Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DF9F0E9D70A2EBC37F949FBDB3E7097997581127.cer
File:                     DF9F0E9D70A2EBC37F949FBDB3E7097997581127.cer (raw, json)
Hash identifier:          QGrPJE7MbvzogtmcVUtqhCj20MvrLb090CsZnbpJrEU=
Subject key identifier:   DF:9F:0E:9D:70:A2:EB:C3:7F:94:9F:BD:B3:E7:09:79:97:58:11:27
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1E8EAC83E6C7CC93476CE65C3BCC38FBB42AE655
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/1/DF9F0E9D70A2EBC37F949FBDB3E7097997581127.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 29 Jan 2025 22:23:02 +0000
Certificate not after:    Wed 28 Jan 2026 22:28:02 +0000
Subordinate resources:    AS: 266545
                          IP: 45.6.192.0/22
                          IP: 2804:3da8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:8e:ac:83:e6:c7:cc:93:47:6c:e6:5c:3b:cc:38:fb:b4:2a:e6:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 29 22:23:02 2025 GMT
            Not After : Jan 28 22:28:02 2026 GMT
        Subject: CN=DF9F0E9D70A2EBC37F949FBDB3E7097997581127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9c:10:ca:3e:7a:7d:be:ae:d8:6d:91:72:a7:
                    7d:ba:88:ac:ed:00:e4:3c:ab:cf:69:a9:86:1c:3f:
                    43:c4:2a:5a:48:74:62:b9:ac:39:a6:dc:8a:b1:b0:
                    64:6e:7f:fa:5f:3a:3a:56:dc:bd:86:3e:e2:ca:ad:
                    ad:34:59:a9:44:68:21:11:a4:4e:bc:8d:16:16:40:
                    32:2a:13:a7:45:e0:47:38:5e:6b:30:e9:ff:c0:66:
                    37:d7:5a:f5:64:d8:ca:41:94:23:b2:63:5b:71:90:
                    c9:75:db:d8:c0:56:26:37:a9:c4:3b:f4:da:d0:94:
                    89:a8:e5:32:b5:fc:22:50:aa:f1:92:39:d9:f6:a8:
                    24:1d:d0:d9:23:68:fc:ae:98:fa:0e:18:62:79:f4:
                    43:ac:ac:76:89:11:87:7e:a0:ec:ce:a2:85:98:39:
                    f1:30:b2:57:91:8c:2c:34:d5:b1:07:66:54:3f:9e:
                    46:fe:4f:9d:ec:47:0c:a2:dc:ae:7a:c1:90:58:6a:
                    59:61:7e:a9:90:db:12:a0:8a:db:12:6f:42:7b:68:
                    bf:72:58:0d:73:9b:1e:5b:72:41:38:c3:ff:b5:cf:
                    1d:e3:69:d1:a5:c9:59:14:82:ef:fe:9f:b8:e4:c0:
                    a5:7f:02:b5:48:ad:00:3e:48:34:1c:9f:00:d5:bc:
                    57:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DF:9F:0E:9D:70:A2:EB:C3:7F:94:9F:BD:B3:E7:09:79:97:58:11:27
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/1/DF9F0E9D70A2EBC37F949FBDB3E7097997581127.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.192.0/22
                IPv6:
                  2804:3da8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266545

    Signature Algorithm: sha256WithRSAEncryption
         a9:a9:80:f7:d4:07:23:5b:5c:18:98:82:73:df:89:24:cc:f4:
         3a:5d:5d:43:02:67:c0:71:fc:28:de:07:cd:f7:08:08:48:44:
         17:bb:35:5a:18:bb:87:7c:b5:f8:f8:f4:c1:88:89:66:02:6a:
         f4:30:3d:13:f3:31:2f:5c:c4:4c:a6:eb:01:a0:8a:fb:9e:04:
         10:51:44:5a:e2:c7:ff:31:af:77:f4:63:84:49:cf:31:23:b0:
         7f:76:a2:a8:7c:e5:c2:4f:dd:2b:d9:61:66:f0:05:cf:29:94:
         8c:ac:73:a0:2d:ee:eb:d7:e9:32:ae:5d:02:2e:2b:a9:3c:bc:
         a2:52:b2:58:01:bb:00:c5:cb:1f:c9:f4:44:50:5d:4c:da:39:
         f7:51:51:62:7c:5b:29:94:09:94:aa:28:93:15:88:f3:42:94:
         dd:c9:4e:87:41:b4:3c:c8:44:6c:6f:87:46:df:e5:37:69:3f:
         a6:2a:08:8a:10:39:4a:f1:17:0c:56:c0:c0:04:72:30:17:b0:
         67:c5:52:6b:2f:d3:51:bf:3f:90:a1:2f:db:46:f2:11:74:66:
         6c:12:f1:79:3e:46:8e:3a:a8:04:5a:eb:f3:c3:36:20:4a:23:
         eb:1f:f0:96:60:36:f1:6f:69:22:45:88:1e:bd:d5:44:17:6c:
         85:00:fa:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:55 2025 by rpki-client