Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer
File:                     E68D8AFF33E9846F7D024674CA13BD85A5518335.cer (raw, json)
Hash identifier:          sVjRJUi7u+hp23RiP3jWmQVQvY8x69GRoivg/rWhIDc=
Subject key identifier:   E6:8D:8A:FF:33:E9:84:6F:7D:02:46:74:CA:13:BD:85:A5:51:83:35
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6AE630D695FFDA2026C37F0D50C3515F47BA5B71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:26:41 +0000
Certificate not after:    Wed 02 Apr 2025 18:31:41 +0000
Subordinate resources:    AS: 268960
                          IP: 45.176.240.0/22
                          IP: 2804:5d40::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:e6:30:d6:95:ff:da:20:26:c3:7f:0d:50:c3:51:5f:47:ba:5b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:26:41 2024 GMT
            Not After : Apr  2 18:31:41 2025 GMT
        Subject: CN=E68D8AFF33E9846F7D024674CA13BD85A5518335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ee:73:64:69:63:e1:51:5b:12:eb:b7:b6:2e:
                    ca:fb:7f:34:ee:aa:4a:38:5d:9f:36:7d:73:84:fd:
                    be:06:52:87:0b:01:28:24:08:dd:1c:ab:0f:67:f1:
                    4c:31:61:91:94:dc:33:8a:ac:05:67:57:32:2b:ad:
                    e4:45:82:9c:a5:1b:0c:8e:c4:10:0b:b4:dd:07:b1:
                    61:6c:94:a2:a9:61:f3:f4:b6:53:fa:08:c4:6b:94:
                    df:9c:70:a6:58:61:4d:ea:12:7c:6c:24:88:e7:ea:
                    f6:cd:c5:3e:53:6b:f6:11:60:4e:86:4d:4d:38:c8:
                    67:5b:00:12:50:c5:01:14:3b:ba:8f:a4:06:f3:67:
                    4a:5d:be:1f:9b:34:75:0c:60:46:de:ad:78:8c:14:
                    a3:a5:92:0e:d9:f3:26:63:84:a3:d1:5e:ae:92:53:
                    b3:bf:bd:ca:84:3c:69:98:27:03:2f:36:ac:ad:45:
                    19:0f:b9:2c:d8:86:df:58:57:e2:ad:c0:01:0d:0b:
                    cd:e1:da:60:9c:45:1c:ea:e4:88:e6:43:c5:0f:4c:
                    f0:71:9d:e1:f9:3e:c7:93:82:db:68:13:26:bd:6f:
                    70:74:9a:d7:57:f7:9b:83:93:41:c7:da:d2:bc:4f:
                    35:fb:7f:19:79:6a:39:51:ac:df:d5:45:1a:22:c0:
                    83:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E6:8D:8A:FF:33:E9:84:6F:7D:02:46:74:CA:13:BD:85:A5:51:83:35
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.240.0/22
                IPv6:
                  2804:5d40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268960

    Signature Algorithm: sha256WithRSAEncryption
         af:62:ad:94:87:1a:f9:82:72:ac:da:64:7e:1e:92:c6:bd:79:
         e4:13:ec:08:9b:87:8e:8c:a4:b7:ad:bf:ad:a7:3c:71:41:d2:
         d6:64:98:8c:71:de:4f:39:9f:2f:3d:20:57:6f:d5:f0:53:e8:
         53:af:0a:25:3d:99:17:0e:db:50:3c:99:0f:97:ff:80:6f:45:
         41:19:06:26:b8:20:f9:7f:58:df:72:b6:f9:f0:5e:ef:00:3e:
         cc:1d:f5:ae:6a:9a:d1:45:7b:4a:37:5e:1b:e4:a4:d7:84:7c:
         43:45:95:9c:e1:4a:32:5a:e9:e3:6f:88:4c:39:20:9c:15:b7:
         94:91:9c:fa:94:7a:c6:b0:76:27:d3:76:6f:24:09:7a:9c:54:
         ba:fa:3e:ad:8c:d7:41:7b:63:68:80:60:12:89:c8:1c:23:a8:
         29:05:40:db:f2:49:09:99:4f:24:14:2a:7a:5e:7a:10:d2:f2:
         6f:d1:f7:27:14:27:71:03:79:74:62:22:2c:42:37:41:14:1e:
         44:27:2d:45:9b:11:0b:7d:25:32:ce:0e:f1:8d:9d:a1:1f:fb:
         75:b6:c0:eb:29:0f:f6:43:b3:c9:d2:a0:3f:52:10:71:e3:cc:
         be:ef:27:eb:94:4d:3b:1b:7c:d8:c0:02:b8:e7:94:a2:e1:5d:
         e9:68:38:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:06:40 2024 by rpki-client on console-ams.rpki-client.org