Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.cer
File:                     CC81BC052F2451BAC16FA42254D1686E0F97BE7B.cer (raw, json)
Hash identifier:          YsrfcIE9jqWeuaSVMfEzkrpIp3tt6zVRRSsUqN1U9jk=
Subject key identifier:   CC:81:BC:05:2F:24:51:BA:C1:6F:A4:22:54:D1:68:6E:0F:97:BE:7B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1E53BAC79100F83ACA7661F806DC6F93CF0AB291
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Nov 2024 14:18:46 +0000
Certificate not after:    Fri 07 Nov 2025 14:23:46 +0000
Subordinate resources:    AS: 267027
                          IP: 45.227.168.0/22
                          IP: 2804:4708::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:53:ba:c7:91:00:f8:3a:ca:76:61:f8:06:dc:6f:93:cf:0a:b2:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  8 14:18:46 2024 GMT
            Not After : Nov  7 14:23:46 2025 GMT
        Subject: CN=CC81BC052F2451BAC16FA42254D1686E0F97BE7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3a:43:5e:28:17:19:09:ed:fc:bc:00:9a:c7:
                    7f:00:21:f1:e7:d7:97:e0:2e:fd:b3:ff:51:88:7c:
                    e6:0c:39:2a:33:ba:51:ef:72:ec:04:aa:e2:60:94:
                    29:06:7b:d9:7c:e3:39:df:d4:cc:f7:db:8a:05:5c:
                    b5:b1:e6:ad:6e:a8:fa:b0:f8:8b:70:d0:0a:24:2e:
                    8c:43:9a:35:83:a5:48:46:a1:05:ad:ac:f2:51:d3:
                    d3:b4:82:73:67:cd:e9:e5:19:07:8a:f4:b0:f7:e8:
                    6e:2f:41:cd:b4:35:c2:48:60:1d:f9:b8:2e:ce:d9:
                    19:98:45:4d:63:02:6c:dd:4d:f2:7b:0a:0f:14:78:
                    4e:4b:61:d0:ba:fd:a9:b9:14:65:87:16:a4:0f:b5:
                    22:c3:60:17:f9:96:ba:d6:14:18:af:c9:31:83:36:
                    02:46:63:65:f1:c7:fa:aa:79:9d:de:9e:2d:a7:36:
                    1c:ea:03:35:07:16:3e:cb:96:b1:97:7b:44:74:ef:
                    1c:d6:a5:c2:43:db:ee:39:5f:49:ec:36:4d:74:c1:
                    f3:dc:d6:95:0d:b7:5d:c0:90:63:2c:52:3a:77:ae:
                    24:b8:1f:b6:39:e4:26:8b:c9:ae:95:57:46:3f:c8:
                    2a:4a:97:0a:ac:f8:3b:55:f3:61:ab:20:0a:2b:31:
                    7c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CC:81:BC:05:2F:24:51:BA:C1:6F:A4:22:54:D1:68:6E:0F:97:BE:7B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.168.0/22
                IPv6:
                  2804:4708::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267027

    Signature Algorithm: sha256WithRSAEncryption
         66:b1:f3:36:b1:c4:03:5d:b4:6a:31:33:2f:af:c8:4a:1d:d1:
         98:04:ad:a2:6e:0f:f7:71:f4:cd:8d:88:18:cd:7f:5c:2e:48:
         8a:17:24:fa:1f:0c:f8:d2:7f:72:64:2e:a2:4b:3a:b0:29:13:
         66:dd:45:4c:59:05:b4:7c:b5:1b:77:60:aa:35:bc:70:51:77:
         05:7a:12:31:3c:7e:57:f7:5b:04:70:d5:02:3f:84:95:c3:53:
         4b:48:c8:9b:c4:e9:ab:91:70:30:a3:5b:fb:9f:5f:19:bd:21:
         58:05:f0:f2:85:12:95:64:b9:ae:d5:4a:a0:d6:3c:67:4c:60:
         c0:0f:ee:3d:cc:60:07:2e:d8:ca:ae:f2:4c:9c:ec:98:8a:07:
         dd:a7:9b:75:d4:9b:2b:af:c7:d6:38:00:cd:ba:4a:61:ec:1c:
         24:f0:66:e4:3b:bc:f0:4d:33:37:b5:cc:db:04:f6:df:8e:15:
         fc:f7:e0:91:e5:de:f7:c0:13:6d:40:28:b6:fa:35:04:06:30:
         b5:ff:cf:35:7f:c6:9c:5f:04:58:66:61:7c:da:ed:9f:47:44:
         fe:a2:f4:81:4f:e6:d0:7a:d7:a0:f0:2a:4f:5b:dd:5e:dc:ba:
         f2:c6:8d:3c:82:09:c2:72:b8:96:f1:9e:23:4e:25:3f:8b:e9:
         73:a0:13:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:45:29 2024 by rpki-client on console-ams.rpki-client.org