Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.cer
File:                     05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.cer (raw, json)
Hash identifier:          WEZVAzTnFfyUgXEmLRmZkUjktuzXnxTFvtEmAgPb2m4=
Subject key identifier:   05:A8:5F:FC:2E:60:C3:11:7B:A8:B9:EC:C5:DC:DE:E8:91:37:DF:96
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       301D90394DB78407677C16E36C4BB00D04AECAB9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Nov 2024 01:17:24 +0000
Certificate not after:    Fri 07 Nov 2025 01:22:24 +0000
Subordinate resources:    AS: 269514
                          IP: 45.186.236.0/22
                          IP: 2804:65c8::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:1d:90:39:4d:b7:84:07:67:7c:16:e3:6c:4b:b0:0d:04:ae:ca:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  8 01:17:24 2024 GMT
            Not After : Nov  7 01:22:24 2025 GMT
        Subject: CN=05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4d:55:bb:7b:7c:1a:da:c1:1c:6f:5e:ec:c9:
                    fc:9c:24:97:39:73:c2:cc:9f:6e:2c:0d:c4:c4:0f:
                    2c:b5:8f:2e:1d:e8:c2:21:f4:ad:f6:f0:0c:a5:c2:
                    f8:a0:bf:38:ba:c5:67:3f:9d:70:6a:64:47:1a:46:
                    78:1f:7e:70:f8:76:df:3f:ae:76:cb:cf:ae:9d:57:
                    fe:38:24:0b:4f:71:bc:85:3f:13:00:3a:5f:e9:fb:
                    15:3b:a3:b8:0d:e2:e4:84:8a:ec:66:d0:dd:bd:db:
                    10:2a:91:0d:7c:9f:a9:29:6f:b0:3a:25:7e:3e:6c:
                    1a:5f:a9:3f:b4:44:18:19:6b:2c:a3:11:81:c6:b9:
                    dc:d1:a9:fa:e8:40:ca:9c:a5:ac:5b:dc:b4:04:e6:
                    7b:a1:84:fc:58:83:de:44:8b:30:e5:ea:95:85:7e:
                    e6:22:22:a2:81:a5:d8:d4:d6:d0:b6:b8:72:68:73:
                    49:09:14:de:5f:08:39:48:8d:12:5f:03:31:8a:6d:
                    93:6d:41:c2:d6:61:d2:40:15:ed:95:25:0d:25:d3:
                    20:ef:48:f5:f3:d9:31:23:a2:01:9c:31:9a:e3:34:
                    de:67:b4:61:a9:b9:03:88:e4:fd:6e:7d:56:34:c6:
                    ce:95:dd:b7:11:fd:83:29:77:04:08:d2:71:30:ee:
                    32:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                05:A8:5F:FC:2E:60:C3:11:7B:A8:B9:EC:C5:DC:DE:E8:91:37:DF:96
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.236.0/22
                IPv6:
                  2804:65c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269514

    Signature Algorithm: sha256WithRSAEncryption
         ad:c3:bb:f7:ba:58:44:74:d6:e3:75:8a:f7:7f:5d:98:34:a6:
         16:10:22:c2:b4:a3:6b:7e:05:bd:8d:9a:3b:6b:07:92:64:e0:
         ea:17:07:39:e8:82:cf:79:36:4b:82:2f:93:1d:d5:cf:48:0d:
         f8:e7:e4:ab:09:34:a9:ce:6c:ab:02:f5:5a:2c:bc:f4:25:e7:
         f7:ef:39:04:94:a5:aa:5f:b6:af:f2:81:08:ef:3f:5c:9d:1e:
         56:55:97:54:58:c6:05:46:31:39:75:5c:58:98:92:15:4f:ed:
         06:e9:83:65:70:b7:71:a6:56:2d:cb:21:44:60:26:64:69:21:
         75:3c:39:60:be:6a:0b:bd:65:b1:a9:26:eb:1d:2d:7b:3e:bb:
         d0:2c:d9:f5:16:07:19:58:f2:d3:27:94:36:68:45:7a:f5:3b:
         95:4d:d7:4c:c5:06:a8:71:75:e9:d7:d7:17:81:9d:b0:3e:c4:
         28:19:e2:da:15:61:f0:e9:55:3f:47:f6:b2:02:93:ee:89:07:
         eb:d5:57:f0:ae:fd:c3:d1:46:a6:ed:4c:87:51:fd:1e:17:ee:
         36:cb:f8:4a:68:11:e7:64:5f:ac:65:a1:a2:3c:83:76:ba:9d:
         3c:c3:32:9f:2c:98:15:72:99:59:bf:b6:57:8a:77:08:99:48:
         58:b4:df:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:34 2024 by rpki-client on console-ams.rpki-client.org