Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EEF76C4E20E9354E613C1AD9D6B91B471FA12CD9.cer
File:                     EEF76C4E20E9354E613C1AD9D6B91B471FA12CD9.cer (raw, json)
Hash identifier:          Cr/Wr6uE93iTHikbuuGHk2agx6uxXEyOCDzzaLYoDVY=
Subject key identifier:   EE:F7:6C:4E:20:E9:35:4E:61:3C:1A:D9:D6:B9:1B:47:1F:A1:2C:D9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       36F21B6B7BE270C55F546444F8623F5CAE3DC781
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/EEF76C4E20E9354E613C1AD9D6B91B471FA12CD9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 03 Oct 2024 21:14:34 +0000
Certificate not after:    Thu 02 Oct 2025 21:19:34 +0000
Subordinate resources:    AS: 270662
                          IP: 138.117.248.0/22
                          IP: 2804:6f78::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f2:1b:6b:7b:e2:70:c5:5f:54:64:44:f8:62:3f:5c:ae:3d:c7:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  3 21:14:34 2024 GMT
            Not After : Oct  2 21:19:34 2025 GMT
        Subject: CN=EEF76C4E20E9354E613C1AD9D6B91B471FA12CD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b5:6b:2f:f4:c8:72:65:23:51:8a:8a:10:e3:
                    84:fd:23:c5:4c:2b:b3:2a:e1:a8:3b:e9:09:25:b7:
                    96:ac:91:90:30:5f:52:2c:5d:11:1a:79:91:9f:12:
                    f3:72:18:40:9c:82:16:f0:85:5d:d3:f2:3e:80:77:
                    83:9c:64:0f:f7:09:e1:91:fe:00:3d:39:b4:5c:36:
                    e6:69:cb:9a:d1:9f:76:d7:a6:86:7e:7c:d6:9f:f3:
                    86:bc:83:80:42:98:8e:56:0d:0c:e7:8f:78:43:4f:
                    a9:32:00:32:e0:56:19:73:2e:9c:da:2a:d7:82:57:
                    3d:f5:e8:d9:f1:84:f3:0c:99:77:fd:08:08:6c:f6:
                    69:be:2a:1f:48:75:c7:aa:8d:90:91:6e:43:a3:ee:
                    05:2b:22:30:ec:61:bf:ae:55:be:a3:16:27:3c:49:
                    bb:1f:19:17:ef:a3:0a:1e:da:6f:50:1c:8c:e8:0f:
                    e9:50:41:d0:a1:d3:ad:84:f1:b8:72:8a:68:d0:c6:
                    93:e0:8a:70:ca:2b:0b:b3:18:36:a8:e9:e3:9d:84:
                    0f:3d:cb:a0:d5:34:5f:e7:4f:76:32:28:90:4a:37:
                    a6:07:09:c9:63:ca:2e:09:3d:53:5e:b6:a3:63:d8:
                    77:c1:15:fb:37:04:21:f0:d2:74:14:87:d7:0a:45:
                    be:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EE:F7:6C:4E:20:E9:35:4E:61:3C:1A:D9:D6:B9:1B:47:1F:A1:2C:D9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/EEF76C4E20E9354E613C1AD9D6B91B471FA12CD9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.248.0/22
                IPv6:
                  2804:6f78::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270662

    Signature Algorithm: sha256WithRSAEncryption
         0a:42:62:a6:70:52:f6:22:1b:fd:42:b8:e6:fd:8c:b5:e9:00:
         6d:3e:0f:95:dc:ee:a5:c8:64:09:33:68:ba:a6:59:88:8e:bf:
         02:ad:76:37:87:a1:8c:7d:da:87:d1:2d:5d:f2:02:41:58:29:
         7d:81:e6:e4:ff:91:93:12:82:b5:95:17:58:51:d5:07:42:2a:
         b1:50:c8:93:83:d6:23:e9:03:e0:db:7d:ba:07:c7:c8:6c:56:
         2d:0e:9e:3d:c8:55:1f:02:89:5b:55:10:fd:c3:8b:61:56:c0:
         ab:a1:0c:61:67:5e:a4:1a:9b:62:2d:67:bc:74:62:2e:ab:00:
         78:31:55:31:9a:f8:50:dc:64:29:4f:6e:4b:d7:92:37:7a:85:
         39:e2:2d:d9:49:2d:53:22:06:5c:89:b4:a5:16:e1:6d:b5:24:
         7b:c6:e5:41:e9:f2:cd:c2:04:ba:9e:42:88:d1:50:18:7b:a9:
         1a:df:a9:94:f1:53:fd:da:61:df:05:55:9a:f9:86:de:f5:c5:
         27:96:0b:3c:0c:8b:64:c0:6a:4c:47:00:5f:75:b2:13:0b:54:
         33:3d:48:d8:e2:c9:a6:94:e7:b5:8f:2d:23:90:74:33:09:2b:
         44:9d:f1:3e:99:4e:f7:b0:5b:40:c9:e3:5a:f8:89:df:87:95:
         15:67:6f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:44:37 2024 by rpki-client on console-ams.rpki-client.org