Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A64D92728F9E62F16E233EB8AE3F0B776551119E.cer
File:                     A64D92728F9E62F16E233EB8AE3F0B776551119E.cer (raw, json)
Hash identifier:          E1PVExEh4sU5EAyvRdaXaJkkdNLL0WKafOaXzDjkHNA=
Subject key identifier:   A6:4D:92:72:8F:9E:62:F1:6E:23:3E:B8:AE:3F:0B:77:65:51:11:9E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       695A054EE517EDD6B1C6DD92D1703FBA0BA1B968
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4t5VbjAc5GmpEcjbpgvdyXevm2Ai5nbh6F8YSPWSTtSe/0/A64D92728F9E62F16E233EB8AE3F0B776551119E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4t5VbjAc5GmpEcjbpgvdyXevm2Ai5nbh6F8YSPWSTtSe/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 27 Jun 2024 01:16:48 +0000
Certificate not after:    Thu 26 Jun 2025 01:21:48 +0000
Subordinate resources:    AS: 268900
                          IP: 45.175.104.0/22
                          IP: 2804:5c4c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:5a:05:4e:e5:17:ed:d6:b1:c6:dd:92:d1:70:3f:ba:0b:a1:b9:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 27 01:16:48 2024 GMT
            Not After : Jun 26 01:21:48 2025 GMT
        Subject: CN=A64D92728F9E62F16E233EB8AE3F0B776551119E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c2:09:54:cf:9d:7a:4f:6d:d2:a6:45:17:7d:
                    fc:03:1e:2c:b8:2d:01:b0:28:e9:b1:3a:04:f9:38:
                    84:66:f8:15:ef:c6:24:bb:00:db:94:74:67:50:b5:
                    42:f8:79:50:79:64:56:e8:2c:bc:81:03:af:4e:2c:
                    5e:2e:42:9f:9d:9e:98:82:19:90:ff:93:a8:11:f5:
                    1d:f6:b7:72:6f:71:08:6a:bb:6d:7f:12:50:0f:4c:
                    41:c4:77:bf:4c:1c:da:5d:88:ef:d4:24:fb:71:8a:
                    0e:29:be:ae:d2:67:d2:0b:17:02:77:d1:c2:85:76:
                    ee:3e:12:9d:89:44:72:fe:a7:94:e5:d6:fc:9e:83:
                    5b:24:81:3f:b6:a2:4c:9f:3d:ad:a4:e1:a5:b0:26:
                    e4:98:4b:de:3e:af:ea:0e:65:f0:5f:ed:36:7c:96:
                    7b:b9:5c:7a:b1:2c:15:3e:af:67:b7:18:05:ea:74:
                    29:a8:29:97:0e:a2:0a:d3:a6:76:fb:28:8f:95:9c:
                    be:e3:c0:8f:b0:02:b6:e4:08:e0:68:12:9c:12:d9:
                    44:46:95:e5:3c:65:43:bc:ad:46:a0:79:32:b0:69:
                    05:f5:11:b8:24:4e:e2:88:a2:9d:a4:e4:cb:f9:59:
                    26:0d:71:81:cc:71:2b:00:f1:88:bc:36:77:bd:7b:
                    d0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A6:4D:92:72:8F:9E:62:F1:6E:23:3E:B8:AE:3F:0B:77:65:51:11:9E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4t5VbjAc5GmpEcjbpgvdyXevm2Ai5nbh6F8YSPWSTtSe/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4t5VbjAc5GmpEcjbpgvdyXevm2Ai5nbh6F8YSPWSTtSe/0/A64D92728F9E62F16E233EB8AE3F0B776551119E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.104.0/22
                IPv6:
                  2804:5c4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268900

    Signature Algorithm: sha256WithRSAEncryption
         44:aa:b3:1c:0d:c7:d0:ce:8f:03:f4:75:12:7e:14:e3:00:06:
         42:aa:0b:63:15:08:3f:fe:0c:e1:77:0a:67:8a:a0:1d:a3:8f:
         58:0a:b6:73:da:72:90:64:7a:66:32:90:4f:d6:85:51:e7:52:
         eb:ba:4c:91:ed:df:cc:4f:8b:c4:2b:87:91:84:ce:94:04:0a:
         7e:0e:6d:b8:ad:c7:a7:e4:39:d8:fc:5b:a2:c4:5b:31:38:37:
         39:f4:10:bd:0e:01:e1:30:c1:46:a9:c7:16:40:e8:1e:01:e5:
         83:10:1d:f4:eb:68:18:ef:5e:de:5e:41:5c:d0:17:a2:f3:a5:
         98:74:2d:b2:d9:81:4c:0c:b2:05:2e:67:46:04:15:66:12:85:
         a9:a4:f1:bd:55:fc:18:3a:70:e0:21:b6:ef:f2:28:e0:ed:1d:
         93:1d:bb:89:8b:1a:e8:a2:57:c4:cf:c5:03:05:3b:46:79:ed:
         3b:5b:8d:e1:92:ba:f6:d9:e6:7a:f9:9c:bf:41:07:88:e2:9b:
         83:d7:d3:2b:2f:37:55:b3:7b:00:5c:a6:ea:bd:c5:17:c8:f5:
         06:ec:b3:88:5e:77:a1:ca:8e:3d:14:cc:02:f7:e9:36:af:76:
         cd:21:52:6e:9e:ee:d8:30:e6:87:aa:be:c8:77:d0:3d:ce:5d:
         93:56:47:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:44 2025 by rpki-client