Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F.cer
File:                     FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F.cer (raw, json)
Hash identifier:          oDEi9fqsXlnv+N9CU+1mXVMSMNiO7Y+S55fTPutnrDg=
Subject key identifier:   FC:68:8B:7E:5E:77:F5:FD:A8:7F:9C:E9:52:7A:AE:6E:C6:C5:B5:5F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       24ED600C2D2A9F8EC7B8CF9533DDF47D6D722C29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/1/FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 15:14:05 +0000
Certificate not after:    Thu 03 Apr 2025 15:19:05 +0000
Subordinate resources:    AS: 61885
                          IP: 131.0.140.0/22
                          IP: 2804:1ac8::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 03:32:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ed:60:0c:2d:2a:9f:8e:c7:b8:cf:95:33:dd:f4:7d:6d:72:2c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 15:14:05 2024 GMT
            Not After : Apr  3 15:19:05 2025 GMT
        Subject: CN=FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:56:79:e0:0b:3f:05:fe:8e:ce:9b:87:75:03:
                    8e:4b:48:a7:88:ff:0f:c2:e7:01:a3:fd:33:e8:81:
                    1d:ea:a7:dc:ec:95:ff:5e:f3:78:ce:67:3a:c5:97:
                    5a:7a:57:ba:5e:cd:04:05:c4:18:07:9f:81:ba:c8:
                    44:4d:ef:ef:d7:ac:80:fa:43:2b:ae:6d:64:cf:6c:
                    c7:f8:4c:d0:07:64:6c:0b:f6:77:c2:e0:0d:a8:02:
                    a5:e4:f5:a9:04:1f:66:83:41:b5:19:9f:3b:1c:fe:
                    98:71:30:41:7f:6f:24:3c:6c:fc:6d:d2:9f:d7:ec:
                    ba:2d:40:ba:13:65:2b:5b:20:fa:c3:03:36:2d:c7:
                    16:46:29:c7:15:42:80:7d:09:51:03:2a:76:03:8d:
                    5c:2b:35:39:a5:62:d4:46:3f:21:75:e6:47:20:78:
                    68:b5:e3:e6:21:c3:e3:cc:29:0f:83:59:46:5f:b0:
                    cc:5f:b8:b9:b1:eb:73:28:c7:78:c9:da:23:30:58:
                    2e:6a:bb:86:72:ce:97:64:15:e7:53:98:a9:23:03:
                    75:e2:eb:9f:16:9c:55:98:05:7f:7c:3d:b4:b9:f7:
                    15:7b:da:ed:b3:54:44:bb:55:35:3b:c4:4e:21:61:
                    a6:f9:c4:04:81:54:c8:4e:db:b3:41:aa:4b:d2:b9:
                    41:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FC:68:8B:7E:5E:77:F5:FD:A8:7F:9C:E9:52:7A:AE:6E:C6:C5:B5:5F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/1/FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.140.0/22
                IPv6:
                  2804:1ac8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61885

    Signature Algorithm: sha256WithRSAEncryption
         d0:f7:65:32:e3:8e:a5:ca:49:8d:a4:0d:ac:ef:49:8a:e4:89:
         46:16:cd:d0:2f:1e:b8:65:b7:08:7c:5f:12:10:22:89:26:ea:
         d2:4d:a1:56:1b:d9:e5:5d:58:2a:6d:31:b1:b7:e5:cf:f0:ad:
         51:72:55:3a:cf:7f:52:b6:89:ac:28:c6:10:56:68:cf:c6:8e:
         ab:34:b4:11:6c:9a:67:a0:33:cb:ff:ea:c8:fe:47:ab:ca:11:
         c0:30:c9:b2:e5:99:c8:15:3e:04:af:9f:ce:04:63:82:19:2f:
         ec:38:e8:db:64:d6:46:7e:dc:d3:93:05:c0:30:a5:29:94:15:
         b5:5c:5f:83:12:50:8d:9b:63:5e:39:0e:9f:3d:de:71:48:ce:
         73:6c:b1:6f:58:19:af:d2:32:c9:d0:72:62:60:ca:50:8c:de:
         00:a2:47:2a:73:06:1c:4e:19:7f:38:1f:e2:1f:f5:15:19:28:
         8b:9e:70:f7:7f:a6:dc:40:0f:09:69:ff:72:80:ca:9e:03:5a:
         40:39:18:25:6a:87:d9:24:fa:f8:13:e7:97:65:79:71:80:4b:
         08:b9:f7:e9:55:e4:6d:73:fc:31:36:c0:37:8f:55:87:8e:90:
         b1:d9:65:ae:f9:54:0a:d6:19:62:f3:70:78:80:9e:6f:af:c9:
         cd:90:f3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:35:26 2024 by rpki-client on console-fra.rpki-client.org