Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5F33BB65A501B1A095633041CB4544B7CD75764A.cer
File:                     5F33BB65A501B1A095633041CB4544B7CD75764A.cer (raw, json)
Hash identifier:          GrZ5j83NKTwLb6g5LSvrGkEck6DCAFNbjYtO/+nluuw=
Subject key identifier:   5F:33:BB:65:A5:01:B1:A0:95:63:30:41:CB:45:44:B7:CD:75:76:4A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       22A41850213A4469A15255776B8B8B699EADD297
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/1/5F33BB65A501B1A095633041CB4544B7CD75764A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:34:04 +0000
Certificate not after:    Wed 02 Apr 2025 18:39:04 +0000
Subordinate resources:    AS: 271586
                          IP: 190.9.64.0/22
                          IP: 2804:7dd8::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 03:32:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a4:18:50:21:3a:44:69:a1:52:55:77:6b:8b:8b:69:9e:ad:d2:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:34:04 2024 GMT
            Not After : Apr  2 18:39:04 2025 GMT
        Subject: CN=5F33BB65A501B1A095633041CB4544B7CD75764A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:dd:f0:3d:e6:63:fa:d4:c7:3b:13:7f:f3:0f:
                    72:ae:26:f7:9f:a9:5a:aa:85:b2:9f:f9:5b:d8:43:
                    b9:40:7b:ce:f8:22:f2:7c:7b:e4:d4:18:d6:fb:a5:
                    81:8a:ba:4f:0b:bf:47:e5:15:98:18:fa:1c:cb:f7:
                    b5:4a:7f:dc:d4:8e:40:f8:a1:8d:b4:a0:35:99:93:
                    74:ac:a0:1f:fe:c3:09:26:1e:4c:51:dd:a9:55:3b:
                    28:a9:8b:4e:21:f6:a1:f5:a0:61:26:f9:ab:52:53:
                    53:65:9c:f4:37:ce:d4:60:19:1d:5c:81:bb:1b:eb:
                    a3:15:07:1e:aa:f8:41:58:3d:d6:83:90:96:42:f2:
                    10:95:49:fd:ab:79:52:b0:59:6a:94:40:56:3c:4f:
                    a2:99:c1:f9:49:7e:f1:96:ac:6e:ec:21:a2:84:47:
                    e9:9f:5c:fe:27:ce:40:70:bd:01:7f:52:fd:25:75:
                    9b:46:04:9f:9f:64:a3:ea:dd:f3:34:e6:9a:c3:61:
                    12:20:ba:99:8d:f2:fb:68:96:bd:db:f7:9a:6b:b6:
                    32:71:28:55:aa:d4:b6:17:4d:ee:f6:95:d8:8c:5f:
                    54:04:70:4c:34:42:66:de:a0:48:78:71:a2:33:75:
                    f9:2a:a2:07:6a:a1:f9:b9:2d:66:37:39:48:1d:f4:
                    a4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5F:33:BB:65:A5:01:B1:A0:95:63:30:41:CB:45:44:B7:CD:75:76:4A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/1/5F33BB65A501B1A095633041CB4544B7CD75764A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.64.0/22
                IPv6:
                  2804:7dd8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271586

    Signature Algorithm: sha256WithRSAEncryption
         ca:37:70:23:a4:52:a2:78:20:b8:69:f8:2b:db:f4:14:79:4f:
         b8:5a:11:98:ad:3d:0b:a5:7b:07:6b:ff:bf:d0:de:98:b1:2e:
         c8:6f:25:77:9d:3f:35:1f:2a:2b:7c:83:c4:8b:f4:0c:5c:99:
         79:61:20:93:d0:1f:9b:4b:d3:e9:a5:b8:12:eb:ee:37:1b:1a:
         6d:da:36:c2:8e:ab:3a:bc:21:f6:c6:47:72:db:e4:ed:5a:3a:
         42:e3:ac:ed:a2:05:34:f1:88:0c:1c:28:45:62:8c:57:ab:e0:
         e6:9a:60:51:c9:bc:6b:19:cf:26:40:5d:ce:df:ed:df:0f:95:
         5f:a5:7a:ee:1c:e3:af:66:82:c3:6e:5c:36:66:e7:b2:67:14:
         6d:26:6c:3c:05:40:30:06:71:53:9d:c9:9d:6c:cd:b8:a4:91:
         11:30:57:23:26:ba:4c:90:b2:fb:3f:7a:59:8a:13:78:93:2e:
         ca:17:60:de:55:df:e4:5c:b8:ff:e0:32:b4:c8:d4:1e:45:1b:
         68:1d:cf:3c:64:0d:d2:4f:28:7c:95:01:77:80:b3:5a:50:6c:
         1c:65:05:d0:02:ec:34:02:bf:dc:48:85:4f:46:6d:d3:ae:4f:
         49:a5:42:45:60:67:f4:b9:f8:83:28:ad:e1:ab:45:25:43:f7:
         b1:34:25:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:38:59 2024 by rpki-client on console-ams.rpki-client.org