Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.cer
File:                     10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.cer (raw, json)
Hash identifier:          H6C7pe55dTG+vw0b1+khF00HGqSIZuIsMJWrKLTq8+c=
Subject key identifier:   10:83:5D:51:46:2A:1C:64:1B:9A:5E:DF:A9:3F:84:75:CC:EE:E4:C5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       68218D246D24889F7DF4C3A2C422FC3C7A51F60F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 02:56:13 +0000
Certificate not after:    Thu 03 Apr 2025 03:01:13 +0000
Subordinate resources:    AS: 269060
                          IP: 45.179.48.0/22
                          IP: 2804:5ed8::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:21:8d:24:6d:24:88:9f:7d:f4:c3:a2:c4:22:fc:3c:7a:51:f6:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 02:56:13 2024 GMT
            Not After : Apr  3 03:01:13 2025 GMT
        Subject: CN=10835D51462A1C641B9A5EDFA93F8475CCEEE4C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:71:a5:1d:cf:ab:36:70:0f:df:12:83:e7:74:
                    76:2a:bf:6b:f0:70:7f:06:91:ee:c2:f9:c1:0d:1d:
                    4d:82:5b:d0:57:4e:c3:d8:8a:e7:29:86:79:89:38:
                    f5:8c:57:d2:66:58:59:e9:02:65:ab:fc:55:4d:9b:
                    44:d8:41:e5:8f:f4:8a:5a:e1:26:e9:51:6f:b4:a2:
                    19:59:dd:16:c4:b2:63:34:1c:92:48:e5:a3:81:c7:
                    3a:8e:08:5c:21:ae:d0:d1:c2:59:d9:e8:24:99:8f:
                    28:c7:79:a7:fa:f5:92:48:bb:e6:f6:69:05:26:f5:
                    44:6b:be:2e:27:ef:be:fd:4a:06:47:c5:3a:66:d7:
                    3b:c7:aa:3f:3d:2b:6e:b6:9f:64:97:2d:2e:db:dd:
                    f1:cf:2a:c0:d1:d3:37:21:95:06:6c:03:9a:c1:98:
                    4c:e1:78:ac:02:e2:51:be:88:53:ac:bf:ea:68:ab:
                    2e:8c:d7:35:6f:f4:06:d0:42:95:af:c7:39:b8:c6:
                    59:eb:49:0e:97:9f:95:06:69:87:70:72:ee:d7:5a:
                    61:54:7c:59:e5:10:aa:22:4a:7e:89:5d:f8:9a:52:
                    a5:4b:00:b7:15:22:b8:2a:35:d9:ae:a0:75:20:a9:
                    71:92:3f:8e:e4:24:df:4e:69:55:e5:c9:4e:c2:08:
                    83:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                10:83:5D:51:46:2A:1C:64:1B:9A:5E:DF:A9:3F:84:75:CC:EE:E4:C5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.48.0/22
                IPv6:
                  2804:5ed8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269060

    Signature Algorithm: sha256WithRSAEncryption
         db:5e:d6:95:8f:47:de:ea:76:0d:1a:82:bb:c7:de:38:00:63:
         76:1d:48:55:19:e0:8d:5f:da:78:b1:7b:7f:28:77:0e:a3:9e:
         ef:f9:ea:78:d7:d6:a0:36:00:25:38:30:9f:4b:50:37:2c:02:
         4e:65:ff:b1:ac:ab:dc:8d:8c:ee:39:e8:cd:6d:37:a3:a9:fb:
         de:b3:84:d4:82:14:de:7d:dd:c0:c8:cb:e6:ed:ca:f1:2c:a8:
         1b:f5:e6:84:2b:9c:f2:a6:6d:c3:67:59:08:6b:3c:13:5c:1b:
         21:f5:20:46:5c:15:db:c5:ed:8d:8e:36:89:be:01:c3:68:25:
         ee:33:3c:61:19:e6:d5:8e:6f:c5:b0:56:a6:af:ee:26:91:7d:
         67:cb:1e:b4:e1:f4:c4:f5:0d:d6:ff:c0:8d:ee:e2:1d:6e:df:
         4d:9a:89:3c:e7:11:8d:43:dd:51:f9:90:d6:d6:3b:f9:68:7e:
         d1:60:27:0d:15:84:a0:2f:a1:4f:0f:c6:91:34:e3:09:00:93:
         7a:15:fc:4a:67:cb:f9:1e:c8:ee:84:cc:64:9d:6e:84:16:4c:
         90:d9:8d:7c:87:17:8b:be:80:26:bf:4d:b9:a2:1a:55:a1:29:
         85:57:d7:d0:33:50:f4:62:89:14:06:a1:2d:15:1b:1d:6c:8f:
         9c:e4:8f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:43 2024 by rpki-client on console-ams.rpki-client.org