Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.cer
File:                     B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.cer (raw, json)
Hash identifier:          787CtUuK6fPNObywPTKpVeZSJp2QnmSKl2dHVYBibzU=
Subject key identifier:   B0:CA:65:D9:C1:CC:96:DA:8D:04:D5:27:F2:AA:10:BA:40:DF:DF:F8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1730E9ED978C56311E80A70BF202831C67FC5E2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 15 Jul 2024 19:04:52 +0000
Certificate not after:    Mon 14 Jul 2025 19:09:52 +0000
Subordinate resources:    AS: 268557
                          IP: 45.163.192.0/22
                          IP: 2804:5304::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:30:e9:ed:97:8c:56:31:1e:80:a7:0b:f2:02:83:1c:67:fc:5e:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 15 19:04:52 2024 GMT
            Not After : Jul 14 19:09:52 2025 GMT
        Subject: CN=B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:06:ef:66:d9:2a:60:8e:ce:8a:52:d2:c8:79:
                    a4:fe:0b:aa:52:2c:f5:20:40:20:a9:f4:df:a2:7f:
                    9b:c8:71:f0:0a:78:ef:d4:ae:72:90:db:ab:72:6c:
                    44:d0:5d:20:60:51:2f:1e:7b:6e:d9:aa:a1:ad:ed:
                    1e:9c:33:f1:9e:48:a9:28:b6:8b:b2:36:da:40:c0:
                    ba:36:63:53:59:81:4d:e5:50:ba:21:ae:d9:f8:95:
                    1b:0c:89:f7:8d:e7:d9:0e:85:44:de:d8:2d:6d:68:
                    d3:be:19:fd:82:4a:3f:94:f4:fe:05:84:55:f4:82:
                    52:9c:34:63:d5:2d:d8:0d:3f:0e:86:16:0c:32:c1:
                    04:60:f2:9d:0e:d2:2c:62:43:b7:86:cc:fc:a9:6d:
                    7c:85:08:54:c2:98:02:34:6e:38:82:56:bb:4b:b1:
                    07:4b:ae:aa:d8:e5:2f:e4:f5:77:53:6e:15:b0:8f:
                    7b:35:14:c3:aa:fe:e4:b7:25:a9:58:1a:72:e2:d1:
                    3c:69:4b:1e:72:af:d1:a5:ac:6f:45:05:47:47:31:
                    ae:37:6f:b0:ab:90:ff:13:f6:c6:11:e6:51:0a:98:
                    f5:68:96:81:fe:56:cd:6f:f9:30:cd:09:8a:a0:b9:
                    54:c1:f5:f8:51:b5:23:4f:7f:95:8b:37:37:b4:1a:
                    0a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B0:CA:65:D9:C1:CC:96:DA:8D:04:D5:27:F2:AA:10:BA:40:DF:DF:F8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.192.0/22
                IPv6:
                  2804:5304::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268557

    Signature Algorithm: sha256WithRSAEncryption
         6f:86:b9:78:90:ff:da:dc:ac:40:98:c5:22:9c:b0:e1:79:34:
         88:c9:3f:56:9c:52:06:50:e2:44:88:e8:cc:3e:70:55:aa:ff:
         ca:a0:0a:a9:0f:2f:50:24:f4:dd:1d:4e:06:b8:8a:ba:15:d6:
         09:50:4c:53:63:75:02:f4:d1:20:fa:f3:0b:cc:22:23:30:04:
         4f:4a:14:48:ba:9b:da:d4:fc:78:fd:09:7f:b5:c8:51:6d:92:
         ce:68:c4:97:bd:c6:44:aa:1c:2b:0f:ea:c1:d9:86:4d:f8:62:
         33:8a:7e:7c:cb:03:7d:a1:91:52:70:c3:ed:da:e0:4e:73:b6:
         eb:0b:c3:18:76:34:66:49:a4:94:ec:fb:12:3b:e9:d4:a6:46:
         fb:7e:fc:35:6e:ed:f1:cd:ae:51:83:c8:2b:ff:16:24:ff:0d:
         e0:a5:ea:de:3d:2e:f4:00:0a:da:a2:04:f9:5f:9f:ac:5f:b5:
         1e:43:bf:3f:42:be:d1:97:f2:50:41:81:9b:55:de:c4:5e:4b:
         74:0e:60:9e:9b:f6:75:0e:0e:ad:9b:18:e7:a6:c8:d5:9a:ab:
         8a:6c:0d:fd:07:5b:3f:a4:01:be:d2:18:ff:e4:ca:d7:70:c4:
         b9:c3:2b:3f:4e:6a:97:9e:23:95:ea:b5:5e:b5:f4:03:b3:a8:
         16:28:cf:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:48 2025 by rpki-client