Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D95F806F2454B9E12E868A8E309DCB7F1F2BAA45.cer
File:                     D95F806F2454B9E12E868A8E309DCB7F1F2BAA45.cer (raw, json)
Hash identifier:          OD7+DhYQO2qzzqMvsy0uXjUwso3+PjulegIbmMmbeYA=
Subject key identifier:   D9:5F:80:6F:24:54:B9:E1:2E:86:8A:8E:30:9D:CB:7F:1F:2B:AA:45
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4785440BE721104F6344B88654138014C4968B93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/D95F806F2454B9E12E868A8E309DCB7F1F2BAA45.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 20 Aug 2024 13:04:37 +0000
Certificate not after:    Tue 19 Aug 2025 13:09:37 +0000
Subordinate resources:    AS: 269439
                          IP: 45.186.228.0/22
                          IP: 2804:64a0::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:85:44:0b:e7:21:10:4f:63:44:b8:86:54:13:80:14:c4:96:8b:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 20 13:04:37 2024 GMT
            Not After : Aug 19 13:09:37 2025 GMT
        Subject: CN=D95F806F2454B9E12E868A8E309DCB7F1F2BAA45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b8:bf:a8:c2:de:f7:57:4b:e8:be:7a:10:e4:
                    4c:60:d9:03:e6:ee:f6:c2:76:fe:3c:81:05:6a:90:
                    7f:eb:71:e5:50:41:47:72:9c:98:3f:ea:2e:d0:49:
                    fc:9d:43:7f:d6:5e:dd:0d:e0:d8:a3:d3:ed:3a:bf:
                    8d:5b:d1:85:a5:62:b9:c4:9b:b7:ea:ed:34:5d:76:
                    d5:42:c9:44:0c:3b:ba:76:73:d6:c8:91:29:0e:7b:
                    76:2a:1c:8b:29:2c:de:cc:71:92:77:5c:32:0f:c4:
                    6b:a6:0e:26:65:14:f9:07:f1:a5:91:59:46:74:10:
                    ad:e9:d5:27:1e:a3:8b:8e:20:e0:2d:cf:31:76:38:
                    e7:73:2c:5a:58:ae:0d:0d:e0:23:a8:60:ff:c5:e8:
                    40:69:44:0b:5c:a2:53:0d:7f:a0:04:63:49:53:73:
                    e3:02:b6:36:8f:c6:c2:69:2b:d5:04:40:5c:1b:25:
                    94:c1:99:39:43:36:a6:08:a9:79:2a:fb:a1:09:08:
                    7d:ed:53:c4:4d:35:e4:98:ad:eb:8e:f9:9b:5c:60:
                    9d:95:38:7c:ad:0f:65:52:45:42:0a:b3:f3:2c:7c:
                    2a:e4:30:ee:0c:d7:54:b0:d1:e4:ee:81:48:b8:b7:
                    54:e3:36:48:be:3e:d9:06:02:c5:5d:74:37:28:26:
                    7c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D9:5F:80:6F:24:54:B9:E1:2E:86:8A:8E:30:9D:CB:7F:1F:2B:AA:45
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/D95F806F2454B9E12E868A8E309DCB7F1F2BAA45.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.228.0/22
                IPv6:
                  2804:64a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269439

    Signature Algorithm: sha256WithRSAEncryption
         88:c3:0b:7f:a6:2d:72:b8:55:97:bf:c0:0b:af:50:f3:d7:de:
         07:9b:a3:97:61:ee:b3:b2:b6:f7:5c:d6:e8:ac:e9:2e:0f:f9:
         65:74:d2:9d:10:e5:98:da:45:a7:3e:86:bd:23:6d:e2:8a:32:
         8a:18:2b:3e:71:b6:98:03:69:16:c6:19:69:f2:42:0f:9f:bd:
         30:e9:f2:e2:01:de:51:8c:3c:3e:f3:9f:54:1f:fe:eb:45:1d:
         eb:57:5a:13:2b:2c:0f:ef:15:e3:39:4b:5b:eb:64:c5:f9:a0:
         eb:86:b2:f7:9f:96:5f:36:05:fb:32:ee:f3:08:e7:7c:ff:af:
         a3:50:5c:68:00:42:d2:67:1a:0c:1f:e1:4a:2b:d4:c5:2e:2f:
         1f:16:b6:9e:a2:4c:57:cb:11:1f:0c:51:f6:30:f1:3f:31:e6:
         ac:1d:b1:d8:1d:4e:ad:1d:15:92:da:7f:ee:bf:e8:b5:1b:ba:
         fb:b7:ca:8c:df:9d:36:f2:f3:ac:fd:60:d4:84:b9:93:9d:61:
         65:a6:c3:50:e3:c6:be:22:bf:b3:f2:6b:28:71:d6:f6:1c:39:
         2e:13:34:ed:56:9e:79:68:28:f2:f1:5c:67:a6:cf:a2:be:99:
         0d:b2:6c:6b:d5:f5:a4:ea:7f:87:0f:25:c0:f8:17:1c:33:37:
         7e:9f:c2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:03:36 2024 by rpki-client on console-fra.rpki-client.org