Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/61A0D46B3E5BD8CD2D919613341FE3851FFAA888.cer
File:                     61A0D46B3E5BD8CD2D919613341FE3851FFAA888.cer (raw, json)
Hash identifier:          k71+js9TiUoZeTpG6uaFvvOio5OtPiVuMtfBEcgIgpU=
Subject key identifier:   61:A0:D4:6B:3E:5B:D8:CD:2D:91:96:13:34:1F:E3:85:1F:FA:A8:88
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       08BA79B4C75849F8C3FC1D7E6F8B878DC1E3AD6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/61A0D46B3E5BD8CD2D919613341FE3851FFAA888.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 22 Nov 2024 11:03:51 +0000
Certificate not after:    Fri 21 Nov 2025 11:08:51 +0000
Subordinate resources:    AS: 53048
                          IP: 132.255.176.0/22
                          IP: 170.245.228.0/22
                          IP: 177.137.48.0/21
                          IP: 187.73.96.0/20
                          IP: 200.94.252.0/22
                          IP: 2804:1b04::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ba:79:b4:c7:58:49:f8:c3:fc:1d:7e:6f:8b:87:8d:c1:e3:ad:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 22 11:03:51 2024 GMT
            Not After : Nov 21 11:08:51 2025 GMT
        Subject: CN=61A0D46B3E5BD8CD2D919613341FE3851FFAA888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:06:35:81:1e:c1:ee:91:4d:a1:39:3a:6a:ab:
                    60:76:98:f0:1a:a1:bf:30:5b:77:78:47:85:a6:26:
                    00:cc:45:d7:54:f8:5b:7c:a0:33:d6:55:f8:83:71:
                    85:62:05:2c:14:d7:9c:d3:cb:f9:66:01:e1:5c:07:
                    c7:6c:74:ce:b6:92:b0:c0:51:a0:c0:92:ee:30:83:
                    17:ee:e3:2d:08:fa:44:16:ae:20:9f:97:6f:69:c8:
                    b1:ca:7b:e2:1b:66:31:39:c3:2d:42:5e:68:cb:f1:
                    94:fa:ea:ab:3c:18:a9:50:c8:3f:a1:dc:5a:10:f0:
                    30:1b:50:fe:30:fa:cd:93:06:7e:fb:a5:a8:ba:4f:
                    c0:72:81:b1:ea:57:77:9d:e0:8e:0e:cb:8a:6a:70:
                    58:6f:3b:07:30:b9:ac:75:6b:77:43:25:df:9b:6b:
                    e5:f0:bb:0e:49:45:ae:3a:24:e8:ef:49:19:86:bc:
                    5a:b2:5a:84:bf:f2:26:67:f6:08:e3:50:46:d7:b7:
                    c7:47:32:23:12:a0:6e:79:45:cb:de:7c:c9:ff:52:
                    83:6b:50:6e:0c:2c:44:b5:e7:0a:27:cb:1c:c2:c6:
                    b0:94:ae:9d:2f:98:0e:5e:ed:de:7b:0a:4c:6b:02:
                    e1:5a:74:16:36:59:06:ac:0f:41:df:33:50:51:b2:
                    6b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                61:A0:D4:6B:3E:5B:D8:CD:2D:91:96:13:34:1F:E3:85:1F:FA:A8:88
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/61A0D46B3E5BD8CD2D919613341FE3851FFAA888.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.176.0/22
                  170.245.228.0/22
                  177.137.48.0/21
                  187.73.96.0/20
                  200.94.252.0/22
                IPv6:
                  2804:1b04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53048

    Signature Algorithm: sha256WithRSAEncryption
         5b:34:b9:95:52:fc:f4:50:21:90:47:16:25:fc:1b:88:c5:61:
         86:b3:8e:01:a5:ca:48:67:f2:e1:19:bf:f4:86:26:d1:74:00:
         9e:24:7b:fe:0c:a3:55:e5:25:49:66:cd:d4:8b:0f:9e:8d:07:
         2c:07:3d:96:76:bf:07:9c:a8:2b:a4:2d:bc:d3:72:bd:31:4a:
         9d:31:85:52:71:a1:e9:98:f5:f5:0e:dc:2f:78:d2:cb:4d:b0:
         a8:d0:37:67:58:9c:56:a5:58:c8:dc:7e:d4:dd:e1:c3:af:61:
         c7:a5:af:6d:28:03:f8:a9:04:77:ac:19:ca:7b:99:cf:73:07:
         ab:b9:7e:c7:f0:2f:8a:7d:86:d4:8b:3d:e7:f3:29:5a:58:ce:
         c6:cd:32:3b:1e:35:95:29:d3:b5:5e:c4:2a:f3:9e:03:87:4b:
         9d:4b:26:51:75:a3:2e:a7:d7:ba:16:db:4e:a0:26:e0:60:35:
         e0:89:b3:fa:2e:d6:6e:b7:95:65:7b:6c:41:21:49:f0:84:65:
         67:52:bc:4c:ee:fc:16:f5:c9:b4:cc:5d:66:1a:c7:72:fc:86:
         48:16:49:35:4c:62:31:d7:09:62:53:30:63:8f:87:09:ef:fc:
         d5:48:de:06:a4:cc:3a:7f:b3:a2:74:96:59:89:90:b5:2f:a3:
         d9:f6:9c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:39 2024 by rpki-client on console-fra.rpki-client.org