Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1DDA37CFF677169A3C8B633EAA86B7B95B70716C.cer
File:                     1DDA37CFF677169A3C8B633EAA86B7B95B70716C.cer (raw, json)
Hash identifier:          lTenJn7MbHldoRTlWZq2aQ7DJY/czaRg/rUTMZGE4hU=
Subject key identifier:   1D:DA:37:CF:F6:77:16:9A:3C:8B:63:3E:AA:86:B7:B9:5B:70:71:6C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6D25B5E1DC29A69FC479DAC825DC36C52238F9AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/2/1DDA37CFF677169A3C8B633EAA86B7B95B70716C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 07:38:07 +0000
Certificate not after:    Thu 03 Apr 2025 07:43:07 +0000
Subordinate resources:    AS: 269130
                          IP: 45.180.40.0/22
                          IP: 2804:5fe4::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 02:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:25:b5:e1:dc:29:a6:9f:c4:79:da:c8:25:dc:36:c5:22:38:f9:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 07:38:07 2024 GMT
            Not After : Apr  3 07:43:07 2025 GMT
        Subject: CN=1DDA37CFF677169A3C8B633EAA86B7B95B70716C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bc:a7:9a:71:44:1a:bc:98:48:6b:61:ac:c7:
                    6d:e7:5b:a0:46:ec:29:2e:55:7d:71:08:b3:55:8e:
                    a9:43:2d:9a:5f:05:3a:13:7d:6a:65:1d:5a:fd:fa:
                    2a:c8:57:2b:2f:93:cf:c5:12:98:b6:9f:dc:f9:4f:
                    b1:ea:69:16:07:a2:f5:2d:7d:f6:34:07:d7:06:c0:
                    3e:b5:68:ca:fe:93:54:2b:11:4d:3f:bc:c7:c0:2a:
                    c1:60:fe:bf:43:5d:36:44:6b:c8:94:e5:72:ea:b5:
                    73:90:9c:62:a6:40:5f:3d:13:8c:04:2c:ee:f2:17:
                    39:86:b4:f1:00:f6:ef:3d:5e:ab:35:c8:4a:71:72:
                    99:c4:3e:bd:44:5c:f0:12:16:b5:73:63:00:bc:a9:
                    47:8d:72:79:71:35:e7:f3:bf:7c:6c:da:85:81:45:
                    5e:49:a0:38:75:c2:5d:32:32:1e:e7:54:85:79:d6:
                    a4:31:aa:6e:0e:14:70:2c:c4:7b:3e:06:29:19:bd:
                    a4:7c:f7:88:17:42:5d:d3:6e:f5:49:0a:f9:1a:43:
                    5f:ce:e1:9c:47:84:01:4e:de:f5:17:32:91:9d:9f:
                    bc:88:0d:04:ab:67:88:99:5d:e3:4f:53:26:a4:a7:
                    9d:18:ac:ea:39:cd:da:71:99:64:f6:b6:dd:6a:36:
                    02:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1D:DA:37:CF:F6:77:16:9A:3C:8B:63:3E:AA:86:B7:B9:5B:70:71:6C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/2/1DDA37CFF677169A3C8B633EAA86B7B95B70716C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.40.0/22
                IPv6:
                  2804:5fe4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269130

    Signature Algorithm: sha256WithRSAEncryption
         bd:d6:1e:8a:1c:61:a6:05:c4:a9:1a:7f:65:dd:b6:c4:ac:12:
         c8:5c:6d:61:e6:b6:0d:53:61:93:cb:3e:b7:46:aa:23:47:fb:
         27:08:e9:e6:41:81:48:14:33:ce:6c:e3:d7:81:98:1a:a5:fb:
         e1:71:b7:a6:94:36:ef:66:99:33:05:53:f8:23:ad:9d:0e:fb:
         40:43:13:8a:db:2c:98:2c:f7:7c:96:b0:b0:07:f2:07:89:f9:
         35:50:bc:1f:07:eb:75:6c:e6:fd:14:ed:80:5e:1d:59:3a:46:
         61:95:55:c7:e9:8b:44:3c:eb:85:b0:31:0e:5f:ed:66:6c:95:
         7c:54:6d:cf:75:5c:cb:90:1c:68:52:ee:0f:cd:77:ae:df:00:
         e2:81:db:bc:bd:bd:b1:f6:bb:2d:90:11:a9:6c:bd:ab:40:70:
         f0:59:2a:91:ba:d4:15:57:e6:13:66:d7:c1:cd:5b:14:cd:3d:
         c4:b0:fd:53:6a:7c:4f:ac:0e:05:64:3a:37:1b:25:87:57:35:
         af:e8:01:e6:6e:61:a4:a6:c2:41:fb:d6:41:0f:1a:c6:90:f8:
         7c:d1:25:ba:d2:c5:17:15:c4:a7:1b:7d:83:81:e8:e7:38:9c:
         9f:1a:9f:de:1b:9e:be:71:4c:81:c7:f4:33:01:89:40:b5:ad:
         29:52:7f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:06:30 2024 by rpki-client on console-fra.rpki-client.org