Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B7BC2675026F7F7542C7252D1D9F98C819A12C98.cer
File:                     B7BC2675026F7F7542C7252D1D9F98C819A12C98.cer (raw, json)
Hash identifier:          fvTrJfsoZIb/O+Qvc+Cvfsums0tTLlXRNJi4gufCKSc=
Subject key identifier:   B7:BC:26:75:02:6F:7F:75:42:C7:25:2D:1D:9F:98:C8:19:A1:2C:98
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       20144EC247EC290D7706FD97ADC6E8376C53EC91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/B7BC2675026F7F7542C7252D1D9F98C819A12C98.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 25 Oct 2024 04:26:35 +0000
Certificate not after:    Fri 24 Oct 2025 04:31:35 +0000
Subordinate resources:    AS: 272645
                          IP: 201.216.104.0/22
                          IP: 2804:8678::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:14:4e:c2:47:ec:29:0d:77:06:fd:97:ad:c6:e8:37:6c:53:ec:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 25 04:26:35 2024 GMT
            Not After : Oct 24 04:31:35 2025 GMT
        Subject: CN=B7BC2675026F7F7542C7252D1D9F98C819A12C98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:75:43:35:96:e9:d5:6d:e9:58:5d:95:6b:95:
                    fe:89:cc:3e:3f:63:83:e0:84:b0:10:f5:05:32:ab:
                    9a:32:70:66:aa:41:76:7c:26:95:7a:ed:d3:a2:14:
                    78:8c:49:7d:bd:a8:b1:4d:14:8f:e6:a2:76:3a:43:
                    d5:83:5e:2a:8c:fc:eb:e7:e8:0b:3e:a1:b2:08:c5:
                    ea:1e:4d:55:82:0c:be:40:d2:0a:74:2c:31:ab:76:
                    ea:6f:af:16:f0:e1:53:4c:3b:38:85:aa:83:16:6b:
                    3c:a6:b1:cb:d5:65:d9:f8:ee:a5:c9:39:ce:2b:29:
                    2e:f8:bc:b9:a0:3a:10:62:c5:04:b4:b6:15:fa:29:
                    12:57:98:db:0b:3f:07:5d:da:3e:c6:d4:e8:a2:b7:
                    7b:ae:4f:7e:56:d1:99:87:e6:f2:b1:82:5e:8d:8f:
                    43:ae:06:25:ed:5b:a3:f7:82:cc:1f:3b:6a:84:2a:
                    8b:19:5b:93:71:61:4c:ed:9a:de:d0:51:0d:e2:f8:
                    08:ba:9b:64:ed:55:75:b0:0e:92:bd:ec:4c:c6:4d:
                    f4:50:db:8e:1a:18:0b:b3:a9:19:48:7b:21:04:26:
                    64:07:58:25:69:26:39:d0:24:b7:f8:08:1c:58:1f:
                    32:9e:cb:05:5c:67:2c:3e:b0:f4:0b:5b:d6:2d:a0:
                    fc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:BC:26:75:02:6F:7F:75:42:C7:25:2D:1D:9F:98:C8:19:A1:2C:98
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/B7BC2675026F7F7542C7252D1D9F98C819A12C98.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.104.0/22
                IPv6:
                  2804:8678::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272645

    Signature Algorithm: sha256WithRSAEncryption
         b5:b7:71:0e:27:24:80:47:02:f4:77:43:7c:c4:01:73:dd:16:
         62:6d:bf:c5:91:ff:1c:d8:d4:42:0c:74:a8:ea:c0:ae:c4:cf:
         fc:04:c9:c9:aa:de:ce:b3:c4:2b:9a:0a:37:cb:28:3e:2a:d3:
         a4:3d:33:46:05:2f:f2:0c:7b:be:05:37:d9:ab:6a:da:c8:6d:
         bb:d3:a1:df:77:7d:e1:82:ae:b3:ad:72:77:cb:83:89:fd:15:
         88:d8:e3:33:5d:01:50:53:e0:5e:50:04:f4:d0:44:76:cf:f6:
         de:32:b5:16:48:d9:85:1b:cd:41:43:64:f4:13:6b:a0:05:d8:
         6b:60:a9:2f:00:40:a4:2f:ba:0f:ab:d2:ed:1d:a2:35:78:c8:
         73:94:81:ad:34:d3:8e:7e:09:29:d3:0d:9e:c0:06:59:2f:c9:
         3e:37:0e:0c:dd:f7:9d:37:1f:d5:fa:13:54:88:53:b3:16:43:
         4e:5e:7b:4d:f7:32:01:21:79:96:00:fe:ab:d4:2a:c1:d8:e8:
         2e:b0:43:6d:bd:3f:0f:ef:f5:1c:b1:77:36:0e:f1:cc:89:78:
         5c:59:7d:9b:49:8d:8f:83:62:4c:fd:57:3f:26:88:a9:8e:70:
         2d:8b:a0:5b:dd:b8:2f:d1:b8:63:47:18:2e:f7:ba:31:73:f7:
         4b:64:1f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:50 2024 by rpki-client on console-fra.rpki-client.org