Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FB00CA0598A73490EF0DBF449C1D7858B1B875CF.cer
File:                     FB00CA0598A73490EF0DBF449C1D7858B1B875CF.cer (raw, json)
Hash identifier:          jIdqqD4rd5OXj/3AZFs7r7qEp15LEQS3YyQK8nlEON4=
Subject key identifier:   FB:00:CA:05:98:A7:34:90:EF:0D:BF:44:9C:1D:78:58:B1:B8:75:CF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1EED8B041275A4824D6CE67CECD95A9BEA48CA45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/48UQk1DpVCnVRAHM9zjkJDZJkJhmabUUUwSBQ41fo2fa/0/FB00CA0598A73490EF0DBF449C1D7858B1B875CF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/48UQk1DpVCnVRAHM9zjkJDZJkJhmabUUUwSBQ41fo2fa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 Apr 2024 18:10:34 +0000
Certificate not after:    Tue 29 Apr 2025 18:15:34 +0000
Subordinate resources:    AS: 53100
                          IP: 187.103.128.0/20
                          IP: 2804:c0::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 00:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ed:8b:04:12:75:a4:82:4d:6c:e6:7c:ec:d9:5a:9b:ea:48:ca:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 30 18:10:34 2024 GMT
            Not After : Apr 29 18:15:34 2025 GMT
        Subject: CN=FB00CA0598A73490EF0DBF449C1D7858B1B875CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1b:cb:56:a4:64:58:8e:24:3d:14:82:d3:28:
                    99:78:9c:09:5c:e0:b6:13:0f:96:a0:ff:b4:32:01:
                    df:2a:95:b1:a0:49:2b:c5:f5:76:5a:55:4b:e5:47:
                    97:f9:52:84:71:66:14:20:16:f8:99:ef:4d:ff:0d:
                    29:08:3a:8c:2a:45:b3:ff:59:16:01:7d:2a:50:28:
                    d3:cd:3f:6e:52:bc:a2:c0:19:22:c9:50:ee:84:a6:
                    d3:71:de:57:81:aa:75:b5:35:c0:6b:96:fe:93:40:
                    57:c1:c6:74:c7:fc:eb:06:34:b0:b6:2a:90:97:32:
                    6f:1d:e8:82:55:fe:84:8d:49:9e:4e:36:8d:c7:fb:
                    b4:5f:dc:ea:5d:82:3e:4f:1d:8f:14:51:bf:35:57:
                    d7:10:af:d3:18:18:16:f2:fe:2f:47:8b:46:aa:27:
                    ad:6e:ff:b9:36:b3:45:3f:b2:1b:ad:05:d9:15:72:
                    ba:2e:26:31:39:a4:af:b1:30:a5:a5:62:38:23:8d:
                    eb:67:8b:0f:01:89:e7:9e:26:06:ee:2b:14:95:4e:
                    48:b6:c3:49:3a:97:70:c8:ef:56:da:c5:f0:a7:d4:
                    f0:8f:86:11:af:cc:4a:93:0d:dc:14:02:93:e0:e9:
                    c1:eb:7a:21:22:9c:04:25:5a:3c:49:66:69:64:9b:
                    73:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FB:00:CA:05:98:A7:34:90:EF:0D:BF:44:9C:1D:78:58:B1:B8:75:CF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/48UQk1DpVCnVRAHM9zjkJDZJkJhmabUUUwSBQ41fo2fa/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/48UQk1DpVCnVRAHM9zjkJDZJkJhmabUUUwSBQ41fo2fa/0/FB00CA0598A73490EF0DBF449C1D7858B1B875CF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.128.0/20
                IPv6:
                  2804:c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53100

    Signature Algorithm: sha256WithRSAEncryption
         41:71:36:5b:05:ad:da:b9:42:8e:e9:dc:97:f7:50:b9:9b:77:
         c5:6a:70:b8:37:89:7d:aa:07:29:cd:c9:59:49:0b:5d:bb:e3:
         c9:91:ef:72:0f:34:01:22:51:f5:2c:32:2e:f3:8c:0e:0e:26:
         d5:72:60:82:46:36:34:8e:4d:8c:ed:5e:54:d1:e4:f1:30:68:
         83:c1:1a:ba:28:f8:f1:79:72:2c:63:41:bf:cd:4e:2f:64:78:
         24:be:1e:7e:86:5d:38:f1:cd:0e:03:09:ea:c9:51:7f:e9:be:
         76:be:54:c8:e1:2a:ec:a1:37:e2:3d:11:a9:c2:9a:ac:cd:34:
         b0:40:1e:7b:9a:3f:67:11:a6:4d:9d:65:50:c6:3f:8a:49:dc:
         0e:eb:bc:4a:86:bc:fa:ed:db:69:4e:06:eb:18:e1:8e:67:25:
         48:a6:eb:40:dc:f0:ae:7a:97:9f:7a:94:7b:f6:ce:85:2c:e2:
         66:5f:de:ce:12:eb:5d:18:16:a4:1a:ae:82:23:95:13:64:5b:
         a6:d2:90:35:91:9a:a3:8a:63:16:f5:e5:a0:7f:c9:07:05:aa:
         23:2b:be:49:4f:65:69:c2:40:c7:4c:f1:e2:86:7f:73:9e:8a:
         dd:9f:ac:bf:24:66:64:77:f3:6b:38:16:02:c1:b7:cd:17:8a:
         56:2e:b5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:00:36 2024 by rpki-client on console-ams.rpki-client.org