Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/944D7F16EF33CF24B63038B95B06199620AA80DB.cer
File:                     944D7F16EF33CF24B63038B95B06199620AA80DB.cer (raw, json)
Hash identifier:          Up5/AiXry2DqMfWqnBGaHmnR7kpxU7B8k0jAuLgpcJk=
Subject key identifier:   94:4D:7F:16:EF:33:CF:24:B6:30:38:B9:5B:06:19:96:20:AA:80:DB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5D71A6360DE4D4624A799C317899D6B1D0E3D45A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/2/944D7F16EF33CF24B63038B95B06199620AA80DB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Nov 2024 18:06:03 +0000
Certificate not after:    Mon 17 Nov 2025 18:11:03 +0000
Subordinate resources:    AS: 268166
                          IP: 45.170.180.0/22
                          IP: 2804:590c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:71:a6:36:0d:e4:d4:62:4a:79:9c:31:78:99:d6:b1:d0:e3:d4:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 18 18:06:03 2024 GMT
            Not After : Nov 17 18:11:03 2025 GMT
        Subject: CN=944D7F16EF33CF24B63038B95B06199620AA80DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0e:ec:44:75:c9:b9:93:30:a9:2d:0b:1a:23:
                    5f:dd:dc:72:80:80:3e:f7:a2:c3:bb:33:27:29:a3:
                    29:f4:f6:6d:5f:84:27:4d:42:85:8f:a9:76:9a:f3:
                    55:c9:1d:0d:00:66:48:d5:ff:84:82:f4:d7:cb:4d:
                    24:96:f7:d7:25:ec:07:cb:af:6c:eb:3e:17:d5:df:
                    9b:9e:a7:3f:4a:da:34:1a:34:1c:5f:58:ee:f0:cd:
                    33:d5:9f:85:80:3b:72:15:1b:bb:58:18:97:f7:93:
                    62:b2:ab:96:da:84:54:49:33:f9:70:cb:e8:40:a7:
                    0d:aa:f0:e8:19:e1:0f:b0:46:06:5e:58:d3:6a:0f:
                    02:a7:ad:5c:15:32:3c:8b:47:75:7b:b6:d2:f1:a6:
                    5b:02:3e:aa:2a:8e:20:3c:aa:83:20:bf:7b:5a:e4:
                    17:b4:d4:26:cf:1e:e2:5f:08:d2:ec:8f:6e:96:81:
                    cc:3a:69:c8:52:2b:c6:4d:df:d8:ef:56:8d:87:9f:
                    c5:4c:07:93:a7:80:62:44:6a:95:82:c1:cf:1d:73:
                    66:dd:00:14:2c:16:f1:33:bd:4d:8b:3d:71:00:c1:
                    ea:29:9c:60:3c:03:eb:c1:b5:18:91:14:ce:1a:47:
                    a1:a8:4d:ae:5a:f8:73:74:71:06:a5:73:66:5f:92:
                    66:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                94:4D:7F:16:EF:33:CF:24:B6:30:38:B9:5B:06:19:96:20:AA:80:DB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/2/944D7F16EF33CF24B63038B95B06199620AA80DB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.180.0/22
                IPv6:
                  2804:590c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268166

    Signature Algorithm: sha256WithRSAEncryption
         0b:e5:ce:f3:9c:b5:80:de:5a:47:0f:eb:af:79:41:62:d1:14:
         e0:d2:ff:77:45:b9:78:c6:ee:a8:78:68:a6:74:ea:c3:74:29:
         06:a9:d9:4e:9b:85:67:d9:8a:7a:aa:00:e9:9c:db:ea:c8:dc:
         f2:99:3c:fa:b1:cc:65:0b:18:e9:5e:68:bf:38:95:a9:04:83:
         95:81:d9:49:08:d1:a4:6d:8f:24:2b:a8:e0:60:9e:77:ba:6f:
         12:38:30:2b:ec:88:d7:8c:f5:d9:67:21:e4:24:c5:c8:1e:bf:
         5f:75:4c:e9:03:96:70:f6:61:85:57:6d:04:97:a3:92:05:70:
         51:9c:56:06:7c:e1:0a:cb:0a:4f:13:9c:b2:85:19:58:57:91:
         f7:f7:51:b7:3f:f8:af:ed:2c:e0:e7:b3:30:75:eb:43:c4:da:
         e4:ed:2c:6a:e3:d8:49:cb:d9:17:88:88:0e:6b:da:e2:8e:d0:
         5c:17:5a:63:33:fc:ae:f4:2e:c0:03:c6:6a:ba:70:07:ba:6a:
         4e:5c:bc:98:ee:3e:05:d1:4e:86:5d:4e:fd:8e:cd:66:99:ac:
         47:5e:08:d4:bb:16:40:2a:16:31:d2:fc:c7:d5:ee:5e:99:cc:
         c9:92:7e:ca:5f:cd:74:34:29:b7:22:b4:6d:ba:8c:af:d7:73:
         64:87:dc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:06:21 2024 by rpki-client on console-ams.rpki-client.org