Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/07767A41F66E619BE686DEE855A5A135F9F25C82.cer
File:                     07767A41F66E619BE686DEE855A5A135F9F25C82.cer (raw, json)
Hash identifier:          DsBrThSyyLV+8fmm2jksQyFDVSiLIQ6vpypWUtzMZ4U=
Subject key identifier:   07:76:7A:41:F6:6E:61:9B:E6:86:DE:E8:55:A5:A1:35:F9:F2:5C:82
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5FD1157C7A22A604EC444C9833E35695905DA691
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/07767A41F66E619BE686DEE855A5A135F9F25C82.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 26 Aug 2024 20:01:01 +0000
Certificate not after:    Mon 25 Aug 2025 20:06:01 +0000
Subordinate resources:    AS: 271573
                          IP: 200.0.179.0/24
                          IP: 200.6.134.0/23
                          IP: 201.131.106.0/24
                          IP: 2804:7da0::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:d1:15:7c:7a:22:a6:04:ec:44:4c:98:33:e3:56:95:90:5d:a6:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 26 20:01:01 2024 GMT
            Not After : Aug 25 20:06:01 2025 GMT
        Subject: CN=07767A41F66E619BE686DEE855A5A135F9F25C82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d9:10:9f:56:42:8b:30:56:f5:61:ff:cc:34:
                    c0:78:2d:e0:b3:d8:9e:cf:6d:ca:ee:15:9e:ec:49:
                    6c:8b:2f:f7:70:58:2b:e9:25:3d:a0:e5:0f:bc:49:
                    5d:c0:83:b3:76:36:08:35:07:df:c9:90:dc:92:2a:
                    bc:1b:a9:80:43:5e:f6:58:0a:41:b7:be:99:95:87:
                    97:81:6b:db:25:2a:74:4b:1e:9f:7a:5e:12:0d:54:
                    04:57:e4:24:34:ce:24:98:93:9d:f3:0e:8a:9d:a5:
                    36:90:92:1d:aa:c5:e9:34:dd:54:08:13:5d:e7:8c:
                    cc:76:ca:db:cf:c1:74:a8:17:c8:2b:1d:1f:a0:74:
                    48:a7:54:4b:87:0b:c4:c7:a9:de:cf:98:f7:84:90:
                    eb:83:83:10:37:37:ec:39:1b:32:73:5b:c7:2d:f1:
                    62:9c:65:0b:8e:78:d3:d0:79:10:36:8a:bc:72:08:
                    82:5b:b0:aa:e2:17:98:38:95:2a:e0:d1:9a:a0:01:
                    b3:b7:95:fc:30:5f:47:3a:f7:0d:4e:7e:ad:61:ce:
                    25:84:3a:15:87:49:ac:76:c3:43:be:49:a9:c9:a3:
                    c5:71:6f:60:03:bd:20:49:e9:20:f6:6b:7b:e6:9f:
                    43:2a:d6:8b:57:84:6a:bf:21:ac:84:a1:a0:25:84:
                    a6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                07:76:7A:41:F6:6E:61:9B:E6:86:DE:E8:55:A5:A1:35:F9:F2:5C:82
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/07767A41F66E619BE686DEE855A5A135F9F25C82.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.179.0/24
                  200.6.134.0/23
                  201.131.106.0/24
                IPv6:
                  2804:7da0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271573

    Signature Algorithm: sha256WithRSAEncryption
         2f:3e:29:e7:75:0c:0b:59:2a:b0:9c:21:1b:d6:b8:48:29:0a:
         ba:d2:eb:05:21:6a:e8:95:f0:68:33:59:ba:e9:34:7b:be:a5:
         66:cb:4c:d5:9f:fe:2b:54:f8:a5:df:38:3b:6c:74:c4:63:e4:
         78:55:2a:03:97:84:a5:42:c4:af:75:8c:d6:00:d3:6a:0e:46:
         02:fa:23:d2:c7:aa:2b:2b:54:6b:83:fd:cc:2f:0f:fc:f2:78:
         b3:9d:af:19:fc:f3:cc:66:83:ac:bf:6a:ee:94:1c:fb:b0:0f:
         64:a0:c3:a5:2e:f4:fa:d1:b0:10:59:57:41:42:89:9d:62:c2:
         52:0f:a4:85:55:5d:90:51:19:8c:d7:66:0b:f7:a7:9d:62:6d:
         94:81:28:92:c4:64:42:a4:fc:6a:04:98:85:83:7e:c0:63:0e:
         f3:28:3b:0b:28:c4:84:19:26:2b:e5:07:30:63:31:61:1c:5e:
         de:ed:ad:c1:55:b8:b4:5d:ba:e9:7a:b9:d1:a1:e5:4d:ce:45:
         23:f1:03:91:67:d5:d9:e0:ec:3a:d2:8a:ea:1d:ac:5b:45:34:
         ca:da:1c:10:63:08:81:87:49:90:b3:43:d4:c2:f4:b4:10:cc:
         89:6b:ad:92:f6:63:b7:c2:86:8e:ba:9e:4d:3b:2b:03:c9:07:
         7f:86:4f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:28 2024 by rpki-client on console-fra.rpki-client.org