Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2060EDA3B3A799358824BDE72CD21670F9F23032.cer
File:                     2060EDA3B3A799358824BDE72CD21670F9F23032.cer (raw, json)
Hash identifier:          cKjtX2w8wOlQ++u+UXPmHiAqsYb6qzmPiVTnw9ERY2A=
Subject key identifier:   20:60:ED:A3:B3:A7:99:35:88:24:BD:E7:2C:D2:16:70:F9:F2:30:32
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       28BC939261F3EBDB34A9006C43F4D2D68E2DAF9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/2060EDA3B3A799358824BDE72CD21670F9F23032.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 26 Nov 2024 23:41:10 +0000
Certificate not after:    Tue 25 Nov 2025 23:46:10 +0000
Subordinate resources:    AS: 266339
                          IP: 170.239.44.0/22
                          IP: 2804:3648::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 00:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:bc:93:92:61:f3:eb:db:34:a9:00:6c:43:f4:d2:d6:8e:2d:af:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 26 23:41:10 2024 GMT
            Not After : Nov 25 23:46:10 2025 GMT
        Subject: CN=2060EDA3B3A799358824BDE72CD21670F9F23032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6d:93:79:b0:98:ae:c0:97:75:9e:e3:9a:c9:
                    7a:3f:62:6f:ba:41:a0:43:a7:2d:79:d3:5a:a5:93:
                    15:5f:a9:82:3a:98:60:cd:81:1d:e6:dd:e4:75:66:
                    3b:54:c9:d3:38:2c:00:eb:e3:59:55:a3:0f:50:c6:
                    bc:29:13:17:54:48:92:ed:3e:2e:08:19:24:6d:ef:
                    46:f8:bb:ca:78:98:72:8f:12:64:59:55:0b:35:af:
                    05:94:56:2b:f1:92:0e:c0:c6:d9:91:93:51:2e:45:
                    b4:e0:6b:f4:90:5b:8b:21:4e:e1:df:1d:e6:14:24:
                    3e:a6:a2:39:af:28:9f:14:93:81:74:8e:17:e3:a5:
                    81:a4:53:2e:f8:fd:2a:dc:7b:a7:26:7c:54:7a:9f:
                    60:46:d2:d6:98:a7:e3:27:92:45:5c:c8:30:91:31:
                    e1:82:e9:1a:49:63:b5:34:c4:2a:b5:13:4a:c8:e0:
                    64:3a:bf:19:b6:18:f6:1a:67:8b:97:fc:9e:0f:80:
                    c0:4e:0f:6f:47:7d:1e:57:fd:00:4f:85:71:47:65:
                    02:99:d2:2d:15:f8:41:05:87:8f:1a:99:61:23:2e:
                    53:b9:ce:47:22:83:52:00:49:29:18:e2:fe:25:5d:
                    4b:42:17:87:de:2f:72:91:a5:5c:28:20:22:ed:c3:
                    5f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                20:60:ED:A3:B3:A7:99:35:88:24:BD:E7:2C:D2:16:70:F9:F2:30:32
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/2060EDA3B3A799358824BDE72CD21670F9F23032.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.44.0/22
                IPv6:
                  2804:3648::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266339

    Signature Algorithm: sha256WithRSAEncryption
         63:a1:96:94:4a:de:79:41:0c:a7:18:ad:e3:3f:f7:7f:fe:73:
         3e:e6:ae:3a:d1:46:48:d9:8a:76:38:a3:58:af:7c:7c:f6:61:
         fa:8f:ec:97:56:ee:20:de:79:4f:37:58:21:fa:43:60:7e:d6:
         b9:da:78:57:ab:35:56:14:e9:90:bb:ba:2a:2d:a3:2a:aa:48:
         44:cf:d3:09:6e:95:51:7f:42:73:06:ee:97:7d:0c:d1:f1:58:
         88:9e:9c:a4:fc:86:70:90:c3:ee:f1:c4:93:25:1c:8d:b3:50:
         eb:df:59:6d:1e:42:b0:f9:e4:b0:71:1a:29:4c:9a:9a:8f:5b:
         c0:aa:36:a0:53:77:82:cf:12:6d:90:22:da:1e:79:d3:57:6d:
         cb:79:d5:19:18:74:b0:5d:50:55:92:cf:6f:09:e7:14:b4:23:
         0d:7b:5e:c5:b4:38:00:52:16:39:b5:98:9d:c0:48:20:43:5b:
         74:69:d9:ca:19:21:80:0e:c9:f3:90:dc:69:67:0b:08:28:78:
         fe:3c:5a:29:b6:f7:7d:58:4b:56:d0:95:83:8a:8f:59:70:cc:
         18:20:82:07:57:ca:63:55:01:c3:d2:8b:27:3f:a6:f9:19:77:
         58:27:ee:d9:79:4b:55:cd:81:3d:ba:ab:e1:54:6e:ce:93:e0:
         9e:1c:2a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:59:47 2024 by rpki-client on console-ams.rpki-client.org