Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2CEA12FC4EC4540453841C2AB8D42D921FB2FA7A.cer
File:                     2CEA12FC4EC4540453841C2AB8D42D921FB2FA7A.cer (raw, json)
Hash identifier:          bz8U7U/xzqXXS9SeO3imt13ptvr9LrLS+0aHvbrvE7o=
Subject key identifier:   2C:EA:12:FC:4E:C4:54:04:53:84:1C:2A:B8:D4:2D:92:1F:B2:FA:7A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5319CC595D1C732B7AE3C28C3FFD1E785A72AFC8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/2CEA12FC4EC4540453841C2AB8D42D921FB2FA7A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 28 Oct 2024 21:20:29 +0000
Certificate not after:    Mon 27 Oct 2025 21:25:29 +0000
Subordinate resources:    AS: 52596
                          IP: 179.191.48.0/21
                          IP: 2804:d14::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:19:cc:59:5d:1c:73:2b:7a:e3:c2:8c:3f:fd:1e:78:5a:72:af:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 28 21:20:29 2024 GMT
            Not After : Oct 27 21:25:29 2025 GMT
        Subject: CN=2CEA12FC4EC4540453841C2AB8D42D921FB2FA7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c8:f1:49:eb:fc:ee:04:d4:29:99:7a:f7:3f:
                    46:18:35:d1:6a:99:a6:7c:05:ca:5e:29:a1:86:45:
                    82:23:42:cd:af:2f:a2:e6:86:a4:d7:66:9e:80:aa:
                    2c:0e:3d:f3:65:ee:93:02:d9:1a:a7:62:5b:d1:83:
                    56:cc:2d:d1:cf:7d:a6:d2:9a:ce:84:3b:1c:82:af:
                    8e:73:78:0d:cf:2b:85:00:45:57:fd:e2:32:6b:97:
                    4b:58:6c:1d:1b:20:63:8c:30:d1:44:b6:85:12:d7:
                    45:26:3a:c5:6a:ad:4e:31:b2:d6:a1:6e:a9:d3:61:
                    52:34:d3:c7:b6:fb:85:4f:6e:a1:58:79:20:9b:2a:
                    38:5d:02:07:fb:7f:3a:2f:cf:09:41:02:2b:9c:23:
                    8c:84:6f:8d:2c:ee:76:50:c9:9e:2f:f3:a0:b9:07:
                    c9:fc:04:c7:cf:f5:2c:49:02:3c:52:20:e1:73:64:
                    61:58:1c:65:44:83:ab:60:0c:db:06:72:08:98:07:
                    9b:4a:f0:af:25:c2:01:67:ec:5b:c1:d4:c0:4d:a4:
                    d8:e5:ef:0d:23:c0:f9:98:ae:b8:5b:c0:d6:26:2e:
                    fe:68:6c:23:ce:b3:95:ff:c2:85:08:5b:06:cd:f3:
                    c3:4e:8d:b6:69:69:d2:2a:25:6d:6e:80:f0:34:20:
                    73:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2C:EA:12:FC:4E:C4:54:04:53:84:1C:2A:B8:D4:2D:92:1F:B2:FA:7A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/2CEA12FC4EC4540453841C2AB8D42D921FB2FA7A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.48.0/21
                IPv6:
                  2804:d14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52596

    Signature Algorithm: sha256WithRSAEncryption
         08:ad:1d:16:34:15:2e:35:31:88:4f:28:95:1f:e6:5b:71:14:
         16:68:c5:18:e2:f8:00:f6:eb:aa:df:91:67:4d:ec:45:36:f4:
         2a:83:a7:8f:73:a6:e2:44:f3:3c:8a:9d:85:1f:0f:f1:64:7e:
         95:d5:64:6b:f5:aa:6f:b7:b5:54:7b:b0:be:7e:30:00:de:52:
         6b:3b:d0:72:af:fa:60:8c:48:81:66:d4:0c:11:79:3b:4b:9c:
         b9:15:8c:62:5b:24:78:c6:49:84:10:83:72:4c:2e:61:9c:9a:
         66:7e:8b:8c:fd:2f:f0:ca:70:1d:b2:95:61:11:8d:10:0c:b0:
         32:12:fc:90:d4:49:3d:ca:03:28:d8:45:64:d4:e3:8f:44:f4:
         99:79:4b:62:4d:4c:71:4e:93:e2:76:4a:02:34:6d:68:76:a9:
         da:99:29:8a:04:db:87:7f:97:b7:2f:8e:84:e1:17:e1:f8:fd:
         13:f3:09:61:b7:1d:62:15:8a:4f:48:99:89:d1:13:75:76:b1:
         cf:eb:86:7a:ef:c3:b5:dc:c3:8e:12:89:3c:93:7f:ea:2b:d7:
         5a:23:35:41:16:a9:31:18:85:df:f3:a3:f9:b2:a5:a7:28:6b:
         55:7c:0f:c4:d3:12:05:3a:3a:b9:c9:0a:3b:e4:e9:43:18:7b:
         bb:ec:0f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:45 2024 by rpki-client on console-ams.rpki-client.org