Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2CD9B2A2B015061457F1A9598631FA6CA2004705.cer
File:                     2CD9B2A2B015061457F1A9598631FA6CA2004705.cer (raw, json)
Hash identifier:          1lVF8wq4lytfqd0yQiMgG/9JDA1KryJIRN+si6ewQ6k=
Subject key identifier:   2C:D9:B2:A2:B0:15:06:14:57:F1:A9:59:86:31:FA:6C:A2:00:47:05
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       086A343734536C4460BE9F045E658285FE39EEF7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/1/2CD9B2A2B015061457F1A9598631FA6CA2004705.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 06:59:31 +0000
Certificate not after:    Thu 03 Apr 2025 07:04:31 +0000
Subordinate resources:    AS: 269213
                          IP: 45.182.24.0/22
                          IP: 2804:611c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 05:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:6a:34:37:34:53:6c:44:60:be:9f:04:5e:65:82:85:fe:39:ee:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 06:59:31 2024 GMT
            Not After : Apr  3 07:04:31 2025 GMT
        Subject: CN=2CD9B2A2B015061457F1A9598631FA6CA2004705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e9:87:18:f1:77:d3:31:a9:f6:f3:ee:f5:18:
                    c4:e9:71:b5:38:81:57:cc:7b:df:a5:7e:f2:9f:b5:
                    25:78:7f:32:a2:5d:9e:57:bb:3f:c6:95:64:1e:f2:
                    d7:ef:c2:52:65:a6:1a:b5:d4:c8:55:37:3e:71:a7:
                    82:bd:66:3e:ad:fa:bd:19:49:76:8b:1b:a8:4d:2a:
                    87:75:94:bf:1a:a5:3f:17:ef:5e:34:38:14:47:a9:
                    0f:f8:2d:e0:e8:b6:92:83:52:88:35:44:68:ba:db:
                    bf:24:b9:e8:86:46:11:2c:17:10:44:63:76:37:6c:
                    b4:c5:59:52:cb:c5:aa:3b:58:08:0a:d1:61:c6:7a:
                    cd:10:5a:fd:98:42:37:cf:aa:b5:e2:a5:b1:17:54:
                    2e:f7:05:9d:59:c5:cb:e7:93:72:77:2f:45:46:cf:
                    91:43:98:22:a7:8f:ed:4c:f6:b3:b1:4e:84:3c:b9:
                    59:e3:fd:97:c9:52:3b:70:e7:0a:00:5a:5d:96:46:
                    44:2f:e1:6a:2c:d2:0b:33:f3:c8:8b:43:64:75:c7:
                    9c:bb:8e:86:97:66:6c:61:fb:e1:d7:4e:56:c9:93:
                    60:86:56:58:cc:86:3c:eb:8f:c1:e1:61:2e:54:9a:
                    2a:75:4f:60:b8:26:fc:c1:94:81:f3:10:78:82:fd:
                    9e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2C:D9:B2:A2:B0:15:06:14:57:F1:A9:59:86:31:FA:6C:A2:00:47:05
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/1/2CD9B2A2B015061457F1A9598631FA6CA2004705.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.24.0/22
                IPv6:
                  2804:611c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269213

    Signature Algorithm: sha256WithRSAEncryption
         b3:01:b1:70:b4:a6:c4:77:93:e1:82:53:6c:d0:12:58:54:8e:
         dd:ee:f2:46:73:db:56:f5:7d:dc:9e:97:85:aa:9b:e6:27:aa:
         02:0d:39:0f:a3:50:a6:09:3f:69:a2:37:5f:a8:33:62:29:f1:
         9b:78:bc:de:3e:7e:56:96:71:31:f4:1d:86:af:98:70:ab:ed:
         26:49:25:2c:62:d4:4c:06:46:32:f5:10:2c:bb:d7:a4:1f:c7:
         f7:27:e0:28:2a:5b:13:f8:55:16:73:92:76:1e:c9:20:0e:49:
         27:25:78:92:f4:e5:7d:d6:37:9b:99:04:4d:20:ce:f7:35:bc:
         e3:58:e1:d3:a4:3d:48:a2:42:e5:63:92:c9:8d:49:f9:37:49:
         c9:a5:ec:03:f4:c2:39:20:cf:cb:c0:6b:64:7d:ed:a5:17:03:
         af:dc:0b:b6:07:20:51:b9:01:cd:e2:65:16:70:35:40:83:b3:
         10:ea:a5:1d:55:7c:e1:5a:ab:7a:92:bb:90:da:d4:ce:15:4b:
         f6:de:35:88:95:39:e2:3b:45:6c:91:2d:bb:eb:89:b6:17:bb:
         20:a5:b6:fc:11:c7:76:8f:db:19:55:88:6b:10:fb:d5:51:f0:
         c6:07:84:54:65:ef:e7:4c:8b:ee:89:22:8d:bf:09:4d:e0:9c:
         7f:46:32:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 07:40:50 2024 by rpki-client on console-ams.rpki-client.org