Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7D68B4A5CB64CCB1932E38B5F22C05FF0DD13FC3.cer
File:                     7D68B4A5CB64CCB1932E38B5F22C05FF0DD13FC3.cer (raw, json)
Hash identifier:          kH15RSMLpqgrmnN5uI80l+I6gQLMXRd+bdeCuQb5BVE=
Subject key identifier:   7D:68:B4:A5:CB:64:CC:B1:93:2E:38:B5:F2:2C:05:FF:0D:D1:3F:C3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       041AAEE235B82DFB67E6FF0903C5C132415D43D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/7D68B4A5CB64CCB1932E38B5F22C05FF0DD13FC3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 06 Sep 2024 16:48:15 +0000
Certificate not after:    Fri 05 Sep 2025 16:53:15 +0000
Subordinate resources:    AS: 273497
                          IP: 201.49.184.0/23
                          IP: 2804:8f8c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:1a:ae:e2:35:b8:2d:fb:67:e6:ff:09:03:c5:c1:32:41:5d:43:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep  6 16:48:15 2024 GMT
            Not After : Sep  5 16:53:15 2025 GMT
        Subject: CN=7D68B4A5CB64CCB1932E38B5F22C05FF0DD13FC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:83:5d:6b:7b:bb:02:ed:fa:3f:c6:2d:bd:aa:
                    46:d0:38:bd:3b:f4:4d:cc:40:38:c0:5d:54:c3:a7:
                    fa:9a:57:ca:7c:b0:1b:2b:8c:59:df:dc:a6:b1:da:
                    33:67:c0:33:01:a7:5e:76:90:63:cc:b4:77:79:69:
                    3e:d9:f6:d2:81:e4:83:76:c6:fb:18:8b:ca:f2:53:
                    3b:04:ee:23:0e:65:e4:b2:d1:45:c8:db:d1:1c:35:
                    9c:93:c5:c5:58:54:67:be:57:59:28:fa:ee:90:01:
                    2d:ab:27:91:fe:86:77:29:4e:3f:ff:d9:a4:dd:da:
                    51:94:da:4e:f2:58:26:11:d7:3a:d8:1b:43:58:e9:
                    2d:81:c9:ee:43:ea:0b:de:39:56:45:db:9f:69:39:
                    f8:06:46:b7:73:92:1b:97:49:7f:a7:65:9f:75:4f:
                    b0:f6:3b:97:0f:c0:00:0b:3a:b0:1e:c4:6b:49:82:
                    f7:54:18:89:e5:28:b3:05:59:b7:8b:bd:10:79:b5:
                    c8:83:41:15:99:de:16:45:54:2a:c9:2c:67:f7:a8:
                    9a:62:31:39:d4:ea:10:8f:62:0e:50:22:1d:5e:e1:
                    70:5a:2b:5e:0b:f0:e8:86:51:38:a7:5f:ab:99:59:
                    3b:75:63:24:1b:af:af:64:e9:9d:5b:50:a9:db:7b:
                    48:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7D:68:B4:A5:CB:64:CC:B1:93:2E:38:B5:F2:2C:05:FF:0D:D1:3F:C3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/7D68B4A5CB64CCB1932E38B5F22C05FF0DD13FC3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.184.0/23
                IPv6:
                  2804:8f8c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273497

    Signature Algorithm: sha256WithRSAEncryption
         15:ec:54:01:63:a2:d0:ad:5d:16:62:52:8b:37:66:da:4f:fd:
         14:1f:7e:98:0f:b1:d2:3f:26:07:ab:71:29:75:e7:49:16:a9:
         19:e4:da:23:1a:62:ce:22:c2:ba:9a:20:b8:5f:35:ca:40:f3:
         ec:8f:96:ea:60:23:a3:10:57:7b:e0:96:ce:3e:17:58:d5:18:
         86:d5:c1:dc:f6:7d:af:33:50:20:0b:44:65:e4:29:37:d8:ce:
         97:0b:0b:99:24:87:20:ac:75:c9:db:0e:95:d8:98:62:53:6c:
         88:f2:bc:32:94:d6:85:15:5a:f2:f7:4a:31:d7:aa:7f:44:82:
         ce:f6:98:d8:ae:66:44:3f:b2:7c:9b:7f:76:49:53:e3:0e:b5:
         f9:21:c5:1c:d5:d6:72:f7:b3:82:b6:94:9b:3f:aa:e4:d7:66:
         63:55:05:90:a6:f9:d0:b2:b2:8d:c3:03:85:42:d5:ca:f5:6e:
         59:7e:88:d8:4e:fc:c9:63:6e:4f:e7:98:50:c6:c2:f8:f4:4c:
         31:f9:dd:da:bc:36:81:68:a3:e2:32:51:0e:f2:ef:02:3c:f5:
         8b:bc:19:b7:f9:16:6b:bd:44:35:f3:ef:bd:b1:6e:b5:a9:d4:
         88:5e:55:15:4c:f9:bb:23:09:ce:25:45:07:66:22:9f:c7:0d:
         f4:6c:f0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:44:08 2024 by rpki-client on console-ams.rpki-client.org