Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/576022C32332943F262A8514FECDA1C77D7023B7.cer
File:                     576022C32332943F262A8514FECDA1C77D7023B7.cer (raw, json)
Hash identifier:          xFUK4piHjJzLvwBpGXcAPAf3kHZAgryt1+re5zOoNQ8=
Subject key identifier:   57:60:22:C3:23:32:94:3F:26:2A:85:14:FE:CD:A1:C7:7D:70:23:B7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       62E0759B1C206414383F96B39F459DE450200FD2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/2/576022C32332943F262A8514FECDA1C77D7023B7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 19:23:29 +0000
Certificate not after:    Wed 02 Apr 2025 19:28:29 +0000
Subordinate resources:    AS: 264297
                          IP: 131.255.252.0/22
                          IP: 138.121.136.0/22
                          IP: 168.197.220.0/22
                          IP: 2804:25b4::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e0:75:9b:1c:20:64:14:38:3f:96:b3:9f:45:9d:e4:50:20:0f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 19:23:29 2024 GMT
            Not After : Apr  2 19:28:29 2025 GMT
        Subject: CN=576022C32332943F262A8514FECDA1C77D7023B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f6:44:cc:31:33:26:0b:e1:89:b2:15:c7:14:
                    c3:40:af:18:11:62:ea:c6:c0:f9:bf:c6:8a:51:f6:
                    ba:97:e3:3b:b5:52:09:cb:4c:9b:ce:a5:ca:58:51:
                    1f:00:35:7a:65:a7:c4:4f:b8:ed:87:bc:53:ce:52:
                    4e:81:68:26:e6:5b:d4:99:3b:d6:a7:77:10:c3:02:
                    bc:6e:02:74:ce:97:7b:80:59:d1:66:42:96:ba:90:
                    4e:b1:86:7e:a2:c3:a2:e0:dd:1a:a7:53:ae:3d:c1:
                    2b:de:b7:88:98:ca:d5:36:4e:d1:1a:60:0c:e7:50:
                    49:d9:29:f4:ce:cc:b0:1d:05:f8:8a:09:b1:7b:b9:
                    bd:3b:0c:b7:86:b4:08:13:43:a2:21:22:52:64:95:
                    66:2b:34:20:40:6c:d4:80:35:97:1b:6a:1b:82:b4:
                    19:ca:8c:32:4c:42:08:82:e5:29:86:cd:83:f2:a7:
                    06:20:64:ba:33:00:90:70:16:76:db:68:ad:0d:5e:
                    ad:3a:25:b7:f9:06:6e:a7:83:a8:1b:02:4d:10:fd:
                    3c:dd:7c:e4:0c:44:9f:4c:d0:27:34:55:53:8e:bd:
                    34:83:51:90:23:93:18:4a:86:54:a6:0c:6e:8b:63:
                    7f:46:4c:8b:c6:3b:03:a5:b4:98:58:51:ac:fc:e4:
                    c9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                57:60:22:C3:23:32:94:3F:26:2A:85:14:FE:CD:A1:C7:7D:70:23:B7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/2/576022C32332943F262A8514FECDA1C77D7023B7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.252.0/22
                  138.121.136.0/22
                  168.197.220.0/22
                IPv6:
                  2804:25b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264297

    Signature Algorithm: sha256WithRSAEncryption
         75:48:e8:cb:ad:65:c5:81:9c:03:05:ec:b9:ea:89:47:1b:0f:
         60:fc:f5:54:96:2e:1f:e9:4a:b1:0c:1c:06:9c:a9:58:e4:8e:
         82:79:ac:b9:05:63:dc:82:68:9a:3a:6b:68:f2:4f:89:a4:c6:
         85:fa:f7:50:48:44:bf:7e:f0:40:1e:09:56:83:9d:79:dd:8d:
         9a:b4:6a:02:94:68:19:ac:ae:0d:7a:8c:5e:9c:f0:ef:f0:f1:
         7f:a7:66:a9:4c:5d:d7:8b:ac:3a:36:fa:38:49:62:43:5c:52:
         e1:29:8b:e4:c4:05:f1:1c:f3:a6:0d:3f:f7:81:48:3e:a8:b3:
         a6:5e:58:71:c8:06:42:d9:14:84:e1:bc:a5:4c:02:02:8f:f6:
         cd:5f:39:52:5a:7e:de:fe:1f:8b:c8:72:6a:04:94:76:c3:ee:
         69:6b:8d:38:0c:8d:65:9f:39:b1:2c:91:29:67:4d:3d:03:b4:
         9f:7f:c4:1c:6e:ba:da:e4:a7:f7:15:ad:ed:61:c5:7a:59:b2:
         f2:3c:1f:4f:31:5e:ba:5a:ba:d8:91:bc:ec:ee:c8:7a:73:26:
         08:a9:ba:c2:f1:aa:66:b7:8c:d4:ac:7e:4a:9e:ca:e1:ca:11:
         42:ef:15:00:e3:70:09:54:ae:54:ec:63:1b:44:82:95:31:f0:
         aa:26:53:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:06:07 2024 by rpki-client on console-ams.rpki-client.org