Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/97DFDD537889039A6F50A7A04D31597E88D020DB.cer
File:                     97DFDD537889039A6F50A7A04D31597E88D020DB.cer (raw, json)
Hash identifier:          p3xJ8+yY46jLfkKmRpp2Lkku4Zwyw7IO8OLj2MFgOnA=
Subject key identifier:   97:DF:DD:53:78:89:03:9A:6F:50:A7:A0:4D:31:59:7E:88:D0:20:DB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6819297EB786E56196B6F1C5BA2E2E7191495140
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/97DFDD537889039A6F50A7A04D31597E88D020DB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 05 Aug 2024 14:39:05 +0000
Certificate not after:    Mon 04 Aug 2025 14:44:05 +0000
Subordinate resources:    AS: 270810
                          IP: 200.219.16.0/22
                          IP: 2804:71c4::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:19:29:7e:b7:86:e5:61:96:b6:f1:c5:ba:2e:2e:71:91:49:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  5 14:39:05 2024 GMT
            Not After : Aug  4 14:44:05 2025 GMT
        Subject: CN=97DFDD537889039A6F50A7A04D31597E88D020DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:db:22:a0:56:6b:22:00:b4:dd:60:b0:62:7d:
                    9f:2c:ae:95:55:62:85:fe:cb:92:03:31:af:8d:5b:
                    68:79:e9:dd:12:da:b7:38:04:aa:7c:ce:1f:d2:cb:
                    d2:5e:2c:cb:f3:cf:e8:51:5b:fa:b2:5e:c3:fb:52:
                    ce:e5:9a:af:ff:ff:82:68:e2:38:83:79:63:55:f6:
                    6b:3c:d9:ac:da:fd:c7:e0:e6:c6:c8:98:d7:39:e2:
                    6f:be:c1:a3:bb:bd:1f:9b:40:a6:2c:ce:d7:2a:35:
                    eb:a8:f7:90:09:0a:1c:ce:6e:d3:bb:48:b6:a3:18:
                    f2:0e:2b:cc:f7:53:c1:eb:88:a3:eb:cd:b6:56:16:
                    dd:bf:47:5f:2c:8b:3b:c5:42:59:eb:46:53:4c:15:
                    d1:fd:13:0b:2b:c0:cb:31:fe:c9:4b:12:e8:d7:b1:
                    71:66:e3:84:ec:48:e0:43:c2:01:83:4f:ce:79:2c:
                    68:cd:c5:67:0b:af:ef:95:5f:2a:63:44:c7:0c:0c:
                    76:98:3e:f5:1b:62:e3:98:81:4d:5a:5d:ea:05:52:
                    4c:03:8e:cc:68:fe:cd:32:a7:57:a0:77:d9:bc:1d:
                    dd:e6:73:35:d3:73:6d:6c:d5:be:ba:50:78:2f:7a:
                    4c:40:33:b8:12:bc:bf:ac:6b:0a:02:62:d7:c9:01:
                    a3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:DF:DD:53:78:89:03:9A:6F:50:A7:A0:4D:31:59:7E:88:D0:20:DB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/97DFDD537889039A6F50A7A04D31597E88D020DB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.16.0/22
                IPv6:
                  2804:71c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270810

    Signature Algorithm: sha256WithRSAEncryption
         8f:6b:ed:93:b4:3e:96:26:41:fc:3d:5d:68:15:cc:05:fe:41:
         b6:2f:18:76:60:80:9d:cf:76:7f:7d:74:e6:01:47:af:a9:80:
         30:23:cc:e2:27:a0:0f:4d:c8:58:0f:21:32:f7:79:2f:b4:de:
         7e:80:58:e7:86:09:bb:1f:8b:a4:95:a5:51:b9:ea:92:ab:e6:
         e9:80:97:0f:2b:b6:3c:01:6d:5a:54:66:c9:95:a2:f6:a1:a7:
         17:48:33:d0:2d:54:92:8b:f8:88:61:ef:7b:34:db:56:c5:45:
         9b:cd:94:dd:c6:d1:60:28:d3:97:a0:1a:38:ef:2a:e2:69:75:
         41:e9:be:7d:6a:e0:d9:09:e5:f8:3a:32:0a:bd:1e:71:76:a0:
         0d:49:ad:1b:4a:ca:b0:a9:4b:96:56:51:e1:a6:aa:7c:b6:76:
         bc:53:a8:6a:e9:7e:df:cf:85:c5:d9:80:77:e4:6f:3a:1c:cb:
         e5:9f:da:ad:a9:f6:81:e8:3e:27:2b:7a:6a:e9:f9:d3:2b:eb:
         df:5f:d0:0d:0f:a8:17:0e:47:3d:03:b3:e2:b0:22:47:b7:85:
         5b:28:e2:3c:0f:d1:69:b9:37:9c:5f:f8:14:97:81:10:fa:65:
         6e:ec:5d:2f:99:79:bf:c3:39:21:02:d3:2d:09:18:44:7e:1a:
         41:81:47:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:48 2024 by rpki-client on console-fra.rpki-client.org