Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer
File:                     68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer (raw, json)
Hash identifier:          n7QPvVKeRgb4XRn1qMYVKJV5dHgcvAOU6XHyXeFcqo4=
Subject key identifier:   68:04:0A:EB:3A:C9:8B:5F:F3:C0:3D:98:E9:01:AB:81:77:34:3C:76
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6C97C2D4DC65D081E83631AB22CA824C83030930
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 21 Oct 2024 13:40:53 +0000
Certificate not after:    Mon 20 Oct 2025 13:45:53 +0000
Subordinate resources:    AS: 266309
                          IP: 170.79.176.0/22
                          IP: 2804:35d4::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:97:c2:d4:dc:65:d0:81:e8:36:31:ab:22:ca:82:4c:83:03:09:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 21 13:40:53 2024 GMT
            Not After : Oct 20 13:45:53 2025 GMT
        Subject: CN=68040AEB3AC98B5FF3C03D98E901AB8177343C76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:35:7d:ef:11:57:db:20:45:c0:8f:a2:5f:74:
                    45:81:ec:56:eb:e6:f5:0b:42:e0:04:47:26:8d:21:
                    61:31:51:7f:89:b3:a5:90:ff:64:c0:a5:fc:a1:70:
                    44:7c:94:ee:fc:04:bb:16:1f:a1:0a:6c:ed:7c:56:
                    3f:97:78:0b:6b:63:e6:32:48:0f:16:3d:c6:97:97:
                    90:bb:11:26:d5:54:43:8a:16:57:24:fd:5a:ea:ff:
                    80:ce:a1:e1:1f:b8:cd:5f:45:a8:04:cd:77:54:ad:
                    0f:f9:a2:f2:ed:bd:ad:b6:b5:c2:4c:ae:ce:d8:91:
                    35:49:19:c7:16:4e:b7:c4:0b:d3:1e:25:54:73:f3:
                    cf:3f:f1:45:e8:ca:1f:98:5a:e3:0a:03:59:5f:32:
                    50:b8:4a:56:0a:60:74:32:db:09:45:db:4f:7b:ca:
                    09:46:84:ae:c2:4c:53:f6:7e:e7:42:c4:2f:82:88:
                    24:7e:49:53:90:95:ca:07:4e:c0:9b:67:72:72:ad:
                    8d:bc:fa:80:90:3b:e8:84:ef:41:38:6a:8c:df:8b:
                    b9:b9:26:a7:b8:ce:86:73:8f:bb:d5:e3:c5:5a:e5:
                    b8:f2:1c:d6:cc:be:f3:1f:2a:08:21:b2:39:16:cd:
                    f1:8b:79:4c:99:b3:08:c9:0e:11:2c:58:f6:7d:d2:
                    ae:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                68:04:0A:EB:3A:C9:8B:5F:F3:C0:3D:98:E9:01:AB:81:77:34:3C:76
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.176.0/22
                IPv6:
                  2804:35d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266309

    Signature Algorithm: sha256WithRSAEncryption
         03:d0:97:51:6c:23:3d:24:d5:8a:b4:3c:b5:90:c9:71:38:49:
         55:f0:52:07:e1:31:74:26:c7:20:79:f5:18:cd:72:31:ab:18:
         2c:96:1f:53:20:a9:63:f5:63:87:9f:e6:98:3c:43:c3:8d:91:
         b1:a7:16:38:92:19:fb:df:72:05:c1:ff:7c:8f:ff:9f:31:5f:
         39:7e:94:07:52:48:52:d3:e5:f9:37:06:60:bc:5a:5b:62:02:
         92:64:32:f9:58:07:4c:1a:de:3e:68:bf:94:25:56:26:f3:db:
         29:e3:52:e8:e0:c8:7a:64:f7:54:94:d4:a6:d0:35:f4:17:3c:
         db:49:de:ae:1a:5d:e0:55:a4:7d:49:41:5f:59:4d:1f:f6:dc:
         a6:3d:6d:61:a7:fe:92:eb:80:3f:3d:86:bf:8a:f5:10:c3:a1:
         8d:85:02:3b:01:85:01:e6:87:6e:88:c2:a1:94:0c:db:a2:b2:
         30:06:29:0c:de:b0:d3:62:12:2a:69:f9:35:ff:a6:a6:d3:e4:
         4a:1a:70:27:2a:83:10:98:9a:d6:eb:57:d0:8b:05:ef:cb:14:
         3a:1d:2b:a7:5d:60:fe:59:74:76:6f:c3:ed:93:e9:25:db:57:
         83:d7:7a:3c:05:cc:1e:7b:e3:9f:0a:a8:e1:a4:24:59:54:7a:
         6f:42:00:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:06:11 2024 by rpki-client on console-ams.rpki-client.org