Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
File:                     B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer (raw, json)
Hash identifier:          45fpB7sVSIgkGpWFaAs3lt9PJKUWwBgZ5aO7aUASaeo=
Subject key identifier:   B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       28F3940087820E0DCC367B9E54B3ACB85E60596B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:26:16 +0000
Certificate not after:    Wed 02 Apr 2025 18:31:16 +0000
Subordinate resources:    AS: 28338
                          IP: 177.87.24.0/22
                          IP: 189.45.0.0/20
                          IP: 189.84.224.0/20
                          IP: 2804:74::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f3:94:00:87:82:0e:0d:cc:36:7b:9e:54:b3:ac:b8:5e:60:59:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:26:16 2024 GMT
            Not After : Apr  2 18:31:16 2025 GMT
        Subject: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b7:f3:e2:18:25:76:3e:d1:47:41:3b:2c:76:
                    a5:86:32:00:65:66:5b:28:ba:97:eb:ca:9e:28:01:
                    04:66:46:01:c8:9d:51:b7:ae:b2:1e:45:46:76:8a:
                    96:7e:d4:f7:82:60:1a:f5:26:37:4b:1c:69:c1:e7:
                    93:33:21:59:2d:2f:28:4f:b2:60:09:a1:8d:df:14:
                    69:84:f6:41:ea:cd:42:11:01:05:d7:73:db:03:d5:
                    49:8e:b0:43:71:d3:39:82:1f:d1:ae:41:1c:3d:36:
                    f4:0b:dd:fd:dd:80:2f:20:3d:25:f7:73:21:17:fe:
                    4a:4e:96:70:a2:fe:02:79:7e:9d:78:d1:15:b6:d0:
                    d5:31:a3:fb:50:9a:0c:d0:3b:c4:78:9e:bb:d4:ce:
                    e8:63:f1:22:88:f8:aa:a6:55:68:10:88:a0:2d:bb:
                    06:a9:b5:84:eb:c7:44:b0:56:43:4d:df:cf:22:27:
                    fd:7c:8b:f7:3f:54:0a:e0:75:a5:d0:fc:c3:ae:04:
                    dc:31:cf:a3:dd:c7:8c:97:20:27:da:3a:6a:b1:22:
                    80:a3:d6:b1:cf:f0:9a:b3:10:e5:a0:b2:68:19:f1:
                    59:f1:09:ed:1d:f6:f3:1c:3f:79:11:bd:45:de:9b:
                    83:f8:2c:b8:5d:e8:cf:f9:f5:bb:c9:3c:f4:77:81:
                    fb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.24.0/22
                  189.45.0.0/20
                  189.84.224.0/20
                IPv6:
                  2804:74::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28338

    Signature Algorithm: sha256WithRSAEncryption
         76:b2:81:6c:8b:1d:ef:38:0e:25:30:0d:01:2b:04:c9:23:c0:
         5e:48:51:de:f6:db:d9:bf:5d:97:02:f3:6f:ad:40:c9:9f:f4:
         8f:8e:18:f4:98:c7:79:a7:c5:ec:7e:9d:62:53:8c:93:88:1d:
         9a:d7:b5:d8:ce:64:bc:51:7f:da:16:51:17:4c:33:de:07:be:
         4a:e5:cc:a1:b5:d1:ee:2d:2f:7a:1e:ab:a4:d2:6b:b3:a4:1c:
         34:9d:0c:ed:d5:66:f6:07:60:a6:35:3c:28:b6:17:2c:74:2d:
         12:a2:9b:41:86:1a:5f:54:eb:e8:9c:47:8a:2b:6a:93:eb:f4:
         2c:e8:7f:17:42:3a:a6:8c:90:18:84:d2:51:78:54:80:68:2c:
         24:65:6d:7d:cc:ca:9e:de:1d:3b:58:ac:d9:c7:6a:9e:fa:df:
         b7:35:77:a8:c4:ca:e2:55:12:ce:13:ca:f2:57:74:a1:2e:cf:
         a1:35:06:4c:63:a0:ed:2e:4a:0e:36:eb:7d:55:ee:42:73:25:
         d4:00:35:f0:1e:65:4e:9b:24:bc:a6:33:75:6c:42:7e:1d:2a:
         07:a4:5f:9f:97:f8:61:fe:f9:e7:b4:2d:08:78:b2:ae:fd:93:
         ba:75:36:df:25:7d:a0:57:b7:f4:6c:ad:e5:60:52:13:82:45:
         b2:cd:7b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:49:31 2024 by rpki-client on console-fra.rpki-client.org