Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/720929CF576E60789CD9860A6B57545753C0FA3F.cer
File:                     720929CF576E60789CD9860A6B57545753C0FA3F.cer (raw, json)
Hash identifier:          ok/YESlO8jzAOJWpxA73aO1lZTSfWzahq1+iU2/Srf4=
Subject key identifier:   72:09:29:CF:57:6E:60:78:9C:D9:86:0A:6B:57:54:57:53:C0:FA:3F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       30353190C33B116734C9C572838042ACB03C14B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F7ekXhVfuSpCV1W1u6nD8WE31gpBDkAz1sNM8e4A1MdT/0/720929CF576E60789CD9860A6B57545753C0FA3F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F7ekXhVfuSpCV1W1u6nD8WE31gpBDkAz1sNM8e4A1MdT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 06 May 2024 15:09:18 +0000
Certificate not after:    Mon 05 May 2025 15:14:18 +0000
Subordinate resources:    AS: 268031
                          IP: 45.168.60.0/22
                          IP: 2804:56e8::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 23:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:35:31:90:c3:3b:11:67:34:c9:c5:72:83:80:42:ac:b0:3c:14:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  6 15:09:18 2024 GMT
            Not After : May  5 15:14:18 2025 GMT
        Subject: CN=720929CF576E60789CD9860A6B57545753C0FA3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ba:bc:ed:4b:48:86:97:6f:cb:3a:57:cd:f5:
                    b3:b8:2e:f6:d4:d0:2d:8c:fa:8c:58:f4:79:87:50:
                    df:f2:ec:b2:11:b3:a9:0e:99:3d:a4:1e:56:d1:0a:
                    39:ad:85:4c:3f:ec:85:50:be:2a:dd:c3:03:56:0c:
                    5d:87:f9:59:0a:d0:e7:f4:e1:f3:7b:8a:d6:ce:44:
                    b0:9e:59:40:71:c1:60:60:05:79:9e:0a:bc:19:2c:
                    81:76:3f:ee:3e:7c:12:5c:3a:b3:7e:c9:13:e7:d1:
                    2f:09:32:f2:82:5d:f2:f0:8a:90:3d:20:8b:5f:73:
                    e8:8c:d5:9e:7a:e8:9f:b0:b9:4f:41:13:f7:7d:fc:
                    cf:5d:73:5f:ad:a0:06:c4:17:57:75:a9:33:3a:d3:
                    9b:33:cf:f0:55:59:48:7b:00:50:43:52:6a:b3:30:
                    54:52:bb:24:3a:18:07:1f:d7:e0:84:75:56:cb:d8:
                    3b:ac:47:f3:d4:e3:77:5e:29:9a:f5:91:5a:f3:e8:
                    80:b3:49:45:fb:05:55:34:bf:26:d6:61:a2:ca:88:
                    43:f7:e6:24:ca:57:80:dc:c0:d9:e7:ef:34:eb:62:
                    5c:5a:40:ba:0b:ee:ae:8f:53:3b:45:4a:cd:82:b5:
                    32:05:3a:43:24:bd:8e:fe:54:4f:56:46:ee:0b:f6:
                    32:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                72:09:29:CF:57:6E:60:78:9C:D9:86:0A:6B:57:54:57:53:C0:FA:3F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F7ekXhVfuSpCV1W1u6nD8WE31gpBDkAz1sNM8e4A1MdT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F7ekXhVfuSpCV1W1u6nD8WE31gpBDkAz1sNM8e4A1MdT/0/720929CF576E60789CD9860A6B57545753C0FA3F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.60.0/22
                IPv6:
                  2804:56e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268031

    Signature Algorithm: sha256WithRSAEncryption
         47:ff:0d:ab:e1:98:ba:9a:0e:c9:db:94:19:ce:89:cb:fb:48:
         f0:c1:74:fa:4e:49:e1:e6:8a:49:ff:b0:9e:ec:28:7b:2a:3f:
         0b:f1:80:26:76:e9:99:86:ef:c5:92:9a:64:1e:a6:c5:54:5a:
         4d:70:02:c7:d6:ac:95:fc:8a:ca:32:84:f7:5b:11:ad:bd:fa:
         57:bc:5d:bc:95:50:35:8a:f4:9b:eb:87:08:bf:60:59:60:e6:
         ff:5d:10:33:c3:dd:5c:55:eb:53:a9:a4:51:c6:35:27:a2:71:
         da:42:e0:cf:26:e0:f9:71:f0:40:f1:ce:67:fd:18:32:3e:e2:
         c0:fa:63:7f:0b:38:88:36:8e:f8:61:57:f9:ae:14:c5:19:04:
         36:a3:dd:d8:2c:bd:d6:fd:f9:f4:03:0d:a9:ad:33:92:42:81:
         7b:eb:32:ce:b2:55:7d:e9:bb:ae:43:02:eb:fe:96:43:d2:a8:
         f0:37:a9:62:ff:13:8b:d1:73:6c:94:85:f1:d5:7c:e6:93:c5:
         d6:9c:fb:9a:26:76:6a:58:61:f1:d7:d6:ad:8c:a7:56:bd:e2:
         3a:b4:ea:09:7e:ba:f0:78:cb:f0:f4:70:cd:bd:b6:65:44:c1:
         95:75:be:e8:1b:67:0c:ef:d6:78:a1:7e:9b:c3:7b:29:ec:d8:
         31:fa:37:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:43:30 2024 by rpki-client on console-fra.rpki-client.org