Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.cer
File:                     6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.cer (raw, json)
Hash identifier:          r5tDdipD0re5ia7DujTC2+23T1hRf32ZpFWafgHWo70=
Subject key identifier:   6A:41:E5:59:8C:15:DD:30:85:A3:2C:5C:38:EB:D8:C2:FA:47:F2:1A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7F29D0B2088B98E2DAFC8835EA9E9678B7390A57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 07 Nov 2024 17:39:34 +0000
Certificate not after:    Thu 06 Nov 2025 17:44:34 +0000
Subordinate resources:    AS: 52631
                          AS: 270815
                          IP: 177.128.24.0/21
                          IP: 200.229.244.0/22
                          IP: 2804:49d4::/32
                          IP: 2804:71d8::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 00:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:29:d0:b2:08:8b:98:e2:da:fc:88:35:ea:9e:96:78:b7:39:0a:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  7 17:39:34 2024 GMT
            Not After : Nov  6 17:44:34 2025 GMT
        Subject: CN=6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0e:f1:54:48:12:65:36:70:1a:81:26:40:2d:
                    15:37:e6:b1:1b:e3:71:f7:80:ac:f1:6c:2c:a2:aa:
                    f6:27:f4:67:81:9e:cc:bd:f2:e5:48:44:e9:81:c4:
                    ba:91:06:f0:d2:a8:fd:4d:b4:2c:6b:51:60:fe:d8:
                    b9:a3:be:e2:2c:d1:3d:fa:38:c7:07:b5:49:90:2a:
                    41:e2:ff:9c:3b:f3:12:0b:6c:22:6a:2c:ac:48:fa:
                    22:54:46:64:7a:6f:5a:b3:5f:a1:84:3f:4a:5a:31:
                    6f:02:05:43:4f:81:c0:fa:eb:7a:a6:fd:16:f1:d8:
                    fe:99:2a:58:fe:de:4b:50:2c:37:bb:fb:56:d9:a4:
                    fe:aa:eb:d0:30:aa:87:03:59:be:0f:97:d3:33:e5:
                    ec:ff:b1:4c:b2:43:b9:b6:87:5a:cf:e4:9e:cd:ac:
                    ea:ea:cf:8f:3f:c3:c1:07:49:34:c8:1e:f1:e0:23:
                    cf:6b:86:de:0f:3b:07:50:19:3e:98:0a:8a:16:4f:
                    13:bc:18:e6:e8:cf:95:a0:49:49:e7:c9:85:09:75:
                    04:04:99:8c:c5:8f:7e:3e:28:76:5f:e8:42:60:28:
                    9a:c2:da:b8:57:ec:cb:c0:00:3d:e3:d0:32:6b:8c:
                    7f:96:7f:16:ad:fb:f9:33:b7:76:1a:97:dc:9b:de:
                    67:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6A:41:E5:59:8C:15:DD:30:85:A3:2C:5C:38:EB:D8:C2:FA:47:F2:1A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.24.0/21
                  200.229.244.0/22
                IPv6:
                  2804:49d4::/32
                  2804:71d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52631
                  270815

    Signature Algorithm: sha256WithRSAEncryption
         0a:7e:31:23:d5:51:8b:4a:ab:83:9c:59:73:d7:6e:ea:8c:9e:
         1b:0a:8c:f3:7a:21:a3:41:73:45:ff:18:8d:d1:09:3b:43:8a:
         b0:68:8f:9a:e3:82:14:97:85:a1:c1:14:88:08:6d:8c:68:c7:
         94:cc:2b:1e:b1:98:78:38:e2:de:d1:b9:06:4a:b2:a5:1d:be:
         a3:a1:76:88:98:87:c4:56:59:80:26:02:e4:7d:cb:1a:9c:92:
         83:97:b8:ff:3a:0a:5d:cc:ad:b1:bf:78:1b:6d:ea:a6:33:0d:
         03:0d:bd:e6:12:a1:3a:1e:19:80:12:f8:d4:a9:0f:bd:c5:9f:
         36:24:b9:62:7f:5b:82:ab:d5:c8:48:d1:7a:b4:b9:c3:5f:cb:
         e2:e8:3b:62:03:b9:b1:3f:d5:22:b5:d7:43:f3:0e:a8:ed:cd:
         3f:7a:ca:90:23:45:16:5a:69:3c:f8:7a:67:41:a5:0c:87:9c:
         cc:e0:3d:da:33:2f:9c:30:dd:5b:7c:08:d5:92:4d:4c:1d:8e:
         87:4f:e1:08:a4:c2:66:fc:88:46:f6:59:d6:10:e0:28:50:bb:
         30:1d:c2:33:c3:86:35:9e:47:9c:a7:00:b6:8f:ad:cb:9f:84:
         70:3e:7e:63:84:ea:d6:58:bf:91:ef:81:70:b8:e9:f2:cc:46:
         aa:05:e3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:16:38 2024 by rpki-client on console-fra.rpki-client.org