Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/579CF11E370C6C2E63E8E17B099B349BBDB1B2F5.cer
File:                     579CF11E370C6C2E63E8E17B099B349BBDB1B2F5.cer (raw, json)
Hash identifier:          CDeBmZCPBGsguKLM6W+Z3ADULs6/nAYgwWFesrX0uJE=
Subject key identifier:   57:9C:F1:1E:37:0C:6C:2E:63:E8:E1:7B:09:9B:34:9B:BD:B1:B2:F5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2EE008D456FC784B63783DC07714961C148879F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/579CF11E370C6C2E63E8E17B099B349BBDB1B2F5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Nov 2024 14:14:11 +0000
Certificate not after:    Mon 17 Nov 2025 14:19:11 +0000
Subordinate resources:    AS: 270441
                          IP: 200.14.56.0/22
                          IP: 2804:6c08::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:e0:08:d4:56:fc:78:4b:63:78:3d:c0:77:14:96:1c:14:88:79:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 18 14:14:11 2024 GMT
            Not After : Nov 17 14:19:11 2025 GMT
        Subject: CN=579CF11E370C6C2E63E8E17B099B349BBDB1B2F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2b:e1:d8:4c:b1:af:ca:9e:0e:a6:f3:19:32:
                    f5:1a:58:0a:85:97:a0:92:64:9a:0e:c8:f8:db:23:
                    d4:b2:61:8c:91:3f:0a:e1:15:25:fb:ee:8e:a6:5d:
                    d1:ff:83:00:16:6a:cf:75:e3:0f:67:24:7a:76:d3:
                    de:f3:7d:f7:a7:df:d1:57:0f:a8:f2:21:91:c2:a5:
                    b5:a7:d1:b8:37:28:b2:23:90:18:68:40:04:1f:01:
                    7d:15:00:93:90:c9:2b:1e:a8:6f:cb:32:06:26:65:
                    e3:cd:cc:c3:1e:70:c0:97:da:c8:62:0b:30:5b:6f:
                    4e:bd:5a:74:d7:2a:4e:e2:81:41:30:1c:4f:15:dd:
                    5d:63:e6:5a:82:74:c8:02:72:cb:87:1d:bc:5d:b5:
                    32:7e:ad:8e:19:15:2d:9c:e6:5b:c2:41:c0:04:11:
                    5f:04:da:29:ca:a3:f1:60:b6:06:f5:a9:33:6c:81:
                    a9:b4:f6:79:82:6b:9b:be:ad:c3:33:10:43:21:f7:
                    e3:43:39:ee:a0:fc:d3:b5:a1:2e:57:b6:b3:09:68:
                    c3:12:dd:48:c8:05:e7:04:66:6b:5f:cb:a7:b6:1a:
                    8d:3a:9e:5c:db:3c:bf:7e:9b:68:6b:83:5d:72:cb:
                    04:1c:d0:c0:5d:28:09:c7:01:32:db:1b:7e:58:14:
                    21:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                57:9C:F1:1E:37:0C:6C:2E:63:E8:E1:7B:09:9B:34:9B:BD:B1:B2:F5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/579CF11E370C6C2E63E8E17B099B349BBDB1B2F5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.56.0/22
                IPv6:
                  2804:6c08::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270441

    Signature Algorithm: sha256WithRSAEncryption
         c1:0c:61:8b:f8:b6:ec:2a:d0:c7:70:68:b6:b9:12:82:a9:4d:
         89:5a:00:f4:e8:73:b9:72:3b:01:f9:cc:0b:31:c2:79:33:02:
         3b:10:36:e7:db:c6:20:2d:3e:9d:3b:19:02:67:36:87:c4:f7:
         ab:02:29:cb:eb:65:5c:60:2e:68:65:f4:b6:14:00:e2:29:50:
         2b:92:fa:f2:5f:a0:11:2d:13:ed:60:2f:e7:23:ed:7b:1f:07:
         a0:f6:f6:55:84:0f:c6:be:d6:bd:94:fd:81:8b:83:c1:5f:02:
         ac:aa:53:80:bf:9d:29:26:60:81:8e:a7:5b:19:17:79:63:c1:
         10:19:c7:be:f9:f3:1d:72:b0:26:d4:d3:c5:23:38:65:ff:f7:
         54:05:78:8f:c4:12:fd:fa:1d:79:a1:bc:71:7b:9f:84:2e:f3:
         d9:82:84:0f:0e:72:e9:4e:71:37:18:a7:5e:56:8c:79:b3:bb:
         59:0c:1b:67:33:9f:4e:03:f0:ee:1a:9d:1e:21:6d:9c:d3:38:
         38:8a:3f:ae:20:93:40:4c:fb:2d:41:01:f1:e9:c0:df:f0:a0:
         0d:37:7e:80:0f:01:d0:30:11:87:93:cf:a4:13:09:a1:46:2b:
         d1:25:e3:6b:a0:09:2c:37:63:38:f4:7e:97:a1:a6:46:aa:4d:
         97:d0:32:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:28 2024 by rpki-client on console-fra.rpki-client.org