Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/642F5BFE9618C97BD02FBE38760D7906C042330D.cer
File:                     642F5BFE9618C97BD02FBE38760D7906C042330D.cer (raw, json)
Hash identifier:          yQyyAX3VGpnBvq6SaPhTreX/nN9xOv3pV9dXeJbRQXI=
Subject key identifier:   64:2F:5B:FE:96:18:C9:7B:D0:2F:BE:38:76:0D:79:06:C0:42:33:0D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       50778CC4A69D8DABCB44435098FEE9E280A4CA31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/642F5BFE9618C97BD02FBE38760D7906C042330D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 08 Jul 2024 16:38:38 +0000
Certificate not after:    Mon 07 Jul 2025 16:43:38 +0000
Subordinate resources:    AS: 263902
                          IP: 138.204.52.0/22
                          IP: 2804:2774::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:77:8c:c4:a6:9d:8d:ab:cb:44:43:50:98:fe:e9:e2:80:a4:ca:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  8 16:38:38 2024 GMT
            Not After : Jul  7 16:43:38 2025 GMT
        Subject: CN=642F5BFE9618C97BD02FBE38760D7906C042330D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a1:e9:59:a3:cb:f7:40:27:c4:cf:4d:3d:b1:
                    05:86:43:10:d8:e0:ea:a2:fe:35:ca:d4:a9:bc:7d:
                    4e:0f:1d:1a:3f:65:e2:c4:7a:96:68:74:11:3a:e6:
                    0a:67:38:26:bb:5f:11:c0:27:16:9e:bc:7c:f8:5a:
                    66:f5:4a:49:7a:45:ed:62:c3:dc:4a:44:a4:f4:9a:
                    30:a0:0e:d0:ae:4b:72:e5:c1:a0:a1:09:40:05:14:
                    0e:28:44:91:11:ca:7e:53:ba:c7:bf:df:91:eb:2d:
                    3f:f4:46:55:54:7f:b9:f9:b7:a3:e5:91:61:db:4f:
                    11:2b:b1:d5:75:d3:9c:5e:74:ba:9c:81:16:98:41:
                    d3:3e:73:56:9b:20:6a:a1:66:63:a9:b2:27:0a:49:
                    0f:0c:22:63:63:11:26:d0:93:85:22:5a:c4:7c:6a:
                    5e:4a:40:84:da:b7:fb:55:aa:35:01:18:14:47:bb:
                    f5:81:91:3a:a4:f8:b6:b1:1f:3a:0f:08:3e:da:35:
                    bb:87:c5:64:db:a4:43:0e:f6:7d:d9:85:f9:8f:51:
                    35:9d:92:b8:4c:1b:72:c2:66:82:07:6c:bc:b8:64:
                    c5:36:f3:9d:bd:31:0f:8b:68:cb:d2:2c:41:4b:3a:
                    af:b7:eb:48:66:f9:ae:f5:74:8c:8c:6b:82:ad:bb:
                    ec:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                64:2F:5B:FE:96:18:C9:7B:D0:2F:BE:38:76:0D:79:06:C0:42:33:0D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/642F5BFE9618C97BD02FBE38760D7906C042330D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.52.0/22
                IPv6:
                  2804:2774::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263902

    Signature Algorithm: sha256WithRSAEncryption
         94:d6:be:d7:77:9a:f9:c0:da:6e:3f:a7:26:f0:90:25:ea:08:
         8c:29:f5:10:90:57:30:c9:cd:43:fa:9d:e2:15:df:55:42:f4:
         f7:79:27:ef:ad:e7:65:5e:82:6c:b0:b8:35:4e:0f:ee:da:6b:
         ca:91:07:33:7c:aa:90:f5:af:8b:3d:bb:dc:6f:2b:4c:c0:ba:
         9a:b6:be:92:99:4a:d8:38:fe:9e:75:99:d0:c2:98:09:07:c2:
         8a:19:86:8e:dc:98:bb:ee:ce:dd:b1:a8:0e:37:51:37:5b:a4:
         26:bc:3f:91:eb:e4:3a:62:8f:3e:ae:d1:7d:69:1a:8d:1b:1b:
         65:4d:82:29:51:a9:06:51:e9:19:ab:7b:81:33:be:d7:db:08:
         cd:47:38:48:b1:f2:d1:86:a8:25:78:de:01:95:3b:88:6b:1d:
         dd:5f:73:2c:2d:90:9c:e6:20:aa:41:84:22:3c:6e:03:dc:6d:
         86:31:fd:b5:16:d8:5c:3c:7a:22:0a:36:5f:d3:bb:5f:2f:22:
         d9:fa:85:63:0a:42:43:eb:41:14:b8:5d:c6:15:a7:04:81:e1:
         48:9e:a7:e8:5f:dd:59:03:de:22:05:bb:4e:bf:dd:82:28:a0:
         9a:55:0d:06:d1:9a:c7:21:fd:c3:d0:ea:ea:76:0e:44:1d:48:
         61:80:a4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:03:05 2024 by rpki-client on console-fra.rpki-client.org