Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA.cer
File:                     5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA.cer (raw, json)
Hash identifier:          edePFcJuWjQSuWeuszSuWeSqUXYrSlYOWkXZiLy8ucc=
Subject key identifier:   5F:ED:05:49:6A:CB:55:59:F3:DC:2D:3B:19:AD:4B:60:E4:B9:7F:FA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       68E3371311283FFEC3E669943DE356CB459EEA37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/88QJCxbCK4gcXwnPtW6uo6NPYackhixt7B5xshJiViMU/0/5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/88QJCxbCK4gcXwnPtW6uo6NPYackhixt7B5xshJiViMU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 29 Nov 2024 14:39:14 +0000
Certificate not after:    Fri 28 Nov 2025 14:44:14 +0000
Subordinate resources:    AS: 267557
                          IP: 45.70.4.0/23
                          IP: 2804:433c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 02:36:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:e3:37:13:11:28:3f:fe:c3:e6:69:94:3d:e3:56:cb:45:9e:ea:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 29 14:39:14 2024 GMT
            Not After : Nov 28 14:44:14 2025 GMT
        Subject: CN=5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:74:83:95:3b:a8:e4:76:7a:f4:7f:cb:08:06:
                    21:68:6b:a0:dc:a2:95:f9:cf:fb:fa:f0:d3:35:96:
                    0e:95:7a:2f:b3:8a:08:39:65:6c:9d:73:92:68:e0:
                    dc:e8:81:6c:a2:cc:16:d4:20:a2:81:68:22:66:04:
                    48:ef:ec:5f:a5:8b:14:ab:b6:e1:10:6a:75:7a:8c:
                    6d:e5:e9:00:63:39:5f:e6:89:cb:10:69:79:ba:68:
                    ee:f7:e8:90:dc:4c:ef:d7:66:fa:a3:88:a6:e9:f3:
                    c6:bd:ca:ae:32:d3:ab:f7:1c:e9:c2:8a:16:8a:26:
                    ce:6d:0f:1d:ab:3c:42:53:44:66:fa:d8:94:c9:95:
                    38:7b:15:dd:3f:a1:f1:ce:10:6d:50:03:c0:99:c8:
                    37:b4:1b:7d:0a:e1:cd:0b:af:c2:6b:08:44:0c:d2:
                    c0:f5:5c:d5:ea:3a:8e:62:b8:df:67:f4:05:70:19:
                    b6:d2:92:87:d2:41:fb:18:98:48:78:31:75:4f:e5:
                    53:4e:bf:53:e8:9b:ae:d2:cc:90:4d:92:9d:fb:be:
                    6f:78:20:ea:58:4b:b1:e8:89:9b:49:f1:c9:f5:e7:
                    05:e5:b2:ac:04:1c:d0:6d:4e:d1:64:14:cb:76:13:
                    29:85:63:a2:a0:84:43:4b:44:f6:67:d1:01:46:2d:
                    1d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5F:ED:05:49:6A:CB:55:59:F3:DC:2D:3B:19:AD:4B:60:E4:B9:7F:FA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/88QJCxbCK4gcXwnPtW6uo6NPYackhixt7B5xshJiViMU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/88QJCxbCK4gcXwnPtW6uo6NPYackhixt7B5xshJiViMU/0/5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.4.0/23
                IPv6:
                  2804:433c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267557

    Signature Algorithm: sha256WithRSAEncryption
         c7:a3:b6:2e:c3:91:87:18:86:13:20:8f:15:0b:79:2f:40:85:
         af:fc:04:51:e2:a8:69:0b:fc:46:98:3a:c0:47:ef:7a:d2:55:
         22:5d:9a:e1:2a:e4:e5:ab:87:2d:cb:a0:a4:8f:1f:02:55:49:
         07:5f:7e:90:ca:c2:36:f8:87:63:b4:8a:47:6c:1e:5d:03:55:
         c4:d7:0c:e9:f3:62:b1:16:0e:98:8c:64:d6:44:64:0a:88:e1:
         db:f0:d5:d4:0e:60:1a:3c:57:57:a0:34:e7:0f:60:43:05:3a:
         13:d9:87:d6:65:8a:dd:79:b3:c3:52:b0:1c:ad:fb:a6:8f:a4:
         bb:4f:f9:fe:7a:37:ac:4c:90:e7:13:66:97:47:3d:bb:f0:c9:
         66:79:09:b2:72:5a:ca:7a:7b:b1:2b:cf:09:c6:f7:bd:1b:7b:
         4b:1a:29:52:52:7f:79:4e:9c:1a:48:2e:da:bd:2a:ab:3b:22:
         6b:d3:27:04:88:e8:a7:20:2f:96:6a:c2:98:77:3d:8c:33:69:
         bc:aa:d2:ce:7d:a3:bc:f4:fe:ba:5a:5e:e0:de:c9:a2:71:f0:
         74:ea:0f:fa:68:5d:27:66:de:88:ec:f8:72:6f:2f:b5:93:2c:
         22:a3:8f:9b:40:44:f9:0b:96:a8:6c:c0:0e:37:7c:59:a0:57:
         88:16:b0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:58:10 2025 by rpki-client