Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer
File:                     2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer (raw, json)
Hash identifier:          fh9LUnNeofzMvI2kj9DvrI88Z41AAp4iJ4+EkncLcD8=
Subject key identifier:   2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4B5D31F85B8ABD76DE5C61B6D77B5EF06CB33715
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 20 Sep 2024 16:22:26 +0000
Certificate not after:    Fri 19 Sep 2025 16:27:26 +0000
Subordinate resources:    AS: 262296
                          IP: 168.181.196.0/22
                          IP: 170.81.0.0/22
                          IP: 177.11.120.0/21
                          IP: 177.85.76.0/22
                          IP: 2804:a84::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:5d:31:f8:5b:8a:bd:76:de:5c:61:b6:d7:7b:5e:f0:6c:b3:37:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 20 16:22:26 2024 GMT
            Not After : Sep 19 16:27:26 2025 GMT
        Subject: CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f2:cc:f8:f6:63:30:10:d6:84:d2:50:6e:00:
                    7a:9c:e5:82:da:57:40:7b:33:f5:8e:08:44:0e:cb:
                    6f:a1:42:41:36:3b:48:6d:92:de:4e:e2:7a:ca:48:
                    f1:cb:22:0b:53:14:25:c4:be:54:f3:62:62:1e:56:
                    db:31:b0:f2:5b:37:c8:8d:2e:1f:b5:a4:38:86:4e:
                    e8:66:23:8d:9f:45:eb:b3:49:e8:fa:67:07:d4:8f:
                    3e:73:18:8c:b2:5b:89:33:0c:8d:39:a1:47:2b:55:
                    20:d3:ef:95:80:f8:c1:24:a5:7f:0e:89:02:55:39:
                    a7:4c:ae:2d:d8:b8:d5:0f:4e:23:40:8a:59:a9:42:
                    53:a9:e2:23:4e:54:bf:b2:49:94:51:3c:00:2a:ca:
                    10:82:dc:99:ab:c1:ca:86:48:36:e4:8a:4f:0f:b3:
                    8c:ce:20:4b:ac:da:d2:10:09:10:a8:74:5f:4f:9c:
                    fe:b7:96:dc:ac:a2:d6:47:c3:52:cd:16:94:d0:ad:
                    95:1a:5f:dd:67:ad:ab:75:2e:4f:f2:58:91:28:7a:
                    f3:a5:3e:75:45:57:47:51:94:c1:91:4f:a8:1f:e7:
                    be:2f:cf:96:2a:7e:87:4c:f7:d7:1e:27:38:57:f0:
                    19:f9:be:31:15:0c:64:59:9e:4a:6a:d9:b6:47:4f:
                    49:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.196.0/22
                  170.81.0.0/22
                  177.11.120.0/21
                  177.85.76.0/22
                IPv6:
                  2804:a84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262296

    Signature Algorithm: sha256WithRSAEncryption
         14:67:52:b4:58:61:d9:4f:ff:90:31:ca:be:ac:8e:16:f4:e5:
         d5:ff:36:36:45:62:69:79:93:87:c5:78:22:00:03:b2:db:cc:
         56:9e:6c:11:3b:8d:30:2e:d1:b0:90:5f:b9:f1:1e:53:d4:9f:
         df:94:73:d3:af:b4:8d:92:e1:3c:e6:79:10:6a:7a:68:42:7f:
         68:9b:61:6f:e6:f4:a6:1c:cd:16:c4:ca:fb:f8:f2:92:3f:67:
         74:15:cd:44:ff:ce:f0:c3:79:d5:42:bc:0e:d9:ca:e9:67:c7:
         83:14:8c:f0:4a:9c:35:9a:9b:11:23:3d:73:63:b6:b7:41:56:
         e9:36:ae:b8:6d:f0:9b:db:3e:f9:45:74:b3:5c:f0:f9:29:54:
         e4:20:a4:7b:a0:ee:c6:05:f5:1f:e1:aa:ba:42:b3:cd:02:18:
         6b:c5:e0:e6:18:7b:8d:fc:53:b1:ca:5c:f2:b4:42:81:22:2a:
         a2:55:4b:4e:eb:81:ad:28:2b:e4:23:fa:66:4f:73:c0:92:6e:
         83:45:c8:a6:06:e1:ad:8e:3f:62:0c:54:6e:fb:2a:ab:06:e4:
         54:30:8b:da:47:b7:93:33:fd:bd:d9:ef:40:e3:16:c6:e9:40:
         78:3e:f1:4b:2f:f7:50:e7:d9:e3:7e:7d:8b:75:20:7c:78:53:
         fc:c4:6b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:19 2024 by rpki-client on console-fra.rpki-client.org