Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.cer
File:                     F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.cer (raw, json)
Hash identifier:          LNQKGd19MJ762rpwWfQvNgPAA+SnPl/bi+RLgHCqohI=
Subject key identifier:   F2:AA:FF:A3:59:9C:06:E8:E6:8A:B7:79:5F:0D:B8:F1:BC:7A:7D:6E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6613B578A119AB650CEF792E30B53FB76A4354C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 07:24:05 +0000
Certificate not after:    Thu 03 Apr 2025 07:29:05 +0000
Subordinate resources:    AS: 269262
                          IP: 45.182.8.0/22
                          IP: 2804:61e0::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jul 2024 06:05:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:13:b5:78:a1:19:ab:65:0c:ef:79:2e:30:b5:3f:b7:6a:43:54:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 07:24:05 2024 GMT
            Not After : Apr  3 07:29:05 2025 GMT
        Subject: CN=F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fd:26:0c:c6:0f:55:89:a7:4e:75:c7:c6:0c:
                    e2:35:60:af:a1:07:44:18:94:4f:bb:02:d2:56:93:
                    f7:08:4a:58:94:d5:17:71:91:fa:ca:5a:2e:84:fb:
                    03:a9:fb:57:75:8d:3a:fc:7d:33:90:6f:ef:d3:93:
                    1f:96:a3:25:6f:70:46:94:af:99:87:27:08:e6:56:
                    e4:2a:0b:a1:dc:47:19:58:e3:f5:3f:8f:55:6c:72:
                    66:e0:ad:c1:a2:08:bd:14:cc:db:0b:63:81:d0:f0:
                    db:d6:eb:9d:84:df:a9:c5:79:b8:5e:0c:68:0d:8e:
                    45:59:9c:7f:43:98:33:08:3f:6d:c1:da:a7:4a:2b:
                    62:65:11:3f:d8:38:45:c0:6e:2f:af:fa:47:09:01:
                    75:b5:2f:0f:1f:59:f9:ec:f0:7b:5f:43:ab:eb:c2:
                    3f:89:d6:99:63:b0:4c:55:21:e4:67:7a:c8:8d:fe:
                    b7:44:43:a5:9f:60:1d:b2:66:72:94:d2:1f:48:70:
                    09:36:24:0d:74:50:44:dd:c6:50:e6:61:9a:da:f8:
                    5d:68:f1:83:ed:47:86:84:5c:85:7b:73:ff:6a:3b:
                    11:db:70:69:62:63:cf:de:56:be:28:98:8f:42:81:
                    77:d5:ec:68:23:7e:7d:d1:31:62:97:c4:a9:b7:71:
                    8e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F2:AA:FF:A3:59:9C:06:E8:E6:8A:B7:79:5F:0D:B8:F1:BC:7A:7D:6E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.8.0/22
                IPv6:
                  2804:61e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269262

    Signature Algorithm: sha256WithRSAEncryption
         82:dc:77:38:ec:fe:34:4d:b8:24:78:1a:50:93:fc:9f:90:8f:
         97:d6:49:67:9c:d3:e3:66:e5:f3:cf:fe:49:2d:bb:b2:c2:3e:
         4e:c0:77:42:60:93:1b:40:05:61:8e:88:b1:6b:73:c3:9e:13:
         c2:be:41:d3:38:5d:4b:57:50:10:d1:cb:6f:12:aa:ca:f6:a3:
         a5:2c:0a:57:c3:dc:ac:a9:dc:3a:3c:ce:29:5a:90:55:e6:9c:
         61:e5:c8:28:b9:7e:78:44:0a:44:f3:30:94:c8:a1:b0:cf:ea:
         4d:41:fd:90:72:e5:a0:0f:3a:04:76:42:d0:29:1c:7a:d3:03:
         b2:65:de:55:3d:33:29:c9:9b:19:54:8a:f4:34:ed:04:2a:89:
         d5:0f:31:68:b1:2d:90:36:bc:b5:69:68:4e:12:46:7f:9a:10:
         9c:5e:d5:f9:2e:d2:84:b7:ef:46:52:82:ef:0d:3b:3d:8b:38:
         46:7a:b6:8b:c4:93:74:d1:5f:8c:5a:cb:87:5b:7c:cd:73:e3:
         61:15:0b:16:f4:91:19:60:97:e7:2d:59:58:31:48:cc:48:64:
         b6:3a:ad:8e:67:fa:1e:9e:e6:f5:7f:6f:46:4a:5b:63:39:ad:
         8e:a7:c4:4e:0a:12:37:ff:3f:6b:a4:3c:a5:d5:57:67:73:24:
         4e:7e:7e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 07:17:37 2024 by rpki-client on console-fra.rpki-client.org