Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5060A86A09E56CD00DC4540812BD4D7775AC9715.cer
File:                     5060A86A09E56CD00DC4540812BD4D7775AC9715.cer (raw, json)
Hash identifier:          oDcHPUOOLKp4OgNcQ4MTjquEav+ziAFZad4LHwZxo0A=
Subject key identifier:   50:60:A8:6A:09:E5:6C:D0:0D:C4:54:08:12:BD:4D:77:75:AC:97:15
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1D65E4886B0A008D255B864398F8E64DD4C7810A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/5060A86A09E56CD00DC4540812BD4D7775AC9715.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 12 Sep 2024 18:53:07 +0000
Certificate not after:    Thu 11 Sep 2025 18:58:07 +0000
Subordinate resources:    AS: 262550
                          IP: 143.0.40.0/22
                          IP: 168.197.4.0/22
                          IP: 177.72.168.0/21
                          IP: 2804:28e0::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:65:e4:88:6b:0a:00:8d:25:5b:86:43:98:f8:e6:4d:d4:c7:81:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 12 18:53:07 2024 GMT
            Not After : Sep 11 18:58:07 2025 GMT
        Subject: CN=5060A86A09E56CD00DC4540812BD4D7775AC9715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:aa:05:cb:ea:ab:b6:d7:ab:2f:e3:0f:ac:e9:
                    c3:d9:af:30:b5:1b:da:c5:f0:af:77:84:fd:37:9e:
                    19:15:84:a5:41:37:c0:2e:45:89:4d:39:5a:ee:25:
                    e5:ce:4d:4a:96:94:fd:d0:be:61:55:40:36:52:ad:
                    d2:2b:5f:d5:f2:c9:fb:a7:5b:a0:e7:f2:36:77:07:
                    93:e8:35:eb:ad:3e:b5:e7:b3:a2:ab:9c:30:06:d4:
                    30:6d:2b:29:8c:e9:43:09:d2:4c:03:56:ae:ef:a0:
                    77:33:03:d6:1b:1b:92:9e:14:ec:31:98:6a:37:9d:
                    1e:ac:c3:b4:c1:09:f8:25:e1:7f:49:80:f0:29:7f:
                    2d:74:8f:4c:58:f0:e1:2b:46:89:d4:f6:2b:66:3e:
                    71:9c:e6:e4:66:ef:57:b5:d8:a7:13:94:93:21:50:
                    e2:f0:fc:62:96:20:8b:db:dd:52:13:3a:3a:19:7b:
                    85:4b:5d:fd:c9:4d:34:cc:27:2a:38:44:57:3c:e7:
                    62:81:b2:99:63:1e:7f:f1:ab:88:e6:55:82:80:89:
                    c1:24:61:b0:18:73:4d:4a:ae:74:73:b5:0c:59:f1:
                    df:88:e1:ad:13:85:5a:eb:12:96:f6:ff:01:c1:7d:
                    cc:38:19:76:51:9c:96:f9:09:24:18:70:b9:48:a3:
                    1e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                50:60:A8:6A:09:E5:6C:D0:0D:C4:54:08:12:BD:4D:77:75:AC:97:15
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/5060A86A09E56CD00DC4540812BD4D7775AC9715.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.40.0/22
                  168.197.4.0/22
                  177.72.168.0/21
                IPv6:
                  2804:28e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262550

    Signature Algorithm: sha256WithRSAEncryption
         44:0d:a3:11:18:c7:ce:35:3d:fc:1c:60:f5:7c:a8:38:26:11:
         90:33:33:62:32:61:92:63:12:f3:74:fb:5e:73:39:83:fa:f7:
         2a:ba:58:13:94:64:ed:a4:5c:34:ee:ad:68:70:fa:19:21:d9:
         8a:ca:ab:87:3b:d7:8d:78:05:3e:52:3a:d8:a7:41:f1:bc:6f:
         9d:14:b9:87:ab:37:b1:a7:86:00:59:54:4e:b4:d2:f1:e1:b9:
         ea:a0:2d:71:29:05:1b:a1:cd:fb:52:11:02:cf:13:d0:47:13:
         4d:4f:d1:30:57:f1:65:5c:da:65:8a:ff:61:9a:31:e5:b9:b8:
         78:e5:97:9a:9f:37:21:52:70:b4:11:00:70:17:28:39:4b:c6:
         41:ea:46:5d:c0:e5:1a:20:c0:7b:2f:68:c0:b5:fc:fb:d5:ca:
         6b:78:77:14:71:06:7a:a3:de:37:58:66:50:1b:1f:32:b1:52:
         69:3a:67:3b:32:a6:e5:5b:5f:0d:58:b6:1f:c1:9c:2b:ee:bc:
         ce:84:36:f4:2a:ba:68:34:2a:60:ac:50:50:29:3f:bb:26:48:
         56:fd:1c:37:e4:3c:8f:5e:38:85:1a:68:b0:29:70:5d:ad:99:
         95:33:75:7a:fe:5d:44:4d:3d:11:06:a4:99:a9:f1:dd:da:b2:
         3e:87:15:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:03:00 2024 by rpki-client on console-fra.rpki-client.org