Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5DD0CAD6FE5DD02B053D6B01DBD53A598BD350BF.cer
File:                     5DD0CAD6FE5DD02B053D6B01DBD53A598BD350BF.cer (raw, json)
Hash identifier:          ZlH/SMHTAxabHqLXD37Y67lNPEpXdfspuCIHKRl+rPw=
Subject key identifier:   5D:D0:CA:D6:FE:5D:D0:2B:05:3D:6B:01:DB:D5:3A:59:8B:D3:50:BF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       593D0485F1475521C348E8A496FF1F7C5EB1615C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/5DD0CAD6FE5DD02B053D6B01DBD53A598BD350BF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 08 Apr 2024 20:00:01 +0000
Certificate not after:    Mon 07 Apr 2025 20:05:01 +0000
Subordinate resources:    AS: 28220
                          IP: 45.4.64.0/22
                          IP: 138.0.100.0/22
                          IP: 168.227.108.0/22
                          IP: 168.228.68.0/22
                          IP: 170.82.92.0/22
                          IP: 177.89.0.0/16
                          IP: 177.137.192.0/20
                          IP: 179.96.192.0/21
                          IP: 179.96.240.0/20
                          IP: 179.190.128.0/17
                          IP: 186.192.16.0/20
                          IP: 186.193.96.0/20
                          IP: 186.208.208.0/21
                          IP: 186.235.0.0/20
                          IP: 186.236.192.0/19
                          IP: 186.251.112.0/21
                          IP: 187.49.192.0/20
                          IP: 187.60.64.0/19
                          IP: 187.61.128.0/17
                          IP: 187.86.96.0/20
                          IP: 187.87.112.0/20
                          IP: 187.108.64.0/20
                          IP: 187.109.176.0/20
                          IP: 187.111.224.0/19
                          IP: 189.45.16.0/20
                          IP: 189.124.128.0/17
                          IP: 191.241.40.0/21
                          IP: 200.233.80.0/20
                          IP: 201.148.188.0/22
                          IP: 2804:54::/32
                          IP: 2804:2140::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 01:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:3d:04:85:f1:47:55:21:c3:48:e8:a4:96:ff:1f:7c:5e:b1:61:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  8 20:00:01 2024 GMT
            Not After : Apr  7 20:05:01 2025 GMT
        Subject: CN=5DD0CAD6FE5DD02B053D6B01DBD53A598BD350BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c9:33:2a:08:81:48:ee:6d:92:d5:62:ce:23:
                    ac:77:8e:03:ed:20:c4:f6:0b:e9:24:e3:f6:82:98:
                    5e:9f:3f:73:46:da:6b:f2:41:e4:ad:63:3e:69:5e:
                    e4:ef:d6:b6:6b:ee:a8:4f:38:66:28:4c:c7:c5:06:
                    30:c5:43:30:24:b4:59:ef:c6:eb:8c:51:75:c9:81:
                    bb:8d:f8:63:cc:5b:43:39:93:ea:a4:cc:03:4f:a2:
                    89:0a:e4:5b:f7:93:36:bb:29:af:fd:3e:b8:f4:05:
                    71:b2:f2:90:e7:45:4e:72:29:83:38:bd:93:b5:21:
                    51:70:c1:4b:8d:4d:cc:a2:24:12:93:26:02:41:55:
                    31:c1:64:00:19:d9:85:21:f0:00:e5:16:59:dc:1e:
                    ca:75:9b:42:b2:fa:7c:79:d6:03:97:4f:d6:f9:6b:
                    bd:03:9a:d2:bf:b7:b8:6b:02:cb:74:14:c6:c3:6f:
                    9f:3f:6f:95:b6:15:30:d6:c1:82:15:b9:87:f2:43:
                    ec:ce:ba:4a:9e:9d:c8:bd:43:51:12:7e:67:a2:b6:
                    8b:9d:49:8b:20:70:79:0d:10:ab:80:bf:86:fd:73:
                    6f:5f:54:6b:13:f6:fd:9d:74:e3:cb:37:08:5b:09:
                    dd:f2:25:6e:9f:dd:46:98:a2:c8:b7:b0:bb:bd:93:
                    6e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5D:D0:CA:D6:FE:5D:D0:2B:05:3D:6B:01:DB:D5:3A:59:8B:D3:50:BF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/5DD0CAD6FE5DD02B053D6B01DBD53A598BD350BF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.64.0/22
                  138.0.100.0/22
                  168.227.108.0/22
                  168.228.68.0/22
                  170.82.92.0/22
                  177.89.0.0/16
                  177.137.192.0/20
                  179.96.192.0/21
                  179.96.240.0/20
                  179.190.128.0/17
                  186.192.16.0/20
                  186.193.96.0/20
                  186.208.208.0/21
                  186.235.0.0/20
                  186.236.192.0/19
                  186.251.112.0/21
                  187.49.192.0/20
                  187.60.64.0/19
                  187.61.128.0/17
                  187.86.96.0/20
                  187.87.112.0/20
                  187.108.64.0/20
                  187.109.176.0/20
                  187.111.224.0/19
                  189.45.16.0/20
                  189.124.128.0/17
                  191.241.40.0/21
                  200.233.80.0/20
                  201.148.188.0/22
                IPv6:
                  2804:54::/32
                  2804:2140::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28220

    Signature Algorithm: sha256WithRSAEncryption
         74:f2:0f:87:a7:16:bf:96:08:52:18:22:3e:ba:9a:6f:02:fd:
         af:c3:04:ec:66:0a:cb:5f:19:c6:c4:11:13:f1:9a:7a:a2:8f:
         21:e1:6d:02:8f:b4:11:8f:06:19:e8:ac:ef:fd:b9:c5:a1:c9:
         00:a0:11:b7:f2:b3:0e:a4:38:b3:5a:49:f4:f3:ff:96:15:84:
         6c:18:7a:dc:3f:33:e4:5e:0b:86:ff:82:c8:96:eb:9a:11:8b:
         7b:e0:29:50:5c:35:94:84:9b:70:77:c6:c9:97:ed:9a:bc:40:
         63:cd:9e:12:29:ff:e4:cf:d9:5b:0f:88:2a:a8:6e:5f:66:71:
         36:61:60:3b:63:d4:99:59:1f:7b:50:96:7b:04:5d:5a:49:a3:
         6d:03:ab:2b:8c:b7:82:3b:fd:cd:26:39:58:d8:a9:0a:32:d6:
         05:5f:8b:ff:7c:69:4c:17:35:7e:3b:df:55:22:a6:bc:23:3c:
         84:7c:9f:c6:3d:04:b4:89:0a:0c:11:83:44:7d:c2:c5:18:a2:
         f2:f1:5b:1a:3e:5e:09:67:3b:35:fc:47:a7:e8:4f:55:fc:0f:
         95:92:37:1c:ed:48:11:86:0c:dd:ea:ca:1d:0f:b7:a5:38:86:
         93:98:b5:4e:77:3c:e9:26:f9:66:18:02:37:7e:95:f5:fd:ed:
         a3:ee:65:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 00:26:55 2024 by rpki-client on console-ams.rpki-client.org