Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.cer
File:                     FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.cer (raw, json)
Hash identifier:          g9aa/a+f3KlemCEOSgVlJEpoq3wed8ef14NDYJvJ4+w=
Subject key identifier:   FA:ED:B0:9B:70:5F:EF:6A:6E:14:D8:F6:8D:6E:E4:4B:C2:F1:28:94
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1AC1DDB7A947C6F762C56E165140EA69B55E7E6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Jul 2024 12:05:28 +0000
Certificate not after:    Wed 02 Jul 2025 12:10:28 +0000
Subordinate resources:    AS: 52910
                          IP: 186.251.38.0/24
                          IP: 2804:1f3c::/36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c1:dd:b7:a9:47:c6:f7:62:c5:6e:16:51:40:ea:69:b5:5e:7e:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  3 12:05:28 2024 GMT
            Not After : Jul  2 12:10:28 2025 GMT
        Subject: CN=FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a4:b3:a3:b6:b5:b4:ee:24:1d:a6:f8:77:5b:
                    5d:57:77:27:7c:d8:86:d6:c3:d5:a7:29:de:8a:9b:
                    d1:20:9e:9b:f5:ac:45:f4:26:cb:5f:57:cb:0c:21:
                    25:c9:69:34:b5:32:a6:ed:95:f9:2e:0a:8f:1e:15:
                    d6:60:bb:9f:95:0b:2e:2b:2b:03:55:3e:a5:04:69:
                    b2:a0:5d:b0:4d:1b:1a:d8:ed:65:35:40:b9:3d:ac:
                    92:41:72:a1:c5:0e:a3:5c:b0:2a:ff:6e:ff:1e:1e:
                    4e:86:7c:cc:b7:4a:b2:2c:f6:cf:eb:19:30:6d:86:
                    a2:d0:42:da:4a:a8:eb:fe:fc:96:5a:54:0b:ae:24:
                    9e:78:d1:18:92:7b:ee:76:bb:72:0d:e1:d9:76:d2:
                    9c:5b:e7:be:67:3c:6a:91:1f:39:09:d4:3e:ea:ba:
                    a1:c1:02:66:20:fa:96:e3:94:83:9c:bb:56:4e:a1:
                    71:f5:2b:38:58:96:94:39:33:46:b6:70:3e:28:32:
                    71:fa:af:0a:ab:83:cd:7d:07:b2:11:9b:1d:10:0f:
                    ef:ec:d5:85:59:fc:69:d0:51:34:87:6e:d6:fb:7a:
                    22:f4:41:de:35:6f:52:8f:33:a1:f6:28:a5:68:c2:
                    13:49:a7:1a:a3:f2:bc:d3:6a:82:8a:6e:26:49:90:
                    b7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FA:ED:B0:9B:70:5F:EF:6A:6E:14:D8:F6:8D:6E:E4:4B:C2:F1:28:94
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.38.0/24
                IPv6:
                  2804:1f3c::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52910

    Signature Algorithm: sha256WithRSAEncryption
         c5:9e:d4:c7:2a:9c:09:03:7b:9f:b5:e4:35:8a:04:45:9b:84:
         f0:f0:8a:ae:57:0b:c3:73:71:1a:88:5d:82:be:05:60:49:e4:
         bf:23:fd:aa:c0:74:c4:49:db:d5:6b:b7:3f:14:22:b3:ce:91:
         91:af:a6:34:cb:1b:63:7e:79:9f:28:50:c6:2e:25:e6:ef:d7:
         d3:97:f9:18:48:a8:c5:a2:85:79:ff:aa:8d:8c:fc:38:23:16:
         d4:af:04:a6:8b:ea:bf:8b:24:2c:7d:3f:ca:1d:43:22:99:ef:
         76:f2:69:d5:b1:ba:65:58:51:63:f4:f6:25:3b:ff:20:bb:25:
         ec:93:f3:fd:0f:a7:a2:31:f4:10:4b:ee:82:b0:34:8e:79:9c:
         8b:41:d4:56:22:08:a2:9a:1f:b9:94:aa:e1:d1:40:3f:2c:e5:
         86:04:20:58:c2:17:ad:ba:c7:21:38:65:77:13:f4:2c:c2:73:
         0e:82:31:f3:a7:92:ba:0f:fe:b9:01:08:e1:14:3d:bc:f6:6e:
         4c:f4:87:54:2b:01:13:0c:45:a4:4a:f3:f4:2c:4b:6b:12:9f:
         b0:36:c1:ce:53:fa:0b:ed:de:25:eb:ae:3d:a9:e3:2d:e0:c7:
         46:ca:68:38:69:ba:c2:13:fa:3c:ab:f0:4a:92:3d:91:6a:7f:
         8b:9e:eb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:31:06 2024 by rpki-client on console-fra.rpki-client.org