Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.cer
File:                     DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.cer (raw, json)
Hash identifier:          PQ4+UwaJOVuyoZputuZi9NdE9kmY9OaiGozUfuJlbTY=
Subject key identifier:   DD:0E:EA:2C:C8:09:C7:ED:52:CD:2A:24:D1:44:54:39:0A:C2:46:4C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2D403FC786BEBF95D45DEAA33780F8AB7842823C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:26:10 +0000
Certificate not after:    Wed 02 Apr 2025 18:31:10 +0000
Subordinate resources:    AS: 263014
                          IP: 177.10.88.0/22
                          IP: 2804:a08::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:40:3f:c7:86:be:bf:95:d4:5d:ea:a3:37:80:f8:ab:78:42:82:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:26:10 2024 GMT
            Not After : Apr  2 18:31:10 2025 GMT
        Subject: CN=DD0EEA2CC809C7ED52CD2A24D14454390AC2464C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:af:43:c5:16:fd:51:30:a7:db:88:4c:e0:6e:
                    71:49:00:fa:52:54:d9:f7:e6:56:da:89:e8:4a:59:
                    33:39:99:92:8a:77:27:54:6e:29:1e:95:b2:4b:14:
                    92:33:2f:f3:cc:48:55:83:57:84:cb:51:66:16:9d:
                    4a:c4:a1:a3:5b:8a:27:ad:3a:cb:16:01:24:48:67:
                    ef:bc:48:73:81:8a:74:9d:a7:dd:68:98:95:7d:5f:
                    c7:55:0b:24:4c:86:57:1c:6e:eb:a7:33:25:8b:5b:
                    72:49:05:e9:48:21:d3:04:a1:bf:b1:d6:db:cb:69:
                    14:e1:1b:3d:5b:fb:6b:7d:c4:9a:f0:cd:9a:9c:08:
                    98:4b:7b:89:ef:f0:18:b2:db:60:79:3b:ab:bb:37:
                    e8:4e:1c:03:fa:b8:95:38:fa:b0:49:d5:74:85:eb:
                    77:17:2b:56:86:81:f2:d2:c9:ea:d4:a7:59:99:66:
                    67:23:33:d8:8c:62:5a:27:15:78:07:f9:2f:65:0f:
                    cc:7e:37:27:d2:b4:f0:9f:0b:c9:88:c2:a4:79:a0:
                    5c:c2:af:e4:c3:88:3c:16:08:a0:08:fc:66:70:7a:
                    cd:77:f2:88:07:be:ef:9d:a2:46:52:72:86:3e:aa:
                    c9:9f:f4:9e:6b:17:72:fd:07:98:d5:d8:4e:c7:e3:
                    d9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DD:0E:EA:2C:C8:09:C7:ED:52:CD:2A:24:D1:44:54:39:0A:C2:46:4C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.88.0/22
                IPv6:
                  2804:a08::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263014

    Signature Algorithm: sha256WithRSAEncryption
         7c:e9:7f:5a:b1:bd:c9:23:32:5f:62:41:a1:a3:6f:55:1e:09:
         88:8c:5f:d2:8b:57:d7:23:62:b4:56:59:86:75:f8:cc:e9:17:
         33:6c:7b:ff:18:5c:9e:c9:e0:24:3e:86:6e:8f:d6:c0:d4:5e:
         bf:91:48:04:45:73:ef:0b:27:97:39:70:c7:6a:13:68:7a:ab:
         f5:6d:36:a1:50:e0:c2:64:6a:2e:b4:cc:35:5c:5b:bd:20:13:
         13:41:2f:44:59:ef:df:f8:72:84:3c:c7:c5:03:86:95:b3:d5:
         16:8b:cb:de:9a:4e:a7:4a:19:75:2a:51:42:98:14:59:bb:78:
         db:0b:11:d0:17:90:ff:be:9b:85:34:b8:fb:54:3a:e2:43:55:
         25:9a:00:de:7b:3f:16:77:73:4a:f2:2e:e6:c7:0e:06:30:4b:
         50:f2:e4:ad:5b:55:48:dc:d8:bb:4e:94:d7:82:d2:6c:f5:cc:
         e7:ff:ba:0d:89:2f:71:32:38:61:c6:65:2f:d3:a1:c4:c5:3f:
         0e:3c:69:36:6b:3e:0e:75:be:6a:8b:49:2b:79:47:c1:4a:75:
         fe:ea:70:9f:b4:68:4f:c7:88:16:64:2a:d2:46:61:6d:4e:f9:
         67:a5:b9:d0:a5:28:0b:1d:ee:12:d1:9b:c8:d2:8f:2b:f5:b7:
         8e:50:e6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:06:37 2024 by rpki-client on console-ams.rpki-client.org