Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BD80A2507C562EC45831A181044BC8397234C88C.cer
File:                     BD80A2507C562EC45831A181044BC8397234C88C.cer (raw, json)
Hash identifier:          P14w+VeYVTNKk1OPZCmpdBIq82+wrJNryckqjKiRqv4=
Subject key identifier:   BD:80:A2:50:7C:56:2E:C4:58:31:A1:81:04:4B:C8:39:72:34:C8:8C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2A1A09C6A8FC4BC8D4D08D1603C9ABA39B7CF100
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/BD80A2507C562EC45831A181044BC8397234C88C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 10 Sep 2024 17:19:07 +0000
Certificate not after:    Tue 09 Sep 2025 17:24:07 +0000
Subordinate resources:    AS: 267982
                          IP: 45.167.28.0/22
                          IP: 2804:5630::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 00:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:1a:09:c6:a8:fc:4b:c8:d4:d0:8d:16:03:c9:ab:a3:9b:7c:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 10 17:19:07 2024 GMT
            Not After : Sep  9 17:24:07 2025 GMT
        Subject: CN=BD80A2507C562EC45831A181044BC8397234C88C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ee:39:b7:3f:d8:39:c1:f0:74:00:ed:b3:84:
                    ea:1d:6c:95:e7:1b:ae:ff:ea:30:7d:47:f2:38:e1:
                    f5:85:53:8d:3d:3d:9b:86:4a:cb:8d:19:60:ca:dc:
                    09:36:68:8e:6c:f3:e7:bc:6e:e9:c8:e2:62:56:7c:
                    7c:74:2c:1d:aa:09:0d:53:54:37:7b:ce:22:f9:73:
                    c3:cd:61:e7:b4:e8:d0:50:3f:31:95:55:16:2e:c1:
                    38:dc:9e:28:35:6a:d6:86:6a:41:5b:25:e5:f9:91:
                    4a:14:a1:b7:e8:72:c1:d0:fc:de:0e:87:9e:05:ae:
                    b6:06:31:69:b7:37:a5:1d:b5:2a:9d:8e:86:b5:56:
                    49:52:7c:8b:25:0b:7f:ab:ed:f5:86:f4:a3:30:f1:
                    77:99:b1:f4:7f:0a:1a:dc:1b:d5:20:c5:18:1a:10:
                    b5:38:9a:75:d1:29:f5:1e:90:f6:19:26:ee:28:c4:
                    3f:b8:66:1c:63:9e:ba:7c:b4:0b:f9:63:b5:02:41:
                    87:2c:01:14:46:7e:19:25:6a:db:20:9c:69:a9:6f:
                    6a:41:8b:21:a5:85:b1:f0:30:26:38:00:bd:a7:a5:
                    98:41:fd:88:0a:b3:e8:53:05:1d:d8:0e:eb:21:9d:
                    a8:66:b1:b4:47:b4:13:7d:bc:dc:b7:e7:c8:5b:83:
                    e3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BD:80:A2:50:7C:56:2E:C4:58:31:A1:81:04:4B:C8:39:72:34:C8:8C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/BD80A2507C562EC45831A181044BC8397234C88C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.28.0/22
                IPv6:
                  2804:5630::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267982

    Signature Algorithm: sha256WithRSAEncryption
         08:24:78:82:42:dc:5b:40:ab:b9:62:f1:a6:33:4d:3f:06:de:
         f5:ad:c7:67:5e:5b:dc:c9:e0:e8:2d:e5:19:fe:a2:3e:c7:59:
         9d:56:28:13:4d:e3:e0:69:de:29:59:88:14:10:d0:3b:b6:ec:
         6c:5a:0f:73:24:a9:21:0e:d3:c9:a9:86:fd:9c:1e:f7:b7:1e:
         ce:a6:48:cd:65:b5:70:bd:cb:c6:93:b2:11:34:fa:e6:a0:73:
         3c:f5:09:5e:f1:97:c5:ee:48:7a:c7:12:3b:60:8f:4b:66:ee:
         59:14:b1:6e:78:51:a3:98:12:2d:e0:4e:ef:a4:73:b9:62:37:
         e7:c9:84:17:a8:f1:b1:e8:25:0b:6a:47:5c:07:28:f8:34:c0:
         28:3a:1e:4d:f6:83:e3:b7:f3:05:a0:94:8b:6d:e8:36:43:d2:
         23:ba:1d:d0:7f:8b:7f:4a:fd:68:d7:fd:b5:db:53:75:92:15:
         7a:23:8e:95:3c:cf:dc:07:29:9c:32:2e:c1:9f:0f:94:b4:12:
         f4:ab:fc:ae:3a:f1:19:01:69:3d:b1:9f:17:84:26:7b:28:0a:
         ee:01:3e:b6:b1:65:97:21:fa:f4:e7:cd:41:02:9c:56:2b:4a:
         b4:dd:22:d1:d4:b1:2f:c3:52:b9:7d:38:f2:2a:d3:fa:f6:a3:
         f0:d3:e9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:16:57 2024 by rpki-client on console-fra.rpki-client.org