Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/77A5C569B2294D2C9A8D2E4BD781081A234F1C24.cer
File:                     77A5C569B2294D2C9A8D2E4BD781081A234F1C24.cer (raw, json)
Hash identifier:          rwJPANnggJCYPDBrwflJ7M8wzIcK8tawYW1UgLI01ug=
Subject key identifier:   77:A5:C5:69:B2:29:4D:2C:9A:8D:2E:4B:D7:81:08:1A:23:4F:1C:24
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6DD59BAC639B8C31465D2513849E65CEADECCCAB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/1/77A5C569B2294D2C9A8D2E4BD781081A234F1C24.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:25:04 +0000
Certificate not after:    Wed 02 Apr 2025 18:30:04 +0000
Subordinate resources:    AS: 267544
                          IP: 45.70.32.0/22
                          IP: 45.71.76.0/22
                          IP: 2804:4308::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:d5:9b:ac:63:9b:8c:31:46:5d:25:13:84:9e:65:ce:ad:ec:cc:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:25:04 2024 GMT
            Not After : Apr  2 18:30:04 2025 GMT
        Subject: CN=77A5C569B2294D2C9A8D2E4BD781081A234F1C24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c1:75:0c:fc:31:83:57:74:da:4c:8d:25:cc:
                    3f:b9:a9:25:6f:99:cb:63:22:db:d4:4d:51:42:a3:
                    ef:56:68:d7:78:e7:f4:6d:de:ad:c1:c6:9c:8b:11:
                    b6:fe:42:88:28:16:21:d3:2b:83:80:ca:3b:95:0f:
                    65:35:b2:5b:c8:7f:5b:00:41:5d:fa:ee:b5:e1:42:
                    80:9a:6b:2f:34:bb:97:b9:30:81:08:86:c9:ec:12:
                    3d:35:96:05:b1:12:8e:96:0f:f3:f3:6d:ea:ba:e9:
                    b0:1b:ae:11:6a:03:76:fe:fd:95:5c:90:ab:9f:6a:
                    9a:72:47:1e:63:11:5e:92:3e:e7:f0:e5:c3:86:b3:
                    31:ca:f8:5c:04:ee:8b:81:0c:39:04:92:e1:cc:55:
                    9b:32:c9:0b:d1:2b:fa:01:41:c5:89:25:48:c3:4e:
                    36:5e:ab:e1:e5:3b:bf:a7:7e:4d:eb:60:7c:74:0c:
                    a3:53:38:76:76:ee:9e:16:74:b4:97:20:23:5a:06:
                    cf:7f:32:73:e6:b0:30:99:c0:ec:e1:c6:4c:db:0c:
                    78:36:1d:c6:2b:37:11:eb:08:b7:c7:23:b0:7c:9d:
                    a9:32:fa:d4:f8:52:00:82:6f:47:eb:f3:6b:8a:e2:
                    3f:01:25:11:be:56:24:ca:8b:8f:d0:af:3e:f1:86:
                    14:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                77:A5:C5:69:B2:29:4D:2C:9A:8D:2E:4B:D7:81:08:1A:23:4F:1C:24
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/1/77A5C569B2294D2C9A8D2E4BD781081A234F1C24.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.32.0/22
                  45.71.76.0/22
                IPv6:
                  2804:4308::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267544

    Signature Algorithm: sha256WithRSAEncryption
         32:f4:aa:12:9e:7f:dd:fe:03:15:a9:7d:3d:7d:5c:90:6a:6c:
         9a:65:0e:be:bf:bb:c2:13:c3:b7:d7:14:d7:13:f6:b1:4e:2a:
         54:14:9f:2d:5a:b5:76:e4:ae:94:18:a7:d1:dd:26:66:ea:27:
         68:3c:23:01:84:62:15:72:cc:68:26:bc:f3:f1:50:ae:c8:3d:
         47:c6:0f:b5:d5:ea:37:0f:25:e7:10:1d:2c:4b:a6:14:2c:d1:
         48:8b:0f:99:27:ae:78:9d:5c:95:df:f5:85:d0:3d:1f:f6:32:
         46:51:c3:c0:03:c7:a4:8d:e4:3c:e3:2a:e6:35:11:af:df:a8:
         bc:40:73:52:3c:a0:c3:47:83:b0:96:54:e1:86:26:e0:a5:c3:
         c8:5a:5e:c5:59:bf:99:85:50:3a:0b:ae:5e:95:78:15:3d:ea:
         80:d8:35:74:e7:42:e0:42:c3:83:c8:a3:b1:71:7c:7c:d5:fc:
         57:0c:13:31:0d:3a:12:b4:c9:a7:b2:7f:2c:a2:ed:66:ff:28:
         76:0c:83:f5:b8:25:08:38:45:0e:e3:78:aa:e4:3f:bb:a4:9c:
         c8:33:e9:33:d3:a0:1a:c9:56:58:97:d8:18:97:bd:cb:7c:d5:
         6c:3b:08:c7:de:c4:1e:76:7b:64:16:4b:14:c3:b5:75:e1:c7:
         b0:d1:20:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:49 2024 by rpki-client on console-fra.rpki-client.org