Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer
File:                     2C425257AE7B63529EB88108AC7DEA60648B43E5.cer (raw, json)
Hash identifier:          DQPcQt6dZZ4BtdnMDRI5KT5K2cGL1YcOpegwDpwAY+k=
Subject key identifier:   2C:42:52:57:AE:7B:63:52:9E:B8:81:08:AC:7D:EA:60:64:8B:43:E5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       18BBCF2F1C603BC16C54BB010513E6EC540023A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 01 Aug 2024 15:05:08 +0000
Certificate not after:    Thu 31 Jul 2025 15:10:08 +0000
Subordinate resources:    AS: 272549
                          IP: 187.84.152.0/22
                          IP: 2804:84f8::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:bb:cf:2f:1c:60:3b:c1:6c:54:bb:01:05:13:e6:ec:54:00:23:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  1 15:05:08 2024 GMT
            Not After : Jul 31 15:10:08 2025 GMT
        Subject: CN=2C425257AE7B63529EB88108AC7DEA60648B43E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e8:48:08:ba:1e:2d:7a:79:a7:e9:3e:8e:fe:
                    cd:07:4e:94:46:75:ac:46:7d:76:ea:68:1f:d6:d8:
                    86:b7:63:6f:97:b4:35:e5:35:46:30:bf:50:72:b4:
                    55:71:40:e8:19:c2:0f:b5:0a:a9:10:73:0b:f5:4a:
                    09:e2:c5:0b:db:1e:6b:7c:e1:f4:10:fa:5c:64:16:
                    a4:12:dd:06:bf:a9:92:de:59:d8:cf:aa:31:4a:ce:
                    fa:c1:90:8a:45:f5:ad:98:df:93:db:e4:fb:ce:79:
                    2c:07:37:49:53:a9:b9:57:f0:e5:b2:11:88:19:ca:
                    ed:9f:f0:55:4a:5a:e3:84:b8:9c:14:76:be:f9:8e:
                    7e:fe:73:61:bc:f9:97:a6:76:5e:73:5d:75:88:cc:
                    c9:b7:fb:3c:18:63:a6:67:27:1c:48:16:f0:70:1b:
                    51:ca:93:6b:cd:4d:91:df:4c:b1:1c:dc:5f:6e:18:
                    72:bd:49:8b:c1:cf:41:a1:6e:de:ce:38:c9:43:e2:
                    80:15:74:18:fb:36:93:d7:74:3e:28:c0:06:7b:83:
                    5d:29:8c:31:48:95:3b:9a:e4:5c:c6:8c:11:a4:49:
                    54:7c:8a:13:39:ef:c9:0b:45:12:9d:17:88:64:24:
                    0e:98:95:6a:2b:c7:ef:ca:6b:9b:92:90:4f:0e:ae:
                    1c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2C:42:52:57:AE:7B:63:52:9E:B8:81:08:AC:7D:EA:60:64:8B:43:E5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.152.0/22
                IPv6:
                  2804:84f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272549

    Signature Algorithm: sha256WithRSAEncryption
         65:c5:8f:15:95:c6:17:87:83:65:05:12:41:8e:77:c5:f1:ef:
         79:ed:41:7e:71:3f:36:5a:fc:d3:3a:01:f6:d9:97:a0:37:c5:
         59:1e:8c:18:4e:bf:fc:e8:3e:7a:dd:36:58:f3:be:91:65:60:
         7a:4a:ff:dc:a4:7f:07:8d:76:46:16:39:1c:3a:e5:f3:85:98:
         70:fb:f5:7f:e4:62:79:5d:89:92:72:bf:fb:92:19:2e:cd:1d:
         8b:eb:b5:fe:85:b4:d5:50:cf:2e:cb:43:e6:fd:17:5b:71:2d:
         03:79:fd:89:58:3b:d0:b1:86:a0:8a:b8:00:bb:13:c8:13:75:
         7d:67:88:ab:ca:b3:26:3a:dc:15:c5:81:0a:fd:1a:53:7f:d9:
         39:1c:41:5e:30:f4:f6:09:ac:9b:b0:d1:69:02:47:c7:5d:ab:
         c6:1e:de:52:58:fb:2b:f5:86:d2:13:a5:a5:39:46:dd:9a:70:
         64:88:75:66:da:ca:90:56:18:a3:35:37:bb:cd:25:9c:69:ea:
         c9:8c:05:37:9b:cf:4c:3c:c7:df:39:7b:fd:ec:2a:3d:c9:33:
         af:73:b6:c8:c5:c1:8f:b6:fc:79:ab:9e:fc:b4:0f:2e:b1:a1:
         29:55:a5:da:05:82:75:d4:7a:17:dd:49:2b:d2:46:72:27:9f:
         4a:8d:c1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:32 2024 by rpki-client on console-fra.rpki-client.org