Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.cer
File:                     D97EFFA58186EAE6B6F701100E4FACC784AACB40.cer (raw, json)
Hash identifier:          wL3qodXRjzmk/Pymt82FMzwbsIs8bkTRnqffXSQXgNI=
Subject key identifier:   D9:7E:FF:A5:81:86:EA:E6:B6:F7:01:10:0E:4F:AC:C7:84:AA:CB:40
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0C6C29D2B70789B942C9E57ED1BAE2A81B7FFD0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 16:06:20 +0000
Certificate not after:    Thu 03 Apr 2025 16:11:20 +0000
Subordinate resources:    AS: 266498
                          AS: 269051
                          IP: 45.178.248.0/22
                          IP: 170.244.72.0/22
                          IP: 2804:38bc::/32
                          IP: 2804:5eb4::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:6c:29:d2:b7:07:89:b9:42:c9:e5:7e:d1:ba:e2:a8:1b:7f:fd:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 16:06:20 2024 GMT
            Not After : Apr  3 16:11:20 2025 GMT
        Subject: CN=D97EFFA58186EAE6B6F701100E4FACC784AACB40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:be:96:6e:20:01:f6:c8:ab:f6:e4:19:92:2b:
                    93:d1:40:25:0a:90:ca:3a:ef:41:06:4d:44:40:0b:
                    eb:ff:d8:fb:b2:d1:0b:6c:a3:0c:e2:00:4e:a7:37:
                    91:c9:da:00:2b:12:dd:73:43:01:ed:09:5e:dd:8e:
                    4a:b0:71:44:db:bb:9f:40:4d:fe:d4:aa:4d:ee:e5:
                    95:0e:3b:44:e5:ca:b7:e4:e2:a8:76:c4:b5:52:5e:
                    62:42:37:a7:78:79:8c:73:fc:37:20:b5:77:f2:bc:
                    40:bb:c0:c0:ae:85:ee:5d:09:6d:08:5e:a5:d1:71:
                    a0:69:59:7f:9c:95:d4:05:1e:73:40:b8:b3:bf:a8:
                    8e:e1:b4:2a:5b:68:b8:87:8d:63:5a:2d:53:9f:c4:
                    44:0e:94:3e:77:95:c6:d3:19:1e:79:e9:74:f0:d8:
                    39:07:9f:95:03:93:a3:a2:f7:2f:78:b7:34:24:7b:
                    a5:9c:77:69:ba:d6:f1:5f:f2:7a:fd:f9:dc:bb:da:
                    02:14:a5:7d:fe:e7:16:fc:ce:0c:6e:81:01:be:cc:
                    bf:38:31:8c:55:fc:87:cf:44:51:f5:68:32:4e:a7:
                    33:d2:b1:63:18:f2:94:27:a9:14:00:64:0b:e8:10:
                    74:f9:c9:1a:6c:b5:a4:cf:d0:19:70:ca:01:7f:1d:
                    60:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D9:7E:FF:A5:81:86:EA:E6:B6:F7:01:10:0E:4F:AC:C7:84:AA:CB:40
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.248.0/22
                  170.244.72.0/22
                IPv6:
                  2804:38bc::/32
                  2804:5eb4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266498
                  269051

    Signature Algorithm: sha256WithRSAEncryption
         ab:0c:3a:10:60:a1:07:b0:ce:5b:2a:de:3d:23:77:66:f6:70:
         55:00:fa:0f:a2:fd:c7:35:d5:3f:17:9c:2b:df:08:ba:8d:f5:
         fa:6a:a6:a9:76:cc:30:3e:31:19:59:6b:b7:c1:8f:56:ba:b2:
         56:7e:ee:89:f2:07:14:9d:60:ba:b6:ab:fe:51:8b:c3:fa:6d:
         52:e5:79:1a:dc:5c:29:48:e8:7d:54:75:7f:40:f4:ea:99:a5:
         0d:22:35:a8:25:90:07:66:20:c7:3f:68:75:b0:51:f0:40:4b:
         d8:b1:4b:cc:74:96:a7:6c:f2:4d:d7:d7:2a:18:57:94:9a:ea:
         00:9f:78:82:8f:9f:b8:de:26:0c:b3:0c:73:10:75:5f:b4:fc:
         78:c2:2a:32:a6:af:5b:8d:91:de:ae:71:c9:53:c0:74:78:87:
         04:6d:fc:ab:ec:3b:9a:3e:9c:8c:0f:f7:cc:c1:e4:46:a2:47:
         df:88:49:bc:0b:10:3c:91:a8:20:e5:ef:be:6f:72:2a:c1:75:
         6a:57:c1:ee:8c:79:dd:ba:9a:4f:5f:2f:b0:a5:24:c5:fb:fe:
         e1:40:f0:c0:a8:bb:48:37:d0:12:0d:76:6b:8f:8b:60:f4:58:
         21:f4:54:ad:fa:a8:9a:25:00:2b:0e:ee:8e:d4:46:e4:a6:a7:
         75:57:1e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:06:36 2024 by rpki-client on console-ams.rpki-client.org