Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.cer
File:                     A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.cer (raw, json)
Hash identifier:          MFui9r7o1llknKIGEYoGsIXAAelpmvzR/1MOifMOl+0=
Subject key identifier:   A7:83:EB:24:30:AF:A2:B9:12:F0:F1:C0:7E:5A:0C:2E:44:CD:65:54
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       383517588126D5B74A53F66061CDBB0C2242E6A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Nov 2024 21:40:53 +0000
Certificate not after:    Thu 20 Nov 2025 21:45:53 +0000
Subordinate resources:    AS: 266020
                          IP: 170.245.236.0/22
                          IP: 2804:393c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:35:17:58:81:26:d5:b7:4a:53:f6:60:61:cd:bb:0c:22:42:e6:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 21 21:40:53 2024 GMT
            Not After : Nov 20 21:45:53 2025 GMT
        Subject: CN=A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c5:d0:8a:9f:cd:13:70:19:94:8f:f4:60:4a:
                    da:5d:28:71:23:fe:5e:f2:76:b8:28:67:29:c5:3f:
                    50:fd:15:c9:72:52:20:77:ed:18:2e:18:9b:44:8d:
                    8c:1d:0f:88:34:05:e9:9a:40:4a:e1:db:26:49:57:
                    68:b4:e6:31:41:4b:1b:34:7e:74:67:af:0e:3d:e6:
                    23:aa:1f:83:eb:42:2d:08:04:fc:04:73:d1:ce:4b:
                    6c:60:64:fb:90:7e:0b:46:f8:1e:93:07:2c:ed:83:
                    ac:40:f0:ce:56:2d:44:ff:d0:a2:ee:18:cf:4b:a0:
                    61:49:bd:bf:2d:b3:78:aa:46:e9:2a:17:5b:99:fa:
                    51:b0:cd:39:d8:a5:2b:51:50:57:f3:97:8e:7d:19:
                    16:f3:72:a0:10:65:1d:55:82:27:b8:0b:95:b9:64:
                    ac:f9:f7:07:a1:74:a1:30:bf:8f:c2:f3:fe:f0:21:
                    67:24:2a:64:c9:4a:66:f0:be:8b:b0:91:3f:a6:da:
                    d1:2a:52:2b:75:67:59:b9:20:89:0b:41:3f:c9:82:
                    89:80:33:88:d0:fc:85:75:39:ac:26:e6:2d:d5:a1:
                    ea:c5:53:b3:40:b0:56:75:c7:17:da:ff:18:00:32:
                    03:22:e1:46:23:79:20:28:96:ef:16:2a:b2:de:1f:
                    15:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A7:83:EB:24:30:AF:A2:B9:12:F0:F1:C0:7E:5A:0C:2E:44:CD:65:54
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.236.0/22
                IPv6:
                  2804:393c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266020

    Signature Algorithm: sha256WithRSAEncryption
         97:7a:ac:c8:53:12:49:5c:48:8b:6b:e5:ff:a1:9d:4f:aa:d9:
         c9:84:c2:40:70:88:ac:66:4d:20:9b:d2:83:0a:bf:f1:70:aa:
         e6:bb:71:59:88:a2:fa:2e:63:44:e2:d6:7a:30:d5:e2:32:ad:
         b3:af:44:fc:23:c6:46:4f:a4:ed:48:da:6d:1f:59:7f:ca:07:
         4a:cb:b0:99:63:a4:e7:4f:1d:97:c4:6c:3f:78:f0:ff:bb:b7:
         c9:8b:00:23:07:98:78:88:b3:15:d3:59:c9:9e:25:43:16:6c:
         d0:8e:6e:ef:e6:66:ca:3a:74:12:0a:d8:be:e6:76:67:e6:dc:
         ad:9d:40:0f:82:61:6a:b1:2b:63:97:2e:c6:48:94:7e:34:3b:
         78:3f:20:30:23:81:f9:69:1b:93:13:47:11:50:61:c7:7b:79:
         0d:74:ea:2f:6f:76:55:de:0f:b9:76:af:23:2f:c1:8a:e7:fe:
         e3:21:2a:31:70:01:ad:32:ac:94:df:2e:6f:36:f3:81:dc:4f:
         fc:7c:97:04:a7:93:82:6d:c4:97:c2:01:e5:b1:f5:72:93:89:
         2b:c3:70:e0:12:e9:00:78:02:e2:c9:d5:48:0c:8e:53:87:59:
         53:e1:f9:e9:2f:17:70:89:3e:a0:14:f4:08:fe:7f:7e:30:2d:
         4f:d4:f9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:02:26 2024 by rpki-client on console-ams.rpki-client.org