Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D71B242F0E743C443E8FBA587735676FC26F8546.cer
File:                     D71B242F0E743C443E8FBA587735676FC26F8546.cer (raw, json)
Hash identifier:          dZKNqvl0+2NvSS+BS2pudnZ5TS6FRfb8MzP7nRB1C7Q=
Subject key identifier:   D7:1B:24:2F:0E:74:3C:44:3E:8F:BA:58:77:35:67:6F:C2:6F:85:46
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6818C8162A8F7B8BFF9E75B69568EBB08A47609F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Cya58ELxTmRUDGHGH5THE7B2dhvA4HgyzoBbNZnFQ522/0/D71B242F0E743C443E8FBA587735676FC26F8546.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Cya58ELxTmRUDGHGH5THE7B2dhvA4HgyzoBbNZnFQ522/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 25 Nov 2024 14:30:24 +0000
Certificate not after:    Mon 24 Nov 2025 14:35:24 +0000
Subordinate resources:    AS: 270464
                          IP: 200.81.52.0/22
                          IP: 2804:6c60::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 00:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:18:c8:16:2a:8f:7b:8b:ff:9e:75:b6:95:68:eb:b0:8a:47:60:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 25 14:30:24 2024 GMT
            Not After : Nov 24 14:35:24 2025 GMT
        Subject: CN=D71B242F0E743C443E8FBA587735676FC26F8546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:60:28:df:8e:68:ae:7e:01:5d:0e:ed:87:e6:
                    60:af:52:f2:f3:34:00:7b:59:2e:0c:60:f9:8a:ac:
                    32:31:9f:e1:a7:6b:68:ec:92:34:e6:25:ca:89:50:
                    6e:76:c4:0a:7c:54:f0:cc:c3:40:e9:a5:73:ab:4d:
                    e5:2f:4c:3c:f7:f7:4a:1c:9b:4b:a3:41:e9:55:2e:
                    66:79:05:a3:0b:32:ce:93:96:a6:53:e3:67:fb:06:
                    ec:15:5c:8d:65:01:2f:58:99:c2:81:96:32:cd:a7:
                    16:14:41:6c:ae:07:74:e0:f6:11:cc:70:d7:a2:f0:
                    ce:be:0f:4c:1f:28:19:40:40:06:11:ba:a2:45:2b:
                    98:46:c9:57:30:e9:95:04:1c:74:a9:88:0b:09:34:
                    66:ee:a8:df:4d:da:14:3a:9e:fe:77:c0:f5:be:de:
                    e6:ba:98:27:01:89:6f:84:a2:22:98:21:0a:ea:3b:
                    b0:9d:1c:a9:27:81:90:47:6e:de:57:f8:96:12:c8:
                    65:31:35:ba:fa:ad:ff:d7:cd:11:89:18:f0:b3:62:
                    71:1c:72:4c:b0:d0:67:aa:3e:c6:50:da:80:e7:3d:
                    2d:7b:17:06:4f:86:75:3b:55:91:bf:14:1b:89:85:
                    1c:c6:cf:92:52:6a:17:b2:66:d2:bb:08:ac:81:9a:
                    04:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D7:1B:24:2F:0E:74:3C:44:3E:8F:BA:58:77:35:67:6F:C2:6F:85:46
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cya58ELxTmRUDGHGH5THE7B2dhvA4HgyzoBbNZnFQ522/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cya58ELxTmRUDGHGH5THE7B2dhvA4HgyzoBbNZnFQ522/0/D71B242F0E743C443E8FBA587735676FC26F8546.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.52.0/22
                IPv6:
                  2804:6c60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270464

    Signature Algorithm: sha256WithRSAEncryption
         78:b9:65:d8:22:ef:45:a2:4b:e8:94:70:11:23:c2:51:c8:9e:
         82:5f:db:55:b0:7b:c4:a6:39:28:d9:03:e4:bf:ba:4c:a6:0b:
         63:c4:64:78:ab:4b:1f:d5:f1:a8:5e:5e:fb:07:a4:fe:00:5c:
         7a:e0:a7:5a:90:ba:92:15:97:23:6e:3b:08:d7:bc:e6:76:7d:
         c5:c3:88:93:fa:11:a8:a6:a3:5a:63:51:ae:2f:c3:03:28:d2:
         1b:9d:ee:85:96:5e:2b:23:5b:02:0b:ff:b2:fb:a8:e0:00:4a:
         94:71:b3:c0:e1:ae:82:61:bc:de:d1:87:cc:3e:36:8b:0b:64:
         2c:25:cf:0d:7d:2a:2c:b5:1e:60:88:b8:f0:69:3d:44:d8:e5:
         a4:61:b1:c8:d0:0d:dc:a7:63:a5:b7:3f:78:3d:b3:ae:cd:3a:
         47:32:03:e4:bd:42:20:42:ff:6b:26:ff:6d:c7:07:aa:7f:94:
         92:b2:9f:ef:68:9e:c2:0f:e8:43:a4:98:94:14:cb:b1:9a:fd:
         c8:aa:dc:0f:19:2e:65:98:98:98:35:f4:e4:73:db:cd:a4:00:
         01:26:2c:02:6b:87:7e:5a:fd:77:7a:50:1b:9d:1b:0f:f0:55:
         c7:34:80:26:25:ad:23:44:71:51:b4:16:7e:b9:c3:fd:bd:05:
         8f:a7:3d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:17:04 2024 by rpki-client on console-fra.rpki-client.org