Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A1993066E677A42B98C3789A27BFCEA7A489E2FB.cer
File:                     A1993066E677A42B98C3789A27BFCEA7A489E2FB.cer (raw, json)
Hash identifier:          Bxq1N8N3uMae81BQhK9nS0UM7HrKbetPSQZ5n7zog9E=
Subject key identifier:   A1:99:30:66:E6:77:A4:2B:98:C3:78:9A:27:BF:CE:A7:A4:89:E2:FB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1687F06C488D999EFF474D7B2FCCF95D76D0292A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/A1993066E677A42B98C3789A27BFCEA7A489E2FB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 20 Sep 2024 19:51:05 +0000
Certificate not after:    Fri 19 Sep 2025 19:56:05 +0000
Subordinate resources:    AS: 262494
                          IP: 45.179.112.0/22
                          IP: 45.226.88.0/22
                          IP: 138.185.188.0/22
                          IP: 168.205.240.0/22
                          IP: 170.82.124.0/22
                          IP: 177.66.112.0/21
                          IP: 177.124.168.0/22
                          IP: 177.129.60.0/22
                          IP: 179.125.124.0/22
                          IP: 179.191.56.0/21
                          IP: 2804:ad8::/32
                          IP: 2804:1510::/32
                          IP: 2804:4678::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:87:f0:6c:48:8d:99:9e:ff:47:4d:7b:2f:cc:f9:5d:76:d0:29:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 20 19:51:05 2024 GMT
            Not After : Sep 19 19:56:05 2025 GMT
        Subject: CN=A1993066E677A42B98C3789A27BFCEA7A489E2FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6f:77:69:06:4b:01:69:da:44:85:f9:31:e0:
                    0f:89:a7:23:91:78:b0:dd:59:07:33:d1:c1:b4:a3:
                    9e:fd:e3:42:f9:1a:f4:ad:08:b8:b0:f0:8d:0f:70:
                    70:6b:4e:27:40:2c:08:ec:cb:bb:d7:ae:35:6e:01:
                    3b:6b:51:47:ee:2f:d7:4a:80:2a:41:e7:c6:ea:58:
                    c5:f9:37:62:9f:54:a2:fb:b4:96:43:10:06:16:7d:
                    94:05:7f:3e:bc:d7:89:16:83:ea:a9:bd:d0:f8:88:
                    f4:01:a7:19:46:81:59:50:50:05:59:de:ac:4b:e0:
                    27:af:e3:00:c3:e0:92:15:9a:e1:51:bb:90:83:0f:
                    41:4e:83:6b:d0:ba:01:92:76:e1:75:b4:83:99:eb:
                    b3:f6:2b:e6:73:e5:c8:41:ab:98:b6:a5:e8:2a:92:
                    9e:58:d4:78:ef:87:72:0b:90:fa:08:f5:06:17:76:
                    66:d1:7a:cf:21:02:fd:5d:47:1f:8a:cf:ea:31:8f:
                    e4:fc:8c:a3:91:ba:c7:6a:95:01:2c:da:4e:05:9b:
                    e9:2b:e6:3b:14:83:5d:82:6c:23:ca:00:95:58:30:
                    be:b1:03:6c:65:27:92:73:73:15:46:63:95:bb:07:
                    65:0b:fa:1e:c8:79:5e:db:9d:ad:7a:14:2d:bf:6b:
                    dc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A1:99:30:66:E6:77:A4:2B:98:C3:78:9A:27:BF:CE:A7:A4:89:E2:FB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/A1993066E677A42B98C3789A27BFCEA7A489E2FB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.112.0/22
                  45.226.88.0/22
                  138.185.188.0/22
                  168.205.240.0/22
                  170.82.124.0/22
                  177.66.112.0/21
                  177.124.168.0/22
                  177.129.60.0/22
                  179.125.124.0/22
                  179.191.56.0/21
                IPv6:
                  2804:ad8::/32
                  2804:1510::/32
                  2804:4678::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262494

    Signature Algorithm: sha256WithRSAEncryption
         33:12:1a:30:d8:5b:64:c7:0c:6b:78:35:cf:00:a5:1a:00:57:
         3e:c8:37:74:c6:db:2b:93:47:84:a2:64:67:83:a7:eb:69:e5:
         69:66:0d:0f:01:86:85:de:07:ec:83:07:c7:e4:d2:45:aa:c3:
         94:80:fb:8a:07:84:9d:87:76:83:67:b1:e1:41:c9:4c:1d:45:
         d0:a9:4b:de:a0:c5:5f:3c:6f:7b:ef:49:44:df:c4:25:b1:b5:
         7d:39:f5:9c:d9:27:59:9d:2b:50:2e:aa:ab:5e:fb:c9:6b:91:
         80:a5:3e:2a:43:98:d5:94:d8:7a:9f:10:2b:1a:6b:b5:7d:a0:
         50:fe:70:55:6d:d6:c3:33:b0:34:c4:0b:d5:19:e8:6b:7b:74:
         70:ac:af:95:3b:30:62:e5:c2:a1:92:91:bc:b0:cb:42:d3:a9:
         ab:75:10:03:6e:16:54:21:55:b4:7d:20:53:ba:71:45:01:13:
         01:44:5a:33:a2:fb:04:61:df:0b:c8:54:7f:cd:a3:2b:85:e2:
         b1:12:53:24:d9:f2:39:52:ef:b8:8f:50:26:14:f8:32:25:5c:
         0d:05:5a:74:3c:67:89:04:bb:6e:7e:d0:28:ea:c8:b6:ce:cd:
         ff:a0:fe:72:47:ff:8d:2b:21:80:b9:26:a8:b5:c6:c1:3c:0e:
         94:94:b2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:44:16 2024 by rpki-client on console-ams.rpki-client.org