Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7A105C6DEE41508A10CDA040ABF8B86CE1683847.cer
File:                     7A105C6DEE41508A10CDA040ABF8B86CE1683847.cer (raw, json)
Hash identifier:          +PWYN721hBcYJWOP58IfCfyCTCRn0dm6Cp+1weQdfXM=
Subject key identifier:   7A:10:5C:6D:EE:41:50:8A:10:CD:A0:40:AB:F8:B8:6C:E1:68:38:47
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5711B76CE06CAA2AEFC7DACEE09E0F11C1917C24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EzWPjsBq4BqFx2bm9YXo15NLDuH7KY95V2BcvB2gAqq4/0/7A105C6DEE41508A10CDA040ABF8B86CE1683847.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EzWPjsBq4BqFx2bm9YXo15NLDuH7KY95V2BcvB2gAqq4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 03 May 2024 21:29:49 +0000
Certificate not after:    Fri 02 May 2025 21:34:49 +0000
Subordinate resources:    AS: 264570
                          IP: 138.36.40.0/22
                          IP: 2804:21bc::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:11:b7:6c:e0:6c:aa:2a:ef:c7:da:ce:e0:9e:0f:11:c1:91:7c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  3 21:29:49 2024 GMT
            Not After : May  2 21:34:49 2025 GMT
        Subject: CN=7A105C6DEE41508A10CDA040ABF8B86CE1683847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:19:b1:56:32:14:00:92:85:7e:76:84:59:ca:
                    d9:ce:a7:c8:9b:a7:d0:95:aa:f7:ad:ce:61:c2:dd:
                    1d:ee:82:8d:c9:ba:3b:5b:e5:f9:63:c4:50:7e:6a:
                    3d:be:be:8c:f5:63:56:9e:81:1e:a7:45:94:2e:01:
                    a1:20:52:31:e4:47:3b:ff:7b:07:a2:78:71:ee:f5:
                    d6:d2:35:5c:40:5c:de:fa:bd:53:a4:c2:85:eb:44:
                    cb:7f:17:42:db:73:65:04:1d:dd:00:f1:0e:47:d0:
                    cc:a6:60:56:62:d8:7a:32:29:8b:11:23:d7:92:51:
                    e1:2b:a3:29:41:33:d2:76:45:8c:64:1e:99:b6:1d:
                    95:b0:c0:91:d4:18:9b:f4:29:f9:d6:88:74:7f:80:
                    69:f3:73:ce:66:62:a0:83:cc:11:15:ea:78:94:4f:
                    ef:c2:0f:06:44:5d:25:31:bc:eb:ed:78:91:9d:3e:
                    62:f1:02:38:69:e6:90:62:ea:04:e3:9e:e1:8a:c7:
                    b6:33:83:99:63:af:04:3d:fe:a9:5a:c1:25:d6:6f:
                    81:e7:cd:d8:18:59:89:97:54:50:d6:6d:f6:b7:7e:
                    f8:68:9a:c2:6b:8d:4f:ff:01:00:c5:61:62:f5:58:
                    93:12:6c:ae:38:46:bb:82:0f:60:90:97:bd:a0:ac:
                    e0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7A:10:5C:6D:EE:41:50:8A:10:CD:A0:40:AB:F8:B8:6C:E1:68:38:47
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EzWPjsBq4BqFx2bm9YXo15NLDuH7KY95V2BcvB2gAqq4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EzWPjsBq4BqFx2bm9YXo15NLDuH7KY95V2BcvB2gAqq4/0/7A105C6DEE41508A10CDA040ABF8B86CE1683847.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.40.0/22
                IPv6:
                  2804:21bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264570

    Signature Algorithm: sha256WithRSAEncryption
         72:e2:ed:dc:3d:1a:5e:87:90:9a:f9:78:f6:04:91:5c:67:4f:
         a1:9c:9f:a6:1d:c2:51:92:50:11:98:1c:f7:7d:d7:c3:db:3e:
         4d:f5:da:d6:44:ad:51:7b:8d:6c:1e:ac:51:ba:da:09:c1:21:
         47:6d:69:7c:0a:db:e5:35:cf:f7:f3:ed:b6:03:1c:9b:92:7e:
         a8:e5:81:7e:ef:25:2e:46:b6:63:41:84:6a:bf:60:ea:18:49:
         72:6b:ce:e4:2b:d1:3d:45:41:b6:3b:ed:0a:7d:62:6f:16:49:
         ac:f9:2f:93:bf:d0:fb:25:7f:1f:83:7e:f8:eb:d9:8b:34:0f:
         36:38:5a:14:69:a2:91:5d:8a:df:04:99:42:a4:ba:0c:4f:5d:
         7a:03:09:f3:12:48:61:ae:1d:15:e8:2e:12:97:17:81:e7:d7:
         b7:20:33:17:f3:c1:a8:62:d3:01:60:e9:a2:50:06:d5:be:c2:
         01:48:23:dc:bf:6e:58:bb:9a:d5:b1:f2:f1:c5:ca:c3:3c:be:
         38:60:6f:57:81:db:2a:3c:a2:78:81:41:1f:e8:fe:fc:92:69:
         38:35:c5:d4:ff:82:70:51:f3:59:5f:fc:bc:4c:16:55:d5:ad:
         18:18:57:7c:b1:64:28:75:a9:e3:19:cd:b7:95:e1:18:ec:00:
         94:06:7c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:36 2024 by rpki-client on console-fra.rpki-client.org