Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D98B5C190E3BC6228F4D9C405E3CF4FA3C0E511E.cer
File:                     D98B5C190E3BC6228F4D9C405E3CF4FA3C0E511E.cer (raw, json)
Hash identifier:          klEqYqZK0aYO+9vChQLpUu0j1jvf9VMQjLact8WcXLo=
Subject key identifier:   D9:8B:5C:19:0E:3B:C6:22:8F:4D:9C:40:5E:3C:F4:FA:3C:0E:51:1E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6694D491173D219ADF14B1852682A4A0D6BAD716
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C8N6B8FZQofTLvdD6pp7t5WZF1fbRjWKbDoGqfFzSLx2/0/D98B5C190E3BC6228F4D9C405E3CF4FA3C0E511E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C8N6B8FZQofTLvdD6pp7t5WZF1fbRjWKbDoGqfFzSLx2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 01 Aug 2024 22:06:56 +0000
Certificate not after:    Thu 31 Jul 2025 22:11:56 +0000
Subordinate resources:    AS: 52920
                          IP: 177.184.160.0/20
                          IP: 2804:ac4::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:94:d4:91:17:3d:21:9a:df:14:b1:85:26:82:a4:a0:d6:ba:d7:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  1 22:06:56 2024 GMT
            Not After : Jul 31 22:11:56 2025 GMT
        Subject: CN=D98B5C190E3BC6228F4D9C405E3CF4FA3C0E511E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b9:bf:78:75:4e:cb:72:e9:23:7c:33:38:ff:
                    f1:77:22:f8:6a:e5:fb:30:62:7e:69:8d:8d:de:5e:
                    4b:35:69:51:81:59:8f:8e:d6:b8:8a:2a:a1:11:c0:
                    e1:77:4a:25:85:53:2c:df:d4:cc:23:92:88:45:46:
                    e9:a3:da:71:87:10:07:52:b3:64:14:72:9a:da:4e:
                    a8:b5:79:84:c1:a5:3c:c8:88:c7:43:88:91:33:c1:
                    f4:d6:81:33:7f:1c:d1:b3:00:8f:36:e4:21:36:45:
                    de:97:b0:e5:ea:74:0e:c4:83:3a:7f:6b:e3:b1:2e:
                    3e:54:06:46:1f:60:55:f9:e2:13:e3:81:ef:ed:f4:
                    0a:1c:2f:d7:be:51:cd:51:8c:80:f1:ef:cf:49:89:
                    ef:08:4f:9d:74:6c:31:c4:bd:67:45:8c:3d:39:ec:
                    f7:9c:60:b8:9e:9e:2f:88:14:1c:ad:67:09:05:15:
                    0a:9c:24:d2:96:e5:73:c9:3a:df:1e:9d:85:5d:9d:
                    9d:e9:66:ae:ad:6e:bc:c3:53:b5:88:9a:fd:ec:90:
                    3f:79:7e:1a:f1:77:d3:56:e1:a0:66:6a:01:5a:f0:
                    d4:c0:16:96:40:ea:f3:ad:71:cf:31:c6:19:20:c4:
                    1e:0f:cd:97:e5:52:5d:a2:62:b2:14:03:b7:73:65:
                    22:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D9:8B:5C:19:0E:3B:C6:22:8F:4D:9C:40:5E:3C:F4:FA:3C:0E:51:1E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C8N6B8FZQofTLvdD6pp7t5WZF1fbRjWKbDoGqfFzSLx2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C8N6B8FZQofTLvdD6pp7t5WZF1fbRjWKbDoGqfFzSLx2/0/D98B5C190E3BC6228F4D9C405E3CF4FA3C0E511E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.160.0/20
                IPv6:
                  2804:ac4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52920

    Signature Algorithm: sha256WithRSAEncryption
         22:c1:8d:37:ab:21:4c:0f:34:90:1e:93:99:a1:ab:76:34:61:
         25:fe:0d:e3:82:18:94:6d:8d:bf:18:d6:8f:ee:f4:b5:c7:ee:
         83:98:07:3a:d9:34:d5:0b:e4:39:12:e2:3f:1e:20:26:f4:e2:
         2c:84:2b:b6:f3:07:ec:8f:70:87:7a:42:b5:b6:9a:60:8f:15:
         9d:ed:87:a1:3c:03:ca:20:c3:b4:e1:01:8e:74:53:1a:91:25:
         f8:df:14:20:b8:43:d2:24:42:12:00:bb:4b:53:9a:cd:2c:79:
         b7:82:da:b0:be:27:c7:b1:f5:34:43:03:78:3d:67:ef:67:25:
         51:18:dc:d2:5a:03:f9:4c:44:24:59:ec:bc:08:6d:45:73:5c:
         5d:35:4c:78:9a:16:73:09:81:db:18:48:7d:43:14:26:02:b5:
         d0:ca:94:fd:31:58:08:58:f4:56:6f:0b:b4:bd:e7:3b:b4:31:
         04:5c:ba:a1:80:0c:68:2d:47:eb:b2:83:da:0c:33:ae:70:f9:
         ef:a8:02:13:c3:99:b3:61:05:02:e5:58:e0:4d:43:74:6a:f5:
         46:36:1e:88:52:c7:50:85:29:a9:b2:6d:96:80:da:f5:c7:39:
         80:db:25:18:f2:05:97:8e:7f:cb:4e:8a:d8:96:00:fe:96:09:
         2e:af:7b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:58 2024 by rpki-client on console-fra.rpki-client.org