Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EB171D41C3E8E0BE446E1CFEC87A2E905D659F88.cer
File:                     EB171D41C3E8E0BE446E1CFEC87A2E905D659F88.cer (raw, json)
Hash identifier:          HYDqK1C0qHvMbgkEbEpkd54kZHFz3qbXPozOVZCAs5g=
Subject key identifier:   EB:17:1D:41:C3:E8:E0:BE:44:6E:1C:FE:C8:7A:2E:90:5D:65:9F:88
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5E3ADD1C949CDEEE72C8D4D29BC1740D0AA91E2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/EB171D41C3E8E0BE446E1CFEC87A2E905D659F88.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 16 Oct 2024 21:48:51 +0000
Certificate not after:    Wed 15 Oct 2025 21:53:51 +0000
Subordinate resources:    AS: 267940
                          IP: 45.165.216.0/22
                          IP: 2804:5588::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:3a:dd:1c:94:9c:de:ee:72:c8:d4:d2:9b:c1:74:0d:0a:a9:1e:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 16 21:48:51 2024 GMT
            Not After : Oct 15 21:53:51 2025 GMT
        Subject: CN=EB171D41C3E8E0BE446E1CFEC87A2E905D659F88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:68:60:cc:63:eb:6a:a4:bc:ce:ee:a1:df:b6:
                    f3:16:de:d3:6a:dc:fb:e6:c8:3f:82:1a:40:5b:9f:
                    49:3b:cd:d0:95:4c:01:e7:85:79:18:71:86:0d:32:
                    57:15:f9:0a:be:fb:e7:d3:4c:c3:3e:a5:4f:fe:bb:
                    9f:5d:fb:f9:fa:41:08:60:2a:e5:92:ad:ab:40:2c:
                    75:f4:80:f6:5a:75:95:61:de:22:39:94:1b:df:ef:
                    87:df:ac:73:05:ac:1b:be:45:db:7f:6c:6d:97:7e:
                    81:11:f0:38:8b:3c:1c:69:da:d3:7c:92:ad:07:8c:
                    97:82:34:75:3a:cc:6a:e1:79:9b:34:a3:7a:62:3a:
                    e1:23:da:2e:fa:a3:d2:22:ae:66:dc:37:04:18:b5:
                    d4:75:be:34:19:ee:87:84:ea:0f:57:de:3d:4b:7b:
                    32:01:6a:ce:67:81:2a:bd:96:9e:46:fa:3c:3e:9f:
                    d8:5b:e2:96:dc:ac:ff:db:dd:d1:f5:38:f9:bd:5e:
                    4e:49:fd:d3:99:2f:2e:81:9b:b1:ac:51:af:df:62:
                    24:fc:cb:78:b7:f1:38:ae:d9:ab:07:32:6c:39:b2:
                    89:62:46:57:c1:71:14:39:e2:17:54:4f:08:38:10:
                    d0:31:04:9b:a8:39:d0:19:91:f9:0c:5a:fc:30:9f:
                    af:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EB:17:1D:41:C3:E8:E0:BE:44:6E:1C:FE:C8:7A:2E:90:5D:65:9F:88
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/EB171D41C3E8E0BE446E1CFEC87A2E905D659F88.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.216.0/22
                IPv6:
                  2804:5588::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267940

    Signature Algorithm: sha256WithRSAEncryption
         7c:7d:fa:c6:f4:e8:cc:3f:66:d2:0a:13:76:dc:61:8f:bc:ca:
         15:dd:a2:66:1e:45:90:eb:7e:a6:f0:58:0c:31:83:fe:73:71:
         1c:d8:00:eb:8d:2c:8e:ad:8f:a3:f1:c7:a0:c1:35:c6:b9:46:
         93:a4:ca:81:f2:27:2b:7d:d4:aa:8e:c5:6c:37:5b:dd:45:91:
         fc:d4:20:68:69:4f:7f:f0:f8:db:48:94:ac:9a:01:ec:1c:fa:
         85:06:1d:fb:e1:d4:e7:2f:c5:1a:5d:22:fa:ee:53:2b:a8:e7:
         8b:82:8c:83:f4:d7:64:be:6c:eb:15:6d:71:09:34:7e:81:bb:
         86:04:63:90:12:29:d1:b9:97:f1:6b:ee:38:78:e6:28:d0:81:
         58:8e:28:9b:b7:5f:29:d4:2f:13:1a:d7:d9:0a:d7:a3:d2:5f:
         ab:3c:2e:2a:fa:68:6e:12:6c:a1:62:d1:e7:8d:f6:6f:51:87:
         42:84:8d:42:76:72:84:ec:0c:fe:3e:01:6d:a2:20:8a:da:8d:
         99:52:f2:aa:c6:ae:8f:f6:b1:a7:dc:55:d2:b5:10:45:9a:64:
         90:01:44:04:69:2d:94:aa:50:70:6b:25:3b:90:a4:1f:d1:25:
         25:25:e2:f0:75:c4:97:3a:66:27:da:13:5c:a2:b2:b6:99:7e:
         68:33:31:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:45:37 2024 by rpki-client on console-ams.rpki-client.org