Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CBED8B77145C146C6E2002637F70D52E41B65B78.cer
File:                     CBED8B77145C146C6E2002637F70D52E41B65B78.cer (raw, json)
Hash identifier:          Qf8ZNOfr4TVTe+BdJe6HqSSgrGCsRx26pjFlYWgF8zE=
Subject key identifier:   CB:ED:8B:77:14:5C:14:6C:6E:20:02:63:7F:70:D5:2E:41:B6:5B:78
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       58B2CEBA529859FBB96E38561C6CC2BD0774821A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/CBED8B77145C146C6E2002637F70D52E41B65B78.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 21:28:42 +0000
Certificate not after:    Wed 02 Apr 2025 21:33:42 +0000
Subordinate resources:    AS: 272626
                          IP: 2804:862c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b2:ce:ba:52:98:59:fb:b9:6e:38:56:1c:6c:c2:bd:07:74:82:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 21:28:42 2024 GMT
            Not After : Apr  2 21:33:42 2025 GMT
        Subject: CN=CBED8B77145C146C6E2002637F70D52E41B65B78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:62:e7:ab:6f:21:6e:07:66:14:22:6a:ec:f8:
                    c1:b5:64:02:a8:b5:58:b3:79:07:af:31:7d:bf:cd:
                    47:2b:6e:42:c1:8a:5e:f3:68:a3:28:e3:66:51:12:
                    54:c9:1b:64:a6:fd:45:7d:b7:44:c0:19:fa:45:24:
                    03:f0:08:1a:0b:cf:89:4b:e1:2c:41:e5:c4:6a:c9:
                    d3:7e:ce:92:26:5d:29:2d:aa:cb:2b:93:63:d0:b7:
                    8d:71:c4:69:87:f7:d7:a2:1c:fa:44:e2:5d:87:91:
                    9f:27:90:48:8d:d9:23:2f:51:43:cb:e7:0f:f5:03:
                    07:b6:32:4f:6d:1a:11:58:bf:31:4b:7c:6c:07:55:
                    da:d6:44:fd:1e:75:74:f0:81:a8:b0:66:92:2b:29:
                    96:cb:d4:37:92:af:64:8d:88:0a:51:89:a3:cc:be:
                    4c:f5:5b:36:2f:ab:f7:b2:c9:d5:45:c1:6b:c6:56:
                    c5:51:7b:65:50:17:79:94:44:d2:ee:31:3f:34:ab:
                    97:54:23:db:6c:8a:13:77:a7:8a:0f:f1:9a:41:97:
                    f8:31:34:17:e4:a0:40:69:8a:99:70:1d:2e:52:c3:
                    9e:90:38:51:8f:cd:8c:13:ca:82:c8:bb:2e:66:c7:
                    60:ce:47:ce:28:a5:d3:1c:bb:bb:2b:e3:7a:ab:59:
                    4a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CB:ED:8B:77:14:5C:14:6C:6E:20:02:63:7F:70:D5:2E:41:B6:5B:78
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/CBED8B77145C146C6E2002637F70D52E41B65B78.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:862c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272626

    Signature Algorithm: sha256WithRSAEncryption
         2b:2f:05:99:a0:6f:b5:d2:2f:8c:75:d5:8d:12:bb:95:6a:3a:
         c6:29:cc:c9:0c:ea:a9:41:89:c0:aa:9c:15:eb:87:35:3c:85:
         69:2f:e4:91:e7:eb:b9:32:34:37:99:c5:f3:c1:68:1c:ab:5f:
         1a:3a:91:c2:77:2a:36:0c:7c:1c:35:7d:78:9e:d0:c8:a9:46:
         1e:4e:94:9d:96:ff:b8:2a:c7:f8:0a:a4:0d:03:4d:5b:6f:09:
         47:74:2b:32:9b:6c:7e:5d:59:ca:6e:d1:75:cd:e5:28:c7:fb:
         9b:a1:60:40:42:79:7b:bd:68:20:1c:a3:bb:18:21:cb:f1:50:
         8e:20:34:b8:f7:00:88:d4:18:c7:66:92:93:9d:1a:59:fd:16:
         c0:49:06:b3:81:07:db:a1:f7:af:3f:d6:5d:90:22:63:e1:f3:
         14:84:f9:af:5f:3c:db:76:36:2a:54:83:c9:df:9a:1d:ea:1d:
         74:dc:8f:e3:56:b8:2c:53:73:a7:d4:cb:9c:6b:8c:a1:89:7d:
         71:9a:d5:01:f5:7c:44:e8:d0:d3:73:7d:bc:99:97:01:3b:20:
         e4:bf:10:7b:5c:de:a9:31:d6:1e:da:0f:aa:5e:3b:9b:bc:7d:
         b0:22:87:c8:4b:22:f5:ad:cc:10:37:5e:63:d0:5b:ae:9a:3b:
         0d:d2:75:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:06:33 2024 by rpki-client on console-ams.rpki-client.org