Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2.cer
File:                     107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2.cer (raw, json)
Hash identifier:          ON7KdEP4ykH29m0b4jdXPmWuO4goB7WJD098Gnh7iBc=
Subject key identifier:   10:79:56:E9:CD:07:A3:AA:E9:EF:EB:AE:A7:DD:FB:1C:27:A1:16:D2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       791A80BC1195F06858BF2B1A475F0E7FE2CB2FCF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 24 Jan 2025 15:23:03 +0000
Certificate not after:    Fri 23 Jan 2026 15:28:03 +0000
Subordinate resources:    AS: 271014
                          IP: 191.7.104.0/22
                          IP: 2804:74f4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 21 Feb 2025 16:04:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:1a:80:bc:11:95:f0:68:58:bf:2b:1a:47:5f:0e:7f:e2:cb:2f:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 24 15:23:03 2025 GMT
            Not After : Jan 23 15:28:03 2026 GMT
        Subject: CN=107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c9:7d:e5:05:8c:33:e5:14:f9:97:e4:38:c1:
                    61:de:c8:8f:12:d4:81:fd:57:44:81:e1:a2:ab:e4:
                    72:5f:85:5a:6c:0b:de:d0:f8:97:3f:18:70:c6:fa:
                    ed:16:c0:ba:dd:f4:22:9a:9e:cd:3a:96:5c:a7:ac:
                    8b:9a:2e:4f:a3:e7:11:f6:aa:3f:d9:f5:bb:32:19:
                    22:70:36:2c:41:38:6f:ef:f8:7d:01:ba:32:9d:64:
                    6f:48:06:4c:95:5c:79:65:53:d7:99:be:bb:79:d5:
                    16:8a:c8:53:9c:76:cd:db:a0:7a:f8:9a:2b:eb:d5:
                    44:5d:52:1d:22:ea:16:2d:52:3c:00:0a:2b:bd:1f:
                    09:c1:f5:95:08:d6:9b:8d:bb:5b:39:9f:5a:a2:6f:
                    1c:d2:2a:ce:fb:65:7b:60:6d:5e:c3:7c:53:7f:52:
                    bd:e7:a7:a9:65:fa:3b:c8:3b:1d:f6:b2:14:d1:5b:
                    7d:79:6a:61:d6:54:76:c4:57:c7:45:b0:fd:ca:72:
                    9e:38:a3:0f:0c:68:df:16:6b:8e:8a:79:89:80:f7:
                    b6:3e:e2:57:22:69:a5:4a:b5:e7:3c:24:4d:bd:65:
                    1f:96:48:51:3d:9f:fa:38:7e:99:6a:de:2b:39:4b:
                    e6:7e:91:01:9e:b1:66:c7:a8:4c:52:c1:f7:c0:e9:
                    31:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                10:79:56:E9:CD:07:A3:AA:E9:EF:EB:AE:A7:DD:FB:1C:27:A1:16:D2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.104.0/22
                IPv6:
                  2804:74f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271014

    Signature Algorithm: sha256WithRSAEncryption
         a0:1c:2b:2f:88:3a:73:61:e8:96:c4:b5:57:cb:55:0c:ee:b9:
         9f:72:93:10:4b:54:32:05:64:fb:b9:97:3c:e4:f8:24:85:31:
         32:47:6d:2e:30:1b:b2:81:7a:6e:06:3e:38:60:e9:9d:37:30:
         22:2d:2a:93:17:24:bf:18:f7:02:ed:cd:3f:cb:67:ec:1b:e0:
         22:00:a2:35:9a:eb:b5:02:4f:f6:35:eb:ba:cc:aa:90:e4:80:
         53:5e:a0:c6:d1:25:80:96:88:20:13:f7:99:3d:25:1c:ef:6b:
         80:33:44:55:10:5a:e2:94:4c:ef:e7:65:2a:15:47:36:2f:d4:
         3b:8b:51:c0:9f:35:a2:e0:93:a6:f9:19:3b:6f:f7:72:42:83:
         0b:55:b3:c5:e8:0d:e8:c7:51:57:32:b9:5c:23:d7:64:aa:f4:
         a5:28:16:38:94:b8:e6:e0:6f:57:23:5e:af:3e:ad:6c:b8:48:
         f4:83:51:be:de:3b:67:f6:db:a2:a1:13:07:88:42:8b:3c:ab:
         09:24:9e:ef:85:e5:52:a0:03:c2:c2:f2:0a:da:36:61:ed:3d:
         c3:40:6a:38:ea:22:a4:69:b2:72:c3:25:5d:68:4d:a4:f0:6e:
         d6:98:fb:87:5d:f1:98:7e:98:5d:8f:bc:26:4c:aa:bc:26:21:
         3d:ce:ec:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:38:38 2025 by rpki-client