Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer
File:                     BFB590FA7A04C15A07E802593C4472D77FAB7820.cer (raw, json)
Hash identifier:          6rmpKPMG2wUMQl3qnGBPq5l46EjOnMc7ntyqP8UMjl4=
Subject key identifier:   BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6DC213CD883AA2C2E66AC2FD66838375D8D0E7ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.mft
caRepository:             rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 25 Dec 2024 09:53:13 +0000
Certificate not after:    Wed 24 Dec 2025 09:58:13 +0000
Subordinate resources:    AS: 268878
                          IP: 45.174.16.0/22
                          IP: 2804:5bf0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 22:48:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:c2:13:cd:88:3a:a2:c2:e6:6a:c2:fd:66:83:83:75:d8:d0:e7:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 25 09:53:13 2024 GMT
            Not After : Dec 24 09:58:13 2025 GMT
        Subject: CN=BFB590FA7A04C15A07E802593C4472D77FAB7820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ad:6f:7e:06:ef:8d:7d:7a:d8:24:1f:c3:02:
                    00:e7:1c:f6:c1:9b:8f:10:ca:0a:18:84:f8:20:87:
                    96:db:82:91:4b:a1:75:1a:1a:39:33:6f:aa:8a:ee:
                    d9:8f:63:c1:ff:fc:5e:9c:be:50:e4:f0:87:87:bb:
                    68:09:dd:86:42:9c:f0:68:d5:7b:79:11:57:a2:6f:
                    39:37:38:f1:8f:83:36:fd:e1:36:39:c3:3c:e5:29:
                    53:32:5a:ef:51:3f:37:54:7c:bc:42:40:1b:ee:b1:
                    bb:58:74:fa:36:58:3e:ed:09:97:16:f0:91:66:08:
                    29:06:2f:1d:6f:dd:20:bf:a0:0e:a3:b5:88:c5:59:
                    13:b6:14:63:e1:54:40:c6:ab:5d:76:44:6c:91:a8:
                    e1:f3:83:3e:47:22:ff:11:a4:59:ab:6d:d8:89:0e:
                    1e:c7:84:41:bb:80:cb:a8:c4:71:8d:97:44:4b:fe:
                    8e:16:f0:da:0c:14:10:8c:ee:80:97:6e:e7:c5:18:
                    f9:7f:98:29:5e:b8:ff:4e:0b:60:79:54:c7:04:2f:
                    db:c2:80:cc:dc:ea:f9:81:8b:12:5c:ac:55:eb:7e:
                    07:24:b7:24:00:25:5e:dc:bc:bb:f9:a7:07:85:0e:
                    7a:00:d1:29:80:d2:5d:04:21:34:16:5b:d1:bf:b7:
                    2c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.16.0/22
                IPv6:
                  2804:5bf0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268878

    Signature Algorithm: sha256WithRSAEncryption
         7d:15:d1:07:a6:4e:10:93:ae:ba:9b:a7:b3:af:a3:4d:25:96:
         7c:9a:df:52:01:f4:fe:00:77:69:1b:fc:78:37:9e:ed:4f:2f:
         8c:47:ab:04:4b:4b:d1:77:f0:f9:01:88:7d:91:23:f5:5f:30:
         8b:09:40:82:66:c1:55:4b:88:f7:95:0a:04:36:f3:61:ea:11:
         20:a5:75:b2:9c:16:e2:47:7d:6f:fb:89:c2:ca:63:70:43:2d:
         e7:eb:b4:1d:07:1f:a1:cb:ce:23:fe:bd:62:7b:ec:2d:a1:8b:
         ed:7b:4a:94:a7:a6:77:db:76:3c:2c:d9:f9:59:a2:16:65:1e:
         ce:ee:cd:f4:33:fb:4d:bf:36:42:9c:2e:0c:42:57:76:ff:da:
         e2:40:9c:a2:5f:9b:6f:ab:0f:c3:91:94:30:40:5a:2d:35:38:
         6f:33:11:4b:4f:61:52:b8:96:6b:92:29:6b:2f:78:15:74:f8:
         75:64:46:a5:07:5e:f9:c7:0e:94:36:c0:96:37:6e:96:5a:a9:
         d6:05:73:00:af:4c:16:88:ba:d6:fb:b2:cd:e6:4e:6e:55:88:
         13:69:bc:3d:a2:27:bc:af:04:b3:b8:fb:18:2c:8a:b9:66:e5:
         0a:3b:09:f9:4b:c6:09:5a:98:48:52:36:8f:15:88:a0:ab:cc:
         a6:1d:de:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:56 2025 by rpki-client