Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/014DBFDCD468F68848FADACA4E0EF0702750FA7C.cer
File:                     014DBFDCD468F68848FADACA4E0EF0702750FA7C.cer (raw, json)
Hash identifier:          AQchvoUzwq24CruhowMNvGgShnYE2hT9KXmyAfN8SmY=
Subject key identifier:   01:4D:BF:DC:D4:68:F6:88:48:FA:DA:CA:4E:0E:F0:70:27:50:FA:7C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2F70403233F2EFE9CA1FCA6DC8AB7914B167D997
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/014DBFDCD468F68848FADACA4E0EF0702750FA7C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 30 May 2024 23:02:02 +0000
Certificate not after:    Thu 29 May 2025 23:07:02 +0000
Subordinate resources:    AS: 61599
                          IP: 200.71.76.0/22
                          IP: 2804:3ca0::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:70:40:32:33:f2:ef:e9:ca:1f:ca:6d:c8:ab:79:14:b1:67:d9:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 30 23:02:02 2024 GMT
            Not After : May 29 23:07:02 2025 GMT
        Subject: CN=014DBFDCD468F68848FADACA4E0EF0702750FA7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2b:1f:06:3d:7f:f3:0a:0a:45:4d:1c:8d:d0:
                    14:69:ca:c0:b6:04:25:be:6e:6e:4f:de:4b:20:32:
                    03:3a:bc:e1:15:84:eb:3f:b5:bc:92:54:fa:c8:cb:
                    7f:05:56:8d:4b:9e:2f:2f:d8:72:4e:fc:61:c2:c9:
                    44:01:95:c5:91:2e:9f:42:cf:72:2f:9f:2e:9e:08:
                    1c:50:63:8d:2d:b1:6c:14:c3:61:6b:67:0b:1d:6c:
                    0b:e9:76:c1:e9:2f:32:65:e7:32:63:2f:60:56:5c:
                    5c:45:bf:10:5f:4c:5f:31:f2:6f:01:ee:24:4c:21:
                    92:c2:ec:d2:3b:90:63:7a:ae:c9:96:78:bb:cf:c6:
                    2d:66:c4:89:10:43:24:8b:8a:b3:ea:7d:85:14:e8:
                    61:9a:dd:02:01:50:df:96:ac:45:d8:cb:a5:4e:f7:
                    50:83:cf:dc:e1:92:ab:e4:a9:e1:c7:60:e0:7c:05:
                    25:86:79:4f:73:43:b3:23:f6:b4:49:05:16:3e:30:
                    a3:84:9e:41:d3:97:94:89:5c:c3:95:9a:91:ff:d8:
                    6d:69:cd:32:3f:2f:ed:3d:13:b2:18:cb:73:51:a7:
                    8c:57:1b:3c:25:f9:c4:2c:20:f0:ad:a9:66:3b:6c:
                    11:43:b6:78:18:e3:2e:98:9b:e0:01:46:16:74:60:
                    aa:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                01:4D:BF:DC:D4:68:F6:88:48:FA:DA:CA:4E:0E:F0:70:27:50:FA:7C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/014DBFDCD468F68848FADACA4E0EF0702750FA7C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.76.0/22
                IPv6:
                  2804:3ca0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61599

    Signature Algorithm: sha256WithRSAEncryption
         8f:4e:0a:37:8f:ca:4f:2f:1c:1f:0c:5d:82:08:9b:be:67:fa:
         88:45:5a:a0:b7:b6:53:2a:a6:6e:12:d4:5f:2a:e8:96:be:03:
         ae:33:23:13:af:9b:51:38:50:ea:e9:73:08:41:43:41:90:75:
         bc:e4:71:ee:f5:c9:a7:c4:17:d9:1d:6e:6a:6a:c5:a2:0f:22:
         b3:9d:e1:0f:75:1d:a7:82:a9:84:b6:aa:a8:c4:95:07:bd:c5:
         70:80:15:01:08:a2:e2:97:a4:55:65:9e:d8:66:ea:cd:ec:80:
         c3:bd:4b:b6:4d:cf:d9:c9:72:61:60:53:cf:cc:27:fb:da:ed:
         6a:48:79:c6:7f:57:4f:21:a8:eb:16:07:ab:c5:7b:2a:81:0f:
         9d:cf:7f:2b:16:c3:a6:28:d9:16:dc:9f:1a:b6:33:e4:1d:a3:
         85:9c:31:4b:73:07:34:5a:52:89:8e:7e:3a:4e:37:1f:dd:48:
         90:cf:70:b9:2e:01:a0:3a:ec:c8:53:cb:eb:a4:33:63:ca:b5:
         56:75:97:5b:04:6c:a4:18:f3:03:c4:1b:12:17:f7:63:f7:12:
         aa:d0:4d:7a:73:4d:34:d2:63:16:e3:9a:f0:08:df:b4:9e:1b:
         b3:21:d7:7e:00:3f:77:96:3c:7c:68:6e:77:cc:87:fc:4d:6c:
         ff:bd:5e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:40 2024 by rpki-client on console-fra.rpki-client.org