Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.cer
File:                     B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.cer (raw, json)
Hash identifier:          bzbfHQsRRai1BtMfzdX/b+RdECPjY1sPUZOjyNvwQz4=
Subject key identifier:   B5:D1:33:C4:C7:CD:B2:87:64:5E:4A:A0:27:A4:9A:E2:3A:77:B8:F4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4679754EC211847B9824D8F71BA896A386573517
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 19 Apr 2024 22:24:40 +0000
Certificate not after:    Fri 18 Apr 2025 22:29:40 +0000
Subordinate resources:    AS: 61617
                          IP: 2804:8fa8::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 23:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:79:75:4e:c2:11:84:7b:98:24:d8:f7:1b:a8:96:a3:86:57:35:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 19 22:24:40 2024 GMT
            Not After : Apr 18 22:29:40 2025 GMT
        Subject: CN=B5D133C4C7CDB287645E4AA027A49AE23A77B8F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b6:72:e8:ff:8f:94:be:db:23:23:5e:80:3a:
                    21:3b:0b:69:d4:cb:c9:62:a4:e4:7d:e0:af:41:56:
                    be:93:6e:43:30:55:88:68:20:70:48:81:53:2d:ed:
                    26:dc:0f:dc:8a:36:09:73:ac:d3:e1:14:3f:83:84:
                    e7:f9:90:7f:5b:dd:78:95:21:d1:c8:7f:80:0e:a9:
                    a8:be:8b:4f:31:af:25:3e:6c:ed:88:4b:6b:33:3f:
                    ee:a1:3d:46:0c:5f:18:d5:e4:44:d3:c6:10:0b:fb:
                    fb:9c:0d:54:ec:b1:d4:a3:f8:a8:13:68:bc:0a:ef:
                    8d:d1:89:89:0f:6a:63:a0:46:1b:b0:7e:f2:f7:25:
                    94:cd:be:a9:26:66:d5:16:19:32:47:f1:de:71:ab:
                    7a:0e:04:bc:cb:77:8a:89:45:82:b9:fc:08:9b:fc:
                    cc:9d:3e:60:f7:59:41:1b:1e:40:90:b9:8d:2f:10:
                    d8:be:97:6a:b9:01:36:0f:99:9c:01:4a:da:c7:ca:
                    f2:f8:33:76:2e:fe:18:ab:ff:1b:ba:6f:e9:9f:32:
                    f4:11:55:3f:ec:0e:d2:a0:f3:ea:eb:60:fe:1c:52:
                    3f:e5:35:23:51:2f:d8:48:5c:d7:50:f2:f3:8a:17:
                    64:9a:ee:f1:da:7e:b6:8e:b3:54:20:22:93:a0:61:
                    24:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B5:D1:33:C4:C7:CD:B2:87:64:5E:4A:A0:27:A4:9A:E2:3A:77:B8:F4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8fa8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61617

    Signature Algorithm: sha256WithRSAEncryption
         c1:ef:cc:d0:81:6e:e6:49:60:50:27:f0:22:42:5f:0b:09:a3:
         8a:41:e1:f8:a4:96:9d:73:8e:f1:db:2c:bc:91:cc:e1:0f:aa:
         77:3d:17:b6:a1:36:99:49:a2:03:8d:51:49:c5:45:a1:fd:f7:
         ec:98:cc:f9:91:fe:d0:0b:94:03:d4:39:a8:4f:50:e8:29:42:
         55:c0:94:ba:0d:d0:a2:6f:18:7f:43:68:7f:c3:ca:8d:ad:d1:
         8a:fe:6d:de:98:e4:8b:29:17:fd:8c:8f:6e:b5:14:a5:14:61:
         70:94:ce:24:26:67:e6:cb:21:8d:96:c7:f6:67:71:0c:a2:45:
         9c:d1:9e:e9:6f:b5:05:fc:c3:4e:f1:c1:04:01:e0:46:94:e0:
         bf:7f:bd:67:2c:99:11:e3:a6:48:4d:38:fc:93:57:01:7e:d6:
         03:73:61:06:7f:a9:d8:80:d6:3f:3d:34:96:53:46:44:1a:5a:
         77:2a:81:4d:19:76:6c:72:57:ef:82:5e:a1:fe:44:fa:31:09:
         8a:b9:db:5e:cd:b7:56:c7:69:18:88:a6:bd:20:7a:58:7a:5e:
         aa:e9:76:60:a6:dc:3e:66:9d:00:7d:53:db:74:a3:af:15:bf:
         36:9f:73:54:85:02:2b:0b:1e:4a:be:e1:4d:af:68:eb:12:95:
         d7:18:03:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:43:34 2024 by rpki-client on console-fra.rpki-client.org