Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0E6FD47D905EAC8EE5AA9D2C5C3B6A407552D02B.cer
File:                     0E6FD47D905EAC8EE5AA9D2C5C3B6A407552D02B.cer (raw, json)
Hash identifier:          J6lUYkZIBsRqhlCpF6pRY842+srX3aovVEfrbTQCrzM=
Subject key identifier:   0E:6F:D4:7D:90:5E:AC:8E:E5:AA:9D:2C:5C:3B:6A:40:75:52:D0:2B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       605A91EA47FAE28D2602E6605263488E16AC3D7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/1/0E6FD47D905EAC8EE5AA9D2C5C3B6A407552D02B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 16:13:12 +0000
Certificate not after:    Thu 03 Apr 2025 16:18:12 +0000
Subordinate resources:    AS: 267528
                          IP: 201.182.176.0/22
                          IP: 2804:42cc::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:5a:91:ea:47:fa:e2:8d:26:02:e6:60:52:63:48:8e:16:ac:3d:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 16:13:12 2024 GMT
            Not After : Apr  3 16:18:12 2025 GMT
        Subject: CN=0E6FD47D905EAC8EE5AA9D2C5C3B6A407552D02B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:79:02:a9:c2:6c:c1:8a:45:e5:15:e5:81:b0:
                    2f:ac:c7:d8:af:cb:bc:59:be:b3:66:13:cd:e0:3b:
                    fe:78:c3:9c:1d:df:fe:20:9c:85:2c:f2:1f:ad:42:
                    88:29:e5:f5:26:8b:df:fa:17:c4:3a:0d:03:ce:c4:
                    9d:72:29:8e:9e:ef:e8:d6:24:a4:77:66:47:0b:61:
                    14:96:28:4a:1f:5a:9e:7d:e5:f0:f4:2d:2a:b6:a4:
                    a0:a9:ce:7a:fc:55:60:a1:50:44:a4:fc:ed:34:a2:
                    2f:9c:c5:35:8f:73:dd:df:a6:af:f4:59:c0:5e:47:
                    08:ec:7b:d3:1d:f4:49:4e:0f:10:6b:68:96:6f:f3:
                    88:c0:75:9e:bf:bb:90:5a:f3:ff:ff:4d:94:2d:6d:
                    f6:ed:1a:ee:8b:ad:c1:ca:ef:3f:b7:67:04:3d:5f:
                    32:5b:75:60:e4:20:04:15:68:d1:fa:71:8c:18:29:
                    80:32:36:ed:aa:6a:0c:3a:50:71:60:f5:c3:a5:1e:
                    ae:2d:09:4a:da:0f:dc:c1:b3:64:de:2a:a4:c3:23:
                    a7:e7:c9:af:2a:ab:4f:e3:70:7c:81:1c:e2:68:8c:
                    f7:f4:a3:f6:7e:05:8e:1c:e3:d2:f3:e1:3d:2a:8c:
                    6a:31:52:a7:ba:e8:d5:d3:6c:28:98:42:1e:69:a0:
                    1f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0E:6F:D4:7D:90:5E:AC:8E:E5:AA:9D:2C:5C:3B:6A:40:75:52:D0:2B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/1/0E6FD47D905EAC8EE5AA9D2C5C3B6A407552D02B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.176.0/22
                IPv6:
                  2804:42cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267528

    Signature Algorithm: sha256WithRSAEncryption
         31:99:de:ab:d3:eb:e7:6a:87:e8:53:a7:79:fe:6b:3a:18:1a:
         9d:b6:98:4d:2d:18:37:98:09:ad:0e:bf:fa:68:57:64:50:b0:
         38:b9:c5:87:42:a7:b3:f5:b2:ea:48:a3:62:02:8c:44:ed:9b:
         47:a8:30:45:47:06:50:0c:97:ea:67:7a:72:33:c6:60:ce:a4:
         2e:a1:a2:40:85:5d:c1:76:52:1e:e5:7e:37:16:ac:49:8f:a8:
         20:bf:bf:b8:77:1d:73:c2:56:d3:1f:e5:49:02:ed:58:0f:2f:
         47:77:02:0f:b9:b4:a3:c8:95:7a:b9:c4:d6:80:f5:3f:39:37:
         b6:f0:3b:fc:be:b3:b9:ed:a6:5b:4c:08:86:3d:3f:c6:43:d1:
         59:77:53:7e:7b:cf:9c:ef:51:a3:c0:14:b1:fd:eb:20:04:4e:
         26:62:aa:96:24:cd:ec:9d:39:e6:ae:d5:d1:57:41:8f:39:1e:
         ab:c9:21:01:05:17:49:e0:5d:c2:5f:df:ab:52:13:61:f1:a9:
         37:1c:ae:44:0e:d6:22:b9:50:7e:64:ed:fc:af:12:72:58:94:
         a1:1e:bf:70:8d:74:73:f5:49:63:2f:ea:3f:9b:19:ee:3b:fe:
         d9:6c:66:9e:e2:a6:7a:a0:ab:1a:b6:77:d7:c9:3e:f8:8e:49:
         fd:b6:86:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:14 2024 by rpki-client on console-fra.rpki-client.org