Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5068952903F5F17C21FA5B2EC1BE472DF306072C.cer
File:                     5068952903F5F17C21FA5B2EC1BE472DF306072C.cer (raw, json)
Hash identifier:          81s0zBczOOyG4d1tRs2OkBdmr/PpSaga+H3+lYKsheA=
Subject key identifier:   50:68:95:29:03:F5:F1:7C:21:FA:5B:2E:C1:BE:47:2D:F3:06:07:2C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6213A96A6D3F89F75D06FB36D804924B847C9174
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 17 Apr 2024 17:32:27 +0000
Certificate not after:    Wed 16 Apr 2025 17:37:27 +0000
Subordinate resources:    AS: 266289
                          IP: 170.79.0.0/22
                          IP: 2804:357c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:13:a9:6a:6d:3f:89:f7:5d:06:fb:36:d8:04:92:4b:84:7c:91:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 17 17:32:27 2024 GMT
            Not After : Apr 16 17:37:27 2025 GMT
        Subject: CN=5068952903F5F17C21FA5B2EC1BE472DF306072C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:44:ca:b4:97:d9:7c:46:69:04:db:d9:db:df:
                    98:fd:c2:b4:8f:5c:a1:20:9e:fb:a3:3d:dc:27:c0:
                    04:98:df:d8:50:60:a7:b2:47:30:7c:2e:84:bd:84:
                    98:8e:ad:36:dd:57:c1:69:87:2f:d0:b5:39:59:11:
                    c7:87:7f:85:3a:87:65:22:a2:a8:49:02:fc:be:06:
                    1b:09:d5:c2:63:d3:82:6a:7c:a3:e5:c1:87:c0:fb:
                    5e:97:d3:91:4a:95:90:29:a1:f2:12:5c:4f:bf:a8:
                    dd:c6:dc:a2:9b:d4:cf:b7:bb:a9:18:b7:d8:0b:31:
                    61:a8:db:db:b3:ea:97:c2:f9:12:ed:67:34:d8:cf:
                    d6:d5:10:79:8d:9c:5a:11:10:4f:0c:b5:83:a2:41:
                    91:ff:1d:f5:a3:bf:fb:01:cb:21:80:28:03:c6:f1:
                    45:ee:31:dd:d2:15:ba:3c:33:eb:0e:fc:ab:bc:be:
                    91:dc:32:96:98:1b:17:31:10:f8:9c:93:6c:9a:4c:
                    75:e4:e3:34:4b:50:a5:1b:c9:11:68:c7:2e:66:d0:
                    0d:82:ac:84:0a:ac:2e:59:5e:db:d2:dc:4b:d8:7a:
                    7e:51:b7:95:38:ce:75:ee:ad:a2:1f:1a:38:53:5a:
                    b7:fb:94:e4:d4:f3:0b:7c:0b:6d:de:e5:a3:99:a3:
                    8b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                50:68:95:29:03:F5:F1:7C:21:FA:5B:2E:C1:BE:47:2D:F3:06:07:2C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.0.0/22
                IPv6:
                  2804:357c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266289

    Signature Algorithm: sha256WithRSAEncryption
         da:6a:c7:df:c3:9c:1d:fe:9e:6a:60:94:e0:55:e9:b1:a5:a1:
         05:86:53:7b:45:d0:07:02:d0:e2:e4:1d:de:9c:d7:3e:68:13:
         dc:69:66:ff:0b:be:48:e1:38:6b:c0:88:32:c0:60:2a:f4:6d:
         28:a8:9d:fc:5a:6f:65:85:ff:30:02:9d:e6:d7:97:21:24:de:
         71:f7:f5:b3:b9:d9:ef:d3:21:e6:07:c7:75:41:1f:b0:fb:7a:
         2a:55:dc:c6:80:63:fa:67:44:3f:5d:a6:fe:50:01:1f:3b:53:
         77:08:cc:58:30:72:5b:be:ee:82:5c:61:97:99:cf:c1:b3:59:
         a9:25:c8:ea:36:70:8e:34:b0:4c:85:fb:48:51:12:f4:52:39:
         f4:44:84:d9:b7:97:29:bc:e8:85:5f:0b:d6:e3:5b:9f:69:78:
         25:3a:98:38:63:66:92:47:e8:2d:99:b6:f0:5f:f2:a3:94:f8:
         5d:54:18:5d:8c:e2:e9:d6:06:99:42:31:4a:e0:f7:7d:1d:6b:
         43:85:09:31:5d:86:7d:8b:67:c3:6a:d5:b4:51:c1:25:a2:49:
         28:12:d2:8f:5f:d3:97:6a:c0:b4:18:82:34:bf:81:c2:5a:ae:
         c7:35:d0:af:4b:7f:a2:d5:c1:e0:3d:78:01:f6:08:a1:59:c4:
         18:27:90:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:53 2024 by rpki-client on console-ams.rpki-client.org