Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D.cer
File:                     CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D.cer (raw, json)
Hash identifier:          cEkUbIrESzMHLlMgiiLe/4U3+FLhwj3Ry/IIHItPWuA=
Subject key identifier:   CC:60:DA:1E:F5:FA:BD:27:EA:2D:75:A5:AB:50:36:8E:C3:CC:5C:4D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       25E554D50FCBB0CF926269430E32917CA0E31CBD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8kjAN1kodZy7qUaSDkEFu9gGZPaDSk65P5VnrL91tmU3/1/CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8kjAN1kodZy7qUaSDkEFu9gGZPaDSk65P5VnrL91tmU3/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 02:22:48 +0000
Certificate not after:    Thu 03 Apr 2025 02:27:48 +0000
Subordinate resources:    AS: 263538
                          IP: 191.5.160.0/22
                          IP: 2804:1390::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e5:54:d5:0f:cb:b0:cf:92:62:69:43:0e:32:91:7c:a0:e3:1c:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 02:22:48 2024 GMT
            Not After : Apr  3 02:27:48 2025 GMT
        Subject: CN=CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e6:b5:bf:dc:75:40:9d:1f:bc:1f:21:3f:26:
                    cb:55:91:ba:2d:f7:51:70:e6:1f:75:bd:df:70:9c:
                    21:e0:27:82:86:85:51:05:f7:fc:51:cb:3c:57:e4:
                    a9:8f:89:57:37:79:bc:80:56:18:44:0e:97:43:ef:
                    c9:0b:29:d1:5e:10:23:c6:5b:8e:5d:7d:07:18:48:
                    5a:16:7f:9e:09:d5:d1:4e:1f:44:32:80:75:be:02:
                    e1:ab:d6:fa:41:c2:77:fc:77:b4:e1:41:cd:d0:47:
                    40:f2:bb:84:d6:86:23:9c:3f:3c:76:71:64:8b:d8:
                    48:01:e6:81:3b:ca:c3:fc:c3:b9:00:46:68:5d:de:
                    38:69:0d:a1:cf:e0:00:db:24:2b:c2:e9:77:9b:83:
                    22:1d:f2:6c:0a:34:49:eb:a1:22:f0:c2:43:ea:a2:
                    b0:99:40:98:93:79:2c:49:02:ea:67:4d:bd:55:ea:
                    69:fc:5d:2b:44:63:cc:83:ac:d9:4d:fa:14:64:7f:
                    10:97:5d:03:59:2f:35:4e:49:ee:2a:5e:fc:6e:1f:
                    43:bf:11:1e:34:1c:de:42:c0:50:8e:09:76:dc:ec:
                    26:fb:3d:5a:d1:48:ab:50:e8:38:a9:11:30:bd:21:
                    23:5d:f6:d0:fa:08:f5:9c:b9:3c:04:9f:05:d3:91:
                    83:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CC:60:DA:1E:F5:FA:BD:27:EA:2D:75:A5:AB:50:36:8E:C3:CC:5C:4D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8kjAN1kodZy7qUaSDkEFu9gGZPaDSk65P5VnrL91tmU3/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8kjAN1kodZy7qUaSDkEFu9gGZPaDSk65P5VnrL91tmU3/1/CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.160.0/22
                IPv6:
                  2804:1390::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263538

    Signature Algorithm: sha256WithRSAEncryption
         0a:0f:c7:07:6a:5b:3d:49:45:ff:01:b0:8d:95:96:c0:e7:dc:
         af:ed:d6:c1:18:a2:15:70:85:02:e9:af:f5:b9:7b:e1:2d:59:
         ea:28:72:0b:22:24:90:02:e7:b4:6c:9b:16:4f:5a:71:d0:97:
         65:99:b6:8e:9f:95:45:f6:cb:e4:61:80:90:76:fb:cb:aa:e7:
         6a:8c:7c:98:d3:2a:7a:8e:c9:98:6c:31:fe:b4:51:56:c0:ba:
         e2:35:df:a7:47:8e:25:0c:78:d8:9e:a5:42:02:13:dd:97:5b:
         af:43:50:1e:24:43:ca:7c:5e:fb:ec:eb:49:81:1a:4c:bf:7a:
         66:01:37:8e:29:74:7a:0f:1f:c6:a3:65:e7:88:26:72:e9:e5:
         68:aa:e8:c3:78:97:f0:67:87:d7:5c:21:66:12:34:e7:0d:f1:
         99:a1:35:a5:50:b1:45:c5:33:37:05:5b:8f:e4:cf:52:6c:cb:
         7a:15:9e:05:d0:8b:82:5c:fc:7b:6d:31:9d:04:5c:2e:79:a5:
         9f:f4:02:96:70:05:38:03:ed:c9:ce:bd:b6:04:42:29:e1:92:
         74:45:65:8c:73:db:3f:c6:c3:84:de:7d:d5:66:ae:60:4f:b1:
         5b:c6:b7:0a:c5:55:34:fa:5f:8f:bf:9f:79:08:ad:78:9c:47:
         2f:5b:fa:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:00 2024 by rpki-client on console-fra.rpki-client.org