Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CFFCFA3F50E2451E3014BE753713F1FC07678378.cer
File:                     CFFCFA3F50E2451E3014BE753713F1FC07678378.cer (raw, json)
Hash identifier:          /9EeKzniAZAS+liXPpdpGPD5KD5wMdA35x8o9P95yro=
Subject key identifier:   CF:FC:FA:3F:50:E2:45:1E:30:14:BE:75:37:13:F1:FC:07:67:83:78
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       738AC060452B817A9B783880C3CD60B17802414B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BppQecXz9U4o5RaDfLzuHttNBboGd3xrP3gRj8NTwX55/0/CFFCFA3F50E2451E3014BE753713F1FC07678378.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BppQecXz9U4o5RaDfLzuHttNBboGd3xrP3gRj8NTwX55/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 Apr 2024 17:08:54 +0000
Certificate not after:    Tue 22 Apr 2025 17:13:54 +0000
Subordinate resources:    AS: 263393
                          IP: 177.222.200.0/21
                          IP: 2804:1588::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 00:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:8a:c0:60:45:2b:81:7a:9b:78:38:80:c3:cd:60:b1:78:02:41:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 23 17:08:54 2024 GMT
            Not After : Apr 22 17:13:54 2025 GMT
        Subject: CN=CFFCFA3F50E2451E3014BE753713F1FC07678378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:90:4e:88:df:7a:ca:89:97:41:12:74:a8:c8:
                    0d:99:51:7d:d1:31:cc:a6:ce:f8:8d:a4:ba:d5:e7:
                    58:7a:a9:da:98:1a:7a:6c:fb:95:ac:76:f0:1c:b1:
                    98:a8:c3:49:3d:47:7a:0c:f0:8d:b2:e7:23:c3:5b:
                    2c:ba:73:3e:97:ff:f3:3c:b7:53:73:2d:49:2f:7a:
                    9e:12:94:6e:2b:5a:c2:0b:f1:1d:61:78:6e:e1:3d:
                    d6:80:a4:46:67:6a:17:c7:8b:2e:07:1e:1e:63:5c:
                    a7:77:fb:7a:08:3d:9d:75:44:7d:e1:3f:c2:a9:7a:
                    ec:c7:41:a4:6b:05:31:d5:2e:79:b1:1e:2e:d3:5a:
                    09:08:41:a0:48:b6:50:2b:59:2d:09:c5:11:52:0b:
                    7e:11:02:70:fb:c1:2b:bb:20:19:29:92:0f:1b:7b:
                    33:43:4e:ca:9d:70:7a:6c:68:48:67:b7:63:24:a3:
                    de:c3:95:b8:ef:7d:ab:3a:c4:6c:65:d9:81:d5:c1:
                    7f:ac:53:d9:1f:62:5a:6b:3a:cd:06:3c:f8:0f:aa:
                    69:52:07:ef:d0:7d:ee:f7:50:93:76:dd:3a:30:1a:
                    3c:c5:6c:9f:49:d2:ac:a1:4a:5b:96:be:8e:a8:09:
                    9c:72:a2:11:08:81:a8:39:45:0f:b2:b4:26:ed:ec:
                    4b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CF:FC:FA:3F:50:E2:45:1E:30:14:BE:75:37:13:F1:FC:07:67:83:78
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BppQecXz9U4o5RaDfLzuHttNBboGd3xrP3gRj8NTwX55/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BppQecXz9U4o5RaDfLzuHttNBboGd3xrP3gRj8NTwX55/0/CFFCFA3F50E2451E3014BE753713F1FC07678378.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.200.0/21
                IPv6:
                  2804:1588::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263393

    Signature Algorithm: sha256WithRSAEncryption
         10:9c:82:a1:72:ba:92:b8:ad:35:a1:90:e5:63:aa:da:78:47:
         d1:bf:d7:cd:68:96:ed:0e:6b:af:7c:2a:a7:04:23:7a:58:b9:
         17:66:08:17:40:4f:69:d9:e8:75:fd:0f:81:47:53:13:66:c4:
         ae:12:57:05:b4:d2:07:5b:cb:35:84:5b:df:6f:b9:69:87:8c:
         7a:93:88:64:fc:ca:72:00:2d:ba:fa:7d:6e:3a:9a:4e:4a:c0:
         42:38:10:c0:bb:cb:b5:6f:fd:6e:0e:1a:f0:9f:b0:fe:34:40:
         83:42:c0:d8:38:06:73:bd:b9:89:cb:d3:9f:3f:6c:ef:3f:cb:
         a0:c3:15:7f:08:5e:7a:b3:7f:f0:0a:fa:a6:82:9d:41:c4:fb:
         7c:fa:f6:47:66:f0:c3:01:7c:fd:98:28:7c:3d:a8:0e:bc:02:
         66:00:c0:63:27:a6:28:ad:ff:02:ef:74:44:e5:a9:0c:0b:f3:
         cf:14:4f:8b:db:83:99:1c:7e:a9:86:94:5a:cd:6b:80:07:20:
         7e:c2:a4:51:1d:e9:f2:d8:ec:ee:9f:7a:eb:66:e4:24:90:3d:
         56:02:0d:85:79:c3:e7:79:84:21:ff:35:d9:79:6c:fe:d5:33:
         cc:72:ac:e1:48:85:4d:f1:8f:70:f8:46:c2:98:a2:59:77:e2:
         3d:d7:f7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:17:02 2024 by rpki-client on console-fra.rpki-client.org