Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.cer
File:                     E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.cer (raw, json)
Hash identifier:          /ktV5QAdGm94HVVPacCpMfT3a8tyKRiMd5pY1HeJKL4=
Subject key identifier:   E6:9E:BB:EF:4F:3E:B2:DE:9A:36:8F:10:8A:81:94:F2:D4:12:59:79
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1CB8D84921B4B93ABE7A740A4D8F0AD4419FD09E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Jul 2024 15:02:28 +0000
Certificate not after:    Wed 02 Jul 2025 15:07:28 +0000
Subordinate resources:    AS: 52956
                          IP: 168.181.56.0/22
                          IP: 170.79.56.0/22
                          IP: 177.22.96.0/20
                          IP: 177.67.40.0/21
                          IP: 2804:390::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:b8:d8:49:21:b4:b9:3a:be:7a:74:0a:4d:8f:0a:d4:41:9f:d0:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  3 15:02:28 2024 GMT
            Not After : Jul  2 15:07:28 2025 GMT
        Subject: CN=E69EBBEF4F3EB2DE9A368F108A8194F2D4125979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a0:1a:ba:05:4e:5d:7e:a2:75:17:47:3c:3e:
                    07:54:b8:bb:ef:84:43:e3:ce:b4:a2:d3:53:89:43:
                    bc:b6:0a:e6:25:c1:f3:53:42:c5:17:46:e1:28:3a:
                    41:17:34:65:9c:15:79:96:e4:dc:f3:aa:2f:ad:1d:
                    8f:5f:c7:fd:7e:9d:90:4d:7d:04:80:57:fb:96:f1:
                    3e:0f:30:12:6d:25:7c:51:b1:27:fc:28:d6:d7:65:
                    ca:24:72:20:63:e3:1b:c1:26:75:f1:1f:c5:91:4a:
                    08:f2:c2:ed:bd:8e:2d:ab:2c:f1:e0:b5:47:d0:f5:
                    62:39:35:bf:69:ad:27:04:c2:df:5e:28:50:da:88:
                    16:cf:fd:f8:f2:32:1e:27:0a:63:94:e0:c8:6b:4b:
                    42:1e:70:f5:1b:6d:60:da:12:89:e9:45:62:21:00:
                    33:bd:c7:5b:18:61:c0:36:81:24:0b:4c:74:da:f4:
                    7f:a1:05:76:f4:aa:b7:57:94:66:22:23:a6:3e:5e:
                    6f:22:7a:7d:c7:f8:89:27:b9:90:d6:52:30:86:67:
                    52:76:14:cf:cd:d1:1d:47:97:b8:ea:46:84:a5:d3:
                    d8:2a:b6:91:f5:8e:60:32:e9:3d:5a:ff:b7:0c:a0:
                    2b:2b:d5:1b:b1:03:e7:a6:b6:21:57:2b:84:26:10:
                    2d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E6:9E:BB:EF:4F:3E:B2:DE:9A:36:8F:10:8A:81:94:F2:D4:12:59:79
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.56.0/22
                  170.79.56.0/22
                  177.22.96.0/20
                  177.67.40.0/21
                IPv6:
                  2804:390::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52956

    Signature Algorithm: sha256WithRSAEncryption
         be:3d:2b:57:2e:94:ea:59:ff:aa:4b:c4:77:b6:18:f3:9d:45:
         e0:37:43:dc:63:06:ac:00:10:f2:02:da:d3:28:0a:31:17:18:
         42:cf:31:64:c3:9a:db:60:04:58:f5:12:66:53:a3:4f:ef:cb:
         3d:3e:4d:00:f7:67:64:13:d3:d0:83:4c:ce:35:d6:7a:03:97:
         dd:f2:38:71:aa:46:7a:26:0d:86:a4:53:1e:01:ef:d1:ef:c1:
         78:dd:52:0b:2b:f4:f6:71:29:16:f8:dd:81:6f:55:07:8e:bd:
         6a:2d:07:f8:eb:b2:94:05:2a:3e:ab:0a:25:ca:6b:8a:9a:32:
         01:b0:27:b4:65:21:ef:14:4d:61:1e:61:21:1b:49:c2:f3:a4:
         85:52:72:2c:91:b7:7f:a2:e1:74:67:9b:fe:38:fc:5d:c4:ea:
         a0:07:fe:9f:78:75:5d:6d:0c:bd:eb:2d:70:e3:6a:fd:a8:7b:
         99:52:ed:13:d8:36:27:9f:db:73:68:e4:28:b7:e1:dd:b2:3c:
         0e:17:2e:29:0f:ac:2a:88:03:60:35:56:28:bf:26:ee:82:50:
         9c:12:a0:f5:8f:86:60:40:d5:60:c1:f9:a4:e5:c0:4c:bf:c5:
         cb:7a:27:36:e2:84:03:4b:50:72:47:c6:53:c0:96:ea:9c:3a:
         c6:44:56:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:31:01 2024 by rpki-client on console-fra.rpki-client.org