Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1C96AC4BFA7DCA99F077B9FCC12EE70E72C86904.cer
File:                     1C96AC4BFA7DCA99F077B9FCC12EE70E72C86904.cer (raw, json)
Hash identifier:          h1h6o/4WZ1qoYR5a9f2x9Abhr6gPz1yz4W1RP7vv+Ag=
Subject key identifier:   1C:96:AC:4B:FA:7D:CA:99:F0:77:B9:FC:C1:2E:E7:0E:72:C8:69:04
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       615FF1D3C072C26DEBBB978D346F59C9F642E29B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/1C96AC4BFA7DCA99F077B9FCC12EE70E72C86904.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 13 Nov 2024 00:10:52 +0000
Certificate not after:    Wed 12 Nov 2025 00:15:52 +0000
Subordinate resources:    AS: 271699
                          IP: 45.228.36.0/22
                          IP: 2804:7fa0::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:5f:f1:d3:c0:72:c2:6d:eb:bb:97:8d:34:6f:59:c9:f6:42:e2:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 13 00:10:52 2024 GMT
            Not After : Nov 12 00:15:52 2025 GMT
        Subject: CN=1C96AC4BFA7DCA99F077B9FCC12EE70E72C86904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c3:6e:06:65:fd:8d:4a:ef:18:b8:23:f1:1f:
                    20:6f:d8:24:b8:94:2f:c6:09:b5:89:b7:53:b0:81:
                    7f:34:77:71:f2:bf:e6:17:5b:4a:4c:47:94:c7:01:
                    86:c3:0d:79:83:fc:23:7b:c8:15:ff:b1:a5:7b:50:
                    85:40:a9:0d:e5:09:1e:4c:cd:40:98:ae:08:14:e5:
                    a3:81:2f:23:8c:1e:e4:df:56:2a:3b:b2:54:ea:a5:
                    23:6b:92:ca:09:c7:04:e7:c0:7e:32:54:8d:41:80:
                    9c:1a:41:3c:08:62:51:e9:bb:44:06:c3:cf:fe:dd:
                    65:2a:97:8e:de:a4:3d:8d:6c:bd:2b:94:7d:fc:6d:
                    34:f3:b5:6d:ad:d1:05:68:d7:1e:87:f7:5d:06:9e:
                    1f:f7:54:9e:2b:85:85:52:13:c1:e6:33:e3:3a:47:
                    4a:46:3b:b5:12:4c:b4:6a:d9:25:c7:d1:2e:d9:3c:
                    78:ab:8c:7d:22:38:61:47:4e:d2:0b:cb:1b:fc:51:
                    65:44:19:f5:2d:c5:4a:4e:3d:5d:7f:42:4a:7f:94:
                    4f:ea:89:da:38:d8:09:73:14:7f:74:1c:75:8d:41:
                    69:87:db:e0:1e:c0:45:e7:8c:c4:ce:f3:df:5f:cf:
                    40:57:87:d1:65:f0:47:9c:fe:75:1c:60:8e:39:e1:
                    db:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1C:96:AC:4B:FA:7D:CA:99:F0:77:B9:FC:C1:2E:E7:0E:72:C8:69:04
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/1C96AC4BFA7DCA99F077B9FCC12EE70E72C86904.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.36.0/22
                IPv6:
                  2804:7fa0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271699

    Signature Algorithm: sha256WithRSAEncryption
         34:e5:47:71:21:4c:78:eb:4a:70:e1:d4:56:36:62:0c:9f:da:
         dd:b5:dc:1f:b0:d4:7f:e4:23:a1:dd:6e:52:76:4d:54:13:b8:
         10:7e:4c:a1:a9:41:92:4f:68:99:27:1f:5a:97:b8:72:8b:e1:
         e0:b1:37:01:c5:81:d1:50:0c:e8:ac:53:be:00:05:3d:8e:44:
         92:e8:b8:4d:23:31:1b:82:f1:5d:2a:84:d6:41:4a:2a:39:ee:
         6e:4b:43:4b:1c:9f:80:68:79:e2:86:1c:c4:f3:72:f1:6f:4e:
         3d:35:31:71:1c:57:29:7d:28:31:77:59:36:57:74:83:95:eb:
         42:fb:d3:e1:9b:1f:c5:c5:62:dc:cb:8c:94:c3:5b:25:e1:ed:
         d6:59:8b:f3:71:7a:bc:4b:84:f5:e8:61:e4:73:02:7c:e2:b0:
         42:87:05:11:3c:86:65:0d:b1:69:3d:af:28:52:2e:06:10:6e:
         f6:a2:71:03:b7:54:b9:ef:25:b9:8c:3d:5d:02:14:09:27:41:
         54:5e:40:15:ba:57:1a:c3:c9:2b:ac:f4:f9:10:cf:b1:c2:2d:
         47:4a:05:70:e1:1b:dd:3a:11:9f:82:a8:64:7b:b6:2d:e2:39:
         3d:fe:7f:ac:d3:cb:37:5e:7e:26:c4:7a:26:26:92:e7:2d:88:
         28:2c:c3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:13 2024 by rpki-client on console-fra.rpki-client.org