Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E5FAEBBFBF866B2836F6041BB12ED3B009544CB0.cer
File:                     E5FAEBBFBF866B2836F6041BB12ED3B009544CB0.cer (raw, json)
Hash identifier:          Tah4RHBseQAVCrgs193UWAq6ptRhaVS97izfYWnUhN8=
Subject key identifier:   E5:FA:EB:BF:BF:86:6B:28:36:F6:04:1B:B1:2E:D3:B0:09:54:4C:B0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       12616D91FBD3B450C1CD6FB4DE9E699CFD964BAD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/E5FAEBBFBF866B2836F6041BB12ED3B009544CB0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 Apr 2024 13:40:49 +0000
Certificate not after:    Tue 22 Apr 2025 13:45:49 +0000
Subordinate resources:    AS: 267998
                          IP: 45.167.96.0/22
                          IP: 2804:5670::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:61:6d:91:fb:d3:b4:50:c1:cd:6f:b4:de:9e:69:9c:fd:96:4b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 23 13:40:49 2024 GMT
            Not After : Apr 22 13:45:49 2025 GMT
        Subject: CN=E5FAEBBFBF866B2836F6041BB12ED3B009544CB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:55:fc:10:79:9e:90:64:2b:11:23:dd:7b:4d:
                    53:75:9b:fd:7b:16:1d:e5:61:52:ed:66:8c:63:c6:
                    52:f5:89:19:2c:db:f4:c6:ec:62:f9:f5:d3:d1:91:
                    5c:8c:e9:68:f7:f5:6d:f2:4a:ef:cf:06:82:92:5c:
                    f1:bf:27:92:93:6d:42:af:65:92:31:ac:97:ad:b7:
                    10:01:db:b1:ae:ba:de:24:58:78:80:37:39:c1:a8:
                    91:7b:b2:6f:53:42:91:8c:2f:f1:9b:10:03:e5:d9:
                    ed:e5:b2:67:f7:9c:f0:6f:55:46:3f:51:66:6f:64:
                    44:0d:f0:13:94:c8:65:5f:c2:c9:62:ab:77:ee:b4:
                    5e:87:06:a2:9d:76:fa:bb:d2:41:7b:0e:88:7c:3f:
                    8d:ad:68:65:4c:22:9e:c1:29:a4:eb:89:b7:1b:2c:
                    1f:3f:40:7e:d0:e8:01:5e:2f:b0:1d:07:21:83:4c:
                    fb:1d:bb:6a:7d:30:ca:01:c8:ab:fa:44:a7:48:88:
                    5b:64:26:f5:7e:4c:5e:35:9b:be:db:2c:da:f5:42:
                    35:55:b8:73:cc:54:7d:93:73:b4:5d:d1:db:c6:45:
                    72:c0:e7:16:e0:f2:48:ba:78:e4:bb:3d:5e:80:e9:
                    ab:39:bf:c0:1a:02:ed:e4:6e:7e:ce:08:04:c2:68:
                    31:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E5:FA:EB:BF:BF:86:6B:28:36:F6:04:1B:B1:2E:D3:B0:09:54:4C:B0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/E5FAEBBFBF866B2836F6041BB12ED3B009544CB0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.96.0/22
                IPv6:
                  2804:5670::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267998

    Signature Algorithm: sha256WithRSAEncryption
         1f:60:90:8f:a1:e4:5e:bd:cc:9f:88:62:2d:a8:85:b5:86:86:
         da:03:66:45:d8:80:0a:2c:11:11:39:a8:69:ff:45:bc:db:1b:
         bf:db:e5:c5:e2:25:8d:05:92:be:aa:65:80:d1:1b:a3:2d:91:
         e1:10:4b:6d:91:9b:7e:09:68:13:ff:35:49:e3:24:72:3d:71:
         7c:74:03:ac:1f:87:3a:e2:53:26:a5:38:09:fd:a6:be:1d:ee:
         d3:df:06:fc:23:1f:93:93:b8:be:e0:48:ca:15:f6:03:65:4c:
         65:d2:07:ad:e4:86:fc:af:bd:9c:6f:d5:eb:98:9b:db:5a:27:
         0e:45:57:f5:1b:d1:73:cc:ff:3b:9e:ef:28:28:ce:0e:d2:93:
         de:27:6f:1c:98:87:15:c5:ea:a3:62:06:f6:6d:ee:4b:be:c6:
         2a:d3:31:df:9c:89:33:37:32:29:d6:b9:ec:79:66:8d:72:df:
         2e:d1:ef:f9:db:4b:dd:2d:36:63:28:b6:28:72:62:25:16:f6:
         93:7a:ac:c3:23:ed:99:c7:80:a9:71:4d:a4:8d:32:1e:39:9d:
         f5:6e:6d:49:46:f5:97:01:37:b7:b5:57:b8:1d:97:34:c7:ac:
         94:c2:0b:39:85:20:20:26:2d:c7:e6:ed:75:38:96:ee:5b:b5:
         89:e1:50:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:31:01 2024 by rpki-client on console-fra.rpki-client.org