Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer
File:                     CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer (raw, json)
Hash identifier:          KMKjS/7HOUqZBQhhM5t5U5Al6DcaVLi7efsqAH70csY=
Subject key identifier:   CB:FE:93:76:9D:DB:FC:A7:04:F8:36:04:07:F5:5B:0D:8F:A8:6C:C7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       58A227814E977CFE75BC4963C38AF397F767C3AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 00:36:42 +0000
Certificate not after:    Thu 03 Apr 2025 00:41:42 +0000
Subordinate resources:    AS: 266410
                          IP: 170.80.80.0/22
                          IP: 2804:3768::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a2:27:81:4e:97:7c:fe:75:bc:49:63:c3:8a:f3:97:f7:67:c3:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 00:36:42 2024 GMT
            Not After : Apr  3 00:41:42 2025 GMT
        Subject: CN=CBFE93769DDBFCA704F8360407F55B0D8FA86CC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:82:15:e8:f7:ad:9f:71:2c:56:66:b7:f6:d8:
                    fe:9b:b8:8b:79:4f:5c:fc:1c:68:ac:c5:e5:8e:f5:
                    5a:6e:3b:2e:95:0d:e2:32:f3:c0:60:21:25:bb:a6:
                    25:82:5e:d3:bb:14:e3:7d:12:3d:dd:cd:71:06:17:
                    3d:09:41:3a:16:76:dc:89:65:98:fd:56:f8:09:73:
                    1e:8b:4f:e4:cb:ad:fc:12:fb:f4:e8:94:0b:af:3c:
                    b8:ee:f8:a5:26:a5:3e:c6:9b:95:86:95:7e:d5:20:
                    cc:17:79:43:2c:b9:94:f4:7b:ed:a1:1e:a8:c6:5e:
                    aa:ab:ca:d6:cb:12:2d:6d:72:94:d4:0a:1a:d3:fc:
                    05:f4:ae:1a:1d:07:e2:8f:f2:19:99:54:b9:fa:1c:
                    a4:f3:49:ab:b6:45:06:f6:1f:25:b2:6c:f5:44:d4:
                    0c:48:0e:a4:4d:61:61:2e:c9:c9:87:1b:4e:34:65:
                    93:45:ac:07:95:d5:4f:6b:98:06:85:61:55:b6:3a:
                    d7:71:99:24:6a:87:af:10:00:c6:f8:a6:6e:3c:92:
                    0e:0b:2f:f5:48:9e:a1:ec:e2:6b:76:b4:76:0b:f8:
                    40:9e:82:fe:75:f5:5c:8f:1b:52:5b:f9:f5:88:eb:
                    a3:5e:82:34:31:53:6d:d2:fa:c1:0b:a0:6b:fe:55:
                    3e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CB:FE:93:76:9D:DB:FC:A7:04:F8:36:04:07:F5:5B:0D:8F:A8:6C:C7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.80.0/22
                IPv6:
                  2804:3768::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266410

    Signature Algorithm: sha256WithRSAEncryption
         92:6e:e2:a0:ae:ea:b1:71:45:d8:70:42:44:19:0c:f5:d0:04:
         0f:5c:09:b4:42:d8:4b:a5:0c:7c:d0:01:3d:e4:25:4e:4d:b1:
         b3:3b:97:5d:22:be:2d:2c:9e:59:0d:64:a4:79:57:be:44:19:
         eb:f9:87:23:91:73:b0:42:07:ce:af:b4:6a:b6:b2:31:ba:de:
         d4:f3:03:38:c4:ab:f8:b4:d0:0e:17:ff:a1:2f:c3:f5:b0:1f:
         88:5f:98:26:a5:ac:33:43:c6:26:99:de:4f:4f:06:40:16:cf:
         d1:2f:42:06:9e:32:a3:56:13:a2:84:b7:49:bc:18:9d:04:66:
         3f:97:1a:23:00:55:40:b0:0f:d1:39:4b:08:7e:26:82:64:97:
         66:c9:35:45:86:0c:b5:fd:cb:c6:08:d6:fa:79:0a:56:ac:f1:
         9a:18:e0:21:83:1b:f5:90:4d:a5:bc:be:7f:3a:28:09:bb:d5:
         94:62:83:4e:43:4f:80:84:c6:1a:44:c4:1d:1d:2e:24:29:71:
         65:6a:57:5f:73:92:b1:3d:6a:ab:a1:c1:a5:e9:57:e6:d2:f3:
         b1:9a:1c:ea:38:7d:5f:cd:0a:bd:38:ab:4f:60:b3:5d:2d:cb:
         ae:32:00:d0:c3:35:70:47:3c:57:83:fe:b1:7d:77:88:41:2d:
         4c:f8:24:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:06:33 2024 by rpki-client on console-ams.rpki-client.org