Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9D1976629022211514D82A46F1AF3344D2E667F3.cer
File:                     9D1976629022211514D82A46F1AF3344D2E667F3.cer (raw, json)
Hash identifier:          BfBG1yNs4V8YVhjXTp/T+T1KVlr+MmoumKTE8SEHBc8=
Subject key identifier:   9D:19:76:62:90:22:21:15:14:D8:2A:46:F1:AF:33:44:D2:E6:67:F3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7BF311B8967F914859D4FF7C16DF2CDB3096666F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/9D1976629022211514D82A46F1AF3344D2E667F3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 23 Nov 2024 21:17:01 +0000
Certificate not after:    Sat 22 Nov 2025 21:22:01 +0000
Subordinate resources:    AS: 61680
                          IP: 131.108.64.0/22
                          IP: 2804:1ce0::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 16:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f3:11:b8:96:7f:91:48:59:d4:ff:7c:16:df:2c:db:30:96:66:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 23 21:17:01 2024 GMT
            Not After : Nov 22 21:22:01 2025 GMT
        Subject: CN=9D1976629022211514D82A46F1AF3344D2E667F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:43:3d:2d:50:9d:e3:c3:4c:e1:9a:5b:f5:1c:
                    e7:60:8b:03:7e:2f:cb:4d:7e:23:eb:f6:27:5d:cf:
                    2c:87:55:f8:ea:87:a1:9b:82:5e:13:14:33:57:e8:
                    5f:68:50:54:76:6f:8d:61:98:e7:24:15:3f:79:d8:
                    41:32:61:90:d1:2b:5f:cb:e6:c0:c3:8f:88:e5:c3:
                    e9:db:fb:d0:4b:7c:1c:b7:00:b8:04:41:bb:c2:fc:
                    38:47:3f:a3:4e:e3:91:a5:aa:1c:13:47:ea:0f:72:
                    c4:bb:7f:26:df:ef:f7:c7:f3:d8:17:ff:d2:d1:99:
                    3f:bb:28:12:22:0b:86:6a:92:53:92:42:ad:b4:98:
                    e3:a0:a2:c8:86:f3:2b:0a:51:70:35:28:b2:76:24:
                    8b:d5:9b:f7:f7:c4:ad:cc:06:be:e5:12:1c:97:d5:
                    e9:3a:83:98:23:d0:2f:ed:55:00:39:e0:b3:5a:66:
                    81:27:39:d7:f2:d3:3f:08:a7:7e:82:db:05:47:bc:
                    b0:f1:75:0c:8a:5e:79:59:48:5b:ac:01:08:7b:04:
                    06:d9:a5:dd:f9:3b:ae:a4:77:f5:52:3d:ba:8c:db:
                    a6:1c:d6:ac:19:ef:c4:f7:02:ad:da:9b:4d:91:c2:
                    43:7c:c9:7c:89:2b:35:c4:e4:fb:46:66:8e:f4:bf:
                    4c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9D:19:76:62:90:22:21:15:14:D8:2A:46:F1:AF:33:44:D2:E6:67:F3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/9D1976629022211514D82A46F1AF3344D2E667F3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.64.0/22
                IPv6:
                  2804:1ce0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61680

    Signature Algorithm: sha256WithRSAEncryption
         16:c7:f1:da:5c:eb:8f:fa:00:9a:70:3f:a9:21:2c:c2:fa:e9:
         6e:3b:ac:54:39:4b:03:2e:e4:65:b4:a7:f2:6b:16:2e:26:67:
         bd:0a:62:8c:68:d2:a9:87:89:9b:5e:c7:a9:c0:0a:06:fe:2f:
         47:06:40:46:45:2a:76:41:31:aa:9e:ec:ff:64:c6:a0:7d:eb:
         18:f6:fb:9e:17:a5:d6:6a:28:5e:a4:99:7d:0f:cb:a5:26:44:
         ae:59:6f:c6:f9:39:04:84:c9:15:a5:77:e9:97:4c:cf:4f:24:
         b7:93:48:7c:e4:a7:19:b7:2a:9d:1c:86:21:88:2a:87:a6:81:
         27:93:22:59:93:f8:72:a0:b6:e6:d1:51:bb:42:74:9c:27:13:
         79:e5:36:8e:6a:86:32:f4:05:5b:a8:dd:51:82:54:78:19:f0:
         b3:cc:92:45:35:7c:85:78:4c:fd:4a:35:10:5c:03:20:1f:85:
         79:5d:95:87:3d:51:24:79:f4:eb:7d:64:f8:bb:c3:de:40:70:
         31:98:8a:ae:88:0f:8a:8b:2a:2b:7e:62:1e:3e:d6:86:44:d4:
         e4:8f:3a:18:1a:28:ad:4f:22:7b:65:e6:bb:fa:2b:66:ad:14:
         da:fa:f4:0c:36:f6:ef:5c:72:2c:53:90:db:fc:7a:a3:52:31:
         cd:a4:03:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:45:51 2024 by rpki-client on console-fra.rpki-client.org