Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1.cer
File:                     60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1.cer (raw, json)
Hash identifier:          faE3AXJqg7Yf+gLbaBe/g8TIW5XcRZUBuYEdBfap0aY=
Subject key identifier:   60:BB:F5:E5:4F:CB:6B:FB:6E:9B:D8:E5:2A:63:92:FA:F4:D4:C8:D1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2FCB5B80C71076FD5405BD785F1F61913AAAC6DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/1/60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Apr 2024 02:41:11 +0000
Certificate not after:    Fri 04 Apr 2025 02:46:11 +0000
Subordinate resources:    AS: 265158
                          IP: 167.249.16.0/22
                          IP: 2804:2b88::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 23:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:cb:5b:80:c7:10:76:fd:54:05:bd:78:5f:1f:61:91:3a:aa:c6:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  5 02:41:11 2024 GMT
            Not After : Apr  4 02:46:11 2025 GMT
        Subject: CN=60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:77:be:21:69:4a:08:ee:0b:43:38:de:07:8f:
                    1d:20:c8:c2:56:5e:1c:58:44:f3:79:f7:86:20:47:
                    6b:d4:b1:05:05:c2:95:df:67:28:8e:58:52:db:d5:
                    5c:6b:ef:43:0d:0b:0f:e3:14:8d:0e:ea:ee:b2:ad:
                    60:03:14:83:7a:31:95:f2:37:7e:37:ac:40:45:2e:
                    7b:55:b5:d9:34:d8:f2:26:bb:2a:7c:5b:52:f3:5e:
                    f5:ea:43:ae:5e:13:29:19:69:2d:b4:68:5f:0d:d7:
                    3f:40:f4:70:e8:27:2a:5c:37:94:70:a0:e0:06:53:
                    55:02:17:ba:37:b1:d0:c3:37:23:f0:89:94:28:ca:
                    a4:fc:17:46:12:dd:e8:07:aa:17:d6:af:3b:ce:b1:
                    ef:90:a5:18:27:51:e8:da:9a:e8:b6:f4:fc:3a:8d:
                    15:86:65:15:5a:b1:9c:b0:8c:07:5a:df:17:47:9b:
                    67:ec:e2:80:5b:f6:85:a4:72:bb:8f:a8:56:1b:21:
                    ac:e5:de:2a:75:be:d9:6c:61:3d:97:8a:c0:5a:c7:
                    71:dd:7f:11:cc:88:1f:6c:c4:4e:4c:7e:3f:19:a8:
                    d8:b5:b6:85:f1:63:10:17:b4:c7:21:4c:8e:2c:58:
                    d0:88:b2:33:80:2f:bf:44:be:84:cd:30:50:85:22:
                    4b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                60:BB:F5:E5:4F:CB:6B:FB:6E:9B:D8:E5:2A:63:92:FA:F4:D4:C8:D1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/1/60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.16.0/22
                IPv6:
                  2804:2b88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265158

    Signature Algorithm: sha256WithRSAEncryption
         13:26:a6:1c:ef:14:87:8b:68:4b:82:36:19:fa:a0:52:ba:f5:
         8f:f5:1c:27:ad:d9:58:ce:bf:51:d8:d9:03:a1:e6:f5:24:1f:
         91:9c:ef:d1:b4:1c:a3:a5:8e:8f:61:58:6d:0d:eb:3e:05:cc:
         2a:30:61:3f:75:66:8d:76:d4:34:e5:40:59:f0:c1:8e:85:e0:
         e7:f2:52:99:99:01:6e:64:76:85:46:4c:ec:56:f9:ac:80:99:
         38:56:12:c1:d9:b9:e3:95:ff:f0:76:00:81:7a:03:c7:29:e8:
         f1:2c:1c:ea:65:a6:9d:99:5a:fd:eb:bb:1d:e1:00:1b:2b:07:
         6b:1c:90:d5:c1:e8:c4:3f:c0:1f:b5:b3:ef:66:fe:86:28:84:
         87:8b:68:2a:8a:85:81:11:80:c4:93:92:52:1d:de:41:73:6c:
         d7:d8:f8:b4:0a:80:15:0b:f6:5d:55:b9:dd:1d:00:6b:8b:53:
         04:38:26:20:a4:3e:05:24:76:0c:29:65:d4:fa:bb:44:97:92:
         5b:29:bc:45:4e:87:5e:47:2d:d3:27:40:05:9b:f0:8a:cf:f6:
         bb:61:73:a0:09:05:ab:99:d3:ba:34:3c:1d:f3:ac:05:1f:f3:
         44:86:a2:81:9f:54:0e:f0:54:a5:00:aa:31:38:49:2f:a2:7c:
         3b:bc:ca:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 00:29:12 2024 by rpki-client on console-ams.rpki-client.org