.rpki-client.org