Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.cer
File:                     0CEEA1DDF076523B39CF76E704244FA173114D8F.cer (raw, json)
Hash identifier:          JX5SFe7G8OLF/5HywUnP21Ouf6mBhIEsdEVOo8CbIn0=
Subject key identifier:   0C:EE:A1:DD:F0:76:52:3B:39:CF:76:E7:04:24:4F:A1:73:11:4D:8F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       729EFFADF92F5824C20D93B0B05F010439FCFAE8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 16:00:36 +0000
Certificate not after:    Thu 03 Apr 2025 16:05:36 +0000
Subordinate resources:    AS: 268418
                          IP: 45.160.120.0/22
                          IP: 2804:50e8::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 01:38:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:9e:ff:ad:f9:2f:58:24:c2:0d:93:b0:b0:5f:01:04:39:fc:fa:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 16:00:36 2024 GMT
            Not After : Apr  3 16:05:36 2025 GMT
        Subject: CN=0CEEA1DDF076523B39CF76E704244FA173114D8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1d:eb:6d:54:0a:cd:93:c7:80:65:c7:3a:56:
                    c9:0b:e0:1d:39:82:b3:f9:82:23:8a:74:2f:1d:3f:
                    c3:d8:57:b5:e5:54:ae:18:7c:23:1e:1e:7a:4e:78:
                    a4:7b:2d:3c:ce:93:ef:41:59:df:60:38:65:d9:1b:
                    d6:75:cd:a0:5a:f6:88:68:49:29:15:5d:d6:42:f9:
                    e2:2c:1f:f3:e7:c1:3f:dc:37:86:03:1b:5f:de:ed:
                    31:fd:9b:30:ac:c9:a2:13:23:69:3b:5c:6c:63:64:
                    c8:8d:82:17:33:e3:79:e9:a8:be:ea:12:68:ea:fc:
                    b0:b8:f7:c3:b2:ab:6b:f1:2b:7b:de:c7:12:a9:42:
                    d2:9e:3c:1d:97:5d:c7:08:95:1c:6e:49:fe:b4:00:
                    21:bd:08:d2:ca:44:b1:30:1c:a7:e7:44:2b:c8:02:
                    30:f0:0d:64:5d:5c:fb:c8:f8:72:14:fe:2b:12:00:
                    4b:f4:3e:7d:2e:68:f0:43:43:c2:a6:86:53:88:5c:
                    10:c5:26:a0:2f:c3:33:1d:9e:ca:42:24:89:8e:1b:
                    a5:20:8c:69:33:58:52:08:07:2a:a8:31:60:91:80:
                    58:bd:76:cb:37:73:9b:4f:42:77:09:72:2a:6c:67:
                    27:ac:be:bc:bc:ba:b7:9b:14:18:3a:0d:63:b4:af:
                    63:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0C:EE:A1:DD:F0:76:52:3B:39:CF:76:E7:04:24:4F:A1:73:11:4D:8F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.120.0/22
                IPv6:
                  2804:50e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268418

    Signature Algorithm: sha256WithRSAEncryption
         7a:02:ca:8d:77:c9:16:6c:97:ba:07:df:a5:d4:cb:fa:d0:f8:
         9b:8e:76:63:4c:69:4b:18:49:0a:10:22:3c:c3:b7:65:de:68:
         c7:da:80:4a:ac:3a:ad:0c:07:ac:e3:63:eb:55:22:6b:d4:b0:
         78:14:d6:da:87:d4:ac:b9:2d:0e:f4:8d:1e:fd:be:03:59:f8:
         8d:b6:ed:32:8e:90:e9:26:24:6b:ac:f9:51:64:e1:f2:a0:b0:
         41:fe:47:f5:af:8e:d6:91:31:c7:db:ac:f8:bb:91:38:ff:64:
         17:1e:67:69:db:ae:92:23:01:77:cd:87:5c:5e:82:fc:68:79:
         92:19:d7:66:93:74:95:f1:54:37:48:5c:19:6e:f8:37:9d:1f:
         61:54:8b:f6:be:20:ad:0e:3e:57:a6:30:49:20:3c:39:e5:4a:
         80:0b:12:e3:5a:e3:51:c9:61:01:fb:d7:d2:e3:6a:8d:3d:bc:
         3a:44:f9:39:93:fc:5e:c1:6d:94:b2:a7:e4:fe:42:d9:86:b9:
         fb:79:59:4a:46:8f:4b:53:90:10:e5:47:ab:e5:14:ff:24:f3:
         98:d2:73:a0:89:61:34:54:00:c8:94:63:8f:da:c2:b4:3b:73:
         45:1e:6d:f6:d1:56:b9:71:28:ca:e3:6e:e5:12:1d:2e:e2:25:
         f1:51:b7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:00:52 2024 by rpki-client on console-ams.rpki-client.org