Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FA5B6BA1D194F09F71907F61D710577A55EEDEDF.cer
File:                     FA5B6BA1D194F09F71907F61D710577A55EEDEDF.cer (raw, json)
Hash identifier:          b2toVGFUsHS7Sx5xQQZ26bwbjLSzNMJrVNsT5M4uxuU=
Subject key identifier:   FA:5B:6B:A1:D1:94:F0:9F:71:90:7F:61:D7:10:57:7A:55:EE:DE:DF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       65799D324C3297853EE02C5DF8BCDA758E5C1854
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7EX3Ai47QtzL21yoLGgc3HmacghStn4EQ95MA3BdPEPW/0/FA5B6BA1D194F09F71907F61D710577A55EEDEDF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7EX3Ai47QtzL21yoLGgc3HmacghStn4EQ95MA3BdPEPW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 25 Nov 2024 18:17:58 +0000
Certificate not after:    Mon 24 Nov 2025 18:22:58 +0000
Subordinate resources:    AS: 270783
                          IP: 177.131.136.0/22
                          IP: 2804:7158::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 00:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:79:9d:32:4c:32:97:85:3e:e0:2c:5d:f8:bc:da:75:8e:5c:18:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 25 18:17:58 2024 GMT
            Not After : Nov 24 18:22:58 2025 GMT
        Subject: CN=FA5B6BA1D194F09F71907F61D710577A55EEDEDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f0:f2:f5:c1:61:af:a7:1c:02:53:20:ec:8e:
                    a9:87:42:68:f5:8f:be:65:8b:46:60:e3:f8:92:2c:
                    5b:7a:79:e1:86:59:28:d8:f0:91:64:b9:0b:06:90:
                    cd:5a:ab:3a:8e:4d:92:ca:97:7e:cd:4f:fb:72:6b:
                    75:14:9d:58:b9:17:31:de:b7:c9:f4:d1:fa:e8:a7:
                    61:66:6d:d0:89:cf:63:1e:6d:71:c4:37:1f:ae:95:
                    d7:f5:88:f6:7a:ee:ed:79:63:9b:18:33:bc:f6:9c:
                    47:19:1a:4c:40:b3:79:eb:ff:4f:6c:b5:0a:26:d5:
                    04:dc:44:e4:dc:02:3f:ca:cf:a5:6e:ce:f6:8f:10:
                    27:2b:03:a6:e8:6f:46:d8:37:2e:43:f5:c5:8c:ca:
                    b6:68:5a:0c:18:e2:3f:d5:7f:36:a5:70:5a:8f:bd:
                    1a:ba:6f:29:da:67:55:ac:92:ab:2c:c4:46:3b:46:
                    d5:3f:ee:a6:d9:2b:32:67:52:42:15:89:91:8b:eb:
                    72:57:42:06:98:13:df:8d:de:6b:b4:8d:48:99:4d:
                    06:72:03:38:b4:e8:42:6b:1b:d2:70:fb:a8:f1:6a:
                    2f:da:69:cf:9f:a3:ed:70:07:27:a6:79:2f:28:38:
                    8c:0b:69:20:39:10:13:9f:c7:4d:f5:3e:61:af:4e:
                    08:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FA:5B:6B:A1:D1:94:F0:9F:71:90:7F:61:D7:10:57:7A:55:EE:DE:DF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7EX3Ai47QtzL21yoLGgc3HmacghStn4EQ95MA3BdPEPW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7EX3Ai47QtzL21yoLGgc3HmacghStn4EQ95MA3BdPEPW/0/FA5B6BA1D194F09F71907F61D710577A55EEDEDF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.131.136.0/22
                IPv6:
                  2804:7158::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270783

    Signature Algorithm: sha256WithRSAEncryption
         c2:8f:d4:22:79:79:d4:33:ef:61:d9:f2:2f:4a:31:47:e6:50:
         ee:e4:99:e2:56:70:91:00:d1:ac:f9:02:35:d1:ae:d8:9f:5d:
         05:c4:23:52:fa:c5:e6:5c:90:c1:11:a6:a0:f2:35:65:31:ba:
         91:f2:cb:97:df:df:d2:7d:eb:ee:ac:c0:3f:46:42:ac:c6:95:
         94:19:31:18:84:09:66:6e:a0:00:5c:be:cd:eb:d3:b1:5a:43:
         2d:0e:33:0f:6b:e3:b2:b8:99:fa:db:14:a5:10:c7:71:a4:1e:
         b0:25:38:67:3f:2d:c2:3e:d2:2a:98:bc:52:60:10:c6:64:f9:
         3e:9d:38:b2:89:34:6b:ab:7a:60:b3:be:6d:2f:0f:ed:69:47:
         df:d5:93:71:b0:5a:b4:8d:ec:bc:e7:44:f9:69:bb:27:63:86:
         93:c7:7c:12:6a:59:a2:50:19:64:2c:a3:84:69:86:70:c6:c3:
         2a:d6:18:c5:17:e2:5e:94:03:d5:9b:95:40:e1:65:df:22:8d:
         7f:0f:fa:2f:65:0b:e7:08:5b:fd:d8:c6:db:2b:2c:e0:26:20:
         9c:cb:74:c9:98:eb:40:f4:f9:fe:e3:41:32:3b:b1:63:e2:1b:
         c5:fc:f5:c3:19:fd:ab:a0:8b:f0:db:3a:80:86:03:e1:c0:87:
         d4:51:aa:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:17:12 2024 by rpki-client on console-fra.rpki-client.org