Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FB6D7199BFDFE92288F7B49F621FD09D2FF9FE89.cer
File:                     FB6D7199BFDFE92288F7B49F621FD09D2FF9FE89.cer (raw, json)
Hash identifier:          aJ77TSkwouQbJYcLXv8a8PkP14W4LjZY/0AsMAJKYDc=
Subject key identifier:   FB:6D:71:99:BF:DF:E9:22:88:F7:B4:9F:62:1F:D0:9D:2F:F9:FE:89
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6BC2FA9015651A37150FBFF2273878493DE0D140
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/FB6D7199BFDFE92288F7B49F621FD09D2FF9FE89.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 Jul 2024 17:21:27 +0000
Certificate not after:    Thu 24 Jul 2025 17:26:27 +0000
Subordinate resources:    AS: 271304
                          IP: 200.53.68.0/22
                          IP: 2804:796c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:c2:fa:90:15:65:1a:37:15:0f:bf:f2:27:38:78:49:3d:e0:d1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 25 17:21:27 2024 GMT
            Not After : Jul 24 17:26:27 2025 GMT
        Subject: CN=FB6D7199BFDFE92288F7B49F621FD09D2FF9FE89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:42:e8:b9:8f:8b:ab:7e:09:64:dd:9b:73:15:
                    78:b1:21:16:c1:bd:8c:9e:bd:46:c7:8a:73:e5:f5:
                    b4:0e:98:11:c3:1d:d2:86:b3:b1:f6:31:89:c6:fc:
                    bf:93:d4:51:4e:98:f7:82:e9:43:14:6f:9c:5f:af:
                    ca:f6:65:26:6c:76:36:70:78:1c:6d:fe:c4:02:5a:
                    d3:85:98:f4:75:66:37:20:b1:70:7f:a0:25:a8:6c:
                    84:29:13:a1:c2:a5:04:ab:c1:b3:c2:59:d8:58:d6:
                    e4:1e:9f:4e:36:12:9c:0e:52:bf:f7:f0:c4:cc:3d:
                    42:a5:cc:23:34:e4:86:0e:27:27:2d:a6:e3:a4:22:
                    cd:bc:f2:87:1c:59:6b:f1:40:22:6a:ab:e7:b4:84:
                    94:b4:77:6e:6a:7a:14:be:6a:e6:90:7f:b3:c1:cb:
                    63:d6:e6:de:66:69:d9:a7:37:9e:35:45:94:c4:03:
                    9e:b8:7d:15:bd:1f:d1:4f:28:59:63:48:17:b5:1c:
                    40:57:83:70:98:09:b4:06:0b:9c:66:99:f9:15:70:
                    65:c6:bc:31:5b:8d:ab:94:2b:aa:02:41:ef:1e:dc:
                    85:a5:69:ba:1c:59:40:58:59:01:ea:b5:28:04:7a:
                    05:e5:48:7d:fa:a1:a0:dd:a7:0f:f9:9f:85:d2:fe:
                    6b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FB:6D:71:99:BF:DF:E9:22:88:F7:B4:9F:62:1F:D0:9D:2F:F9:FE:89
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/FB6D7199BFDFE92288F7B49F621FD09D2FF9FE89.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.68.0/22
                IPv6:
                  2804:796c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271304

    Signature Algorithm: sha256WithRSAEncryption
         7f:b6:07:d3:3d:69:f0:64:cb:bc:0e:fd:4e:bf:6f:36:b2:a9:
         35:9b:d3:dd:e3:af:a2:39:c9:16:01:02:3f:a4:51:ef:ff:66:
         66:ee:de:d7:b4:bc:07:ae:6c:7b:9a:f7:37:c0:a6:cb:e6:e9:
         f3:d5:fc:90:3e:19:c9:e5:9c:f2:ce:ad:05:5b:59:07:26:80:
         60:68:b7:c7:33:05:c2:50:5e:d3:e2:36:69:25:47:fc:39:22:
         2a:13:fc:83:b4:b1:c4:06:ac:da:2c:51:aa:91:3e:cf:a6:ff:
         72:e8:22:3b:06:d8:6d:6e:ad:c4:51:1d:95:e3:fe:85:03:f8:
         1c:b0:eb:80:40:d2:62:c4:66:8d:52:e4:37:b1:1a:9d:64:52:
         eb:ca:55:d6:8c:74:30:c8:b7:ca:9c:6e:4c:b7:bf:f3:ac:75:
         ab:bc:c3:3e:c7:c6:cd:1e:e1:b9:93:ae:0b:df:6b:c5:b5:1c:
         d2:bf:93:23:2e:08:9e:e9:36:da:72:4c:a8:eb:08:ac:6e:37:
         d9:61:62:99:60:aa:04:bf:51:2f:9d:98:8f:f2:bf:02:1e:a1:
         37:27:b3:68:ea:8a:89:b7:ab:4b:27:1f:2f:83:14:ee:bb:dd:
         05:d3:fe:8a:3a:ed:3e:4e:a0:8c:3e:20:c2:c6:ac:83:a1:74:
         cf:1a:bc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:03:44 2024 by rpki-client on console-fra.rpki-client.org