Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FFFBC5685534C8804F357B94962CC9A5C9EBEEA9.cer
File:                     FFFBC5685534C8804F357B94962CC9A5C9EBEEA9.cer (raw, json)
Hash identifier:          ydsVQj/KbbQoVHqi23bfgxAKs+zioY6KHjtPEhJcVMg=
Subject key identifier:   FF:FB:C5:68:55:34:C8:80:4F:35:7B:94:96:2C:C9:A5:C9:EB:EE:A9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6672DEA11C9FDBB889374B9250410C7DD9037CB8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2tKh9qNeaJEd5gM9oUNPXFEXgUEunVzKk5D2GmyW49Zz/0/FFFBC5685534C8804F357B94962CC9A5C9EBEEA9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2tKh9qNeaJEd5gM9oUNPXFEXgUEunVzKk5D2GmyW49Zz/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 Jul 2024 12:26:06 +0000
Certificate not after:    Thu 24 Jul 2025 12:31:06 +0000
Subordinate resources:    AS: 268383
                          IP: 45.239.220.0/22
                          IP: 2804:5058::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:72:de:a1:1c:9f:db:b8:89:37:4b:92:50:41:0c:7d:d9:03:7c:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 25 12:26:06 2024 GMT
            Not After : Jul 24 12:31:06 2025 GMT
        Subject: CN=FFFBC5685534C8804F357B94962CC9A5C9EBEEA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e1:8c:71:40:8a:27:ad:df:dd:7e:5a:2f:55:
                    1c:56:68:e3:18:01:cc:9a:84:f7:45:27:d0:a0:96:
                    79:fe:40:98:4c:36:31:bf:a4:a9:26:8d:62:1c:04:
                    84:0f:07:f6:f9:db:db:f4:c1:ba:c3:d7:5a:14:c3:
                    db:39:9e:de:1c:1b:c0:bd:f8:2c:9b:18:3f:61:3f:
                    cd:e4:aa:2a:19:e6:89:0d:48:3b:85:c4:19:1e:28:
                    01:5d:f2:3d:03:d1:32:83:a0:cc:0b:80:45:3f:b2:
                    ba:87:0d:95:ed:4d:7d:a6:01:e3:10:0f:f2:bb:b0:
                    3e:32:05:bc:fe:8d:b5:d9:6d:86:e5:18:b5:67:91:
                    bb:4f:01:08:96:8f:1a:c2:66:72:b2:46:c7:3a:eb:
                    64:e3:ff:c3:0f:c5:a8:39:57:d1:27:1d:68:81:a5:
                    1a:ea:de:ef:00:ee:d9:3c:cf:f9:83:d7:4d:52:46:
                    e9:6b:61:9c:f5:ff:f1:23:76:50:b8:7d:77:ab:d3:
                    b5:f1:00:54:e2:c5:64:5e:cf:70:5d:1b:7b:61:8c:
                    7b:1b:b2:d0:7a:d3:e8:68:f3:43:12:d1:6e:0d:21:
                    a9:c6:c4:b1:30:4d:89:fe:44:d3:39:75:3f:f8:17:
                    db:66:e8:1a:c5:18:43:87:5d:c3:8c:e7:a5:86:c4:
                    73:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FF:FB:C5:68:55:34:C8:80:4F:35:7B:94:96:2C:C9:A5:C9:EB:EE:A9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2tKh9qNeaJEd5gM9oUNPXFEXgUEunVzKk5D2GmyW49Zz/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2tKh9qNeaJEd5gM9oUNPXFEXgUEunVzKk5D2GmyW49Zz/0/FFFBC5685534C8804F357B94962CC9A5C9EBEEA9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.220.0/22
                IPv6:
                  2804:5058::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268383

    Signature Algorithm: sha256WithRSAEncryption
         4b:fd:12:41:83:90:b0:1b:2a:67:de:b4:b9:b9:3c:63:a0:6c:
         61:be:87:d8:9a:27:f0:45:71:a9:bf:23:05:0f:d0:c1:32:df:
         dd:97:ab:59:5a:ac:af:e8:9c:65:5d:3e:45:40:23:98:ce:af:
         88:dc:4c:d5:6a:2a:7b:a7:3e:25:41:0a:c5:45:1d:4a:2e:1b:
         d7:92:28:59:11:7c:ca:b9:c2:fe:18:64:2c:d0:b0:81:80:7b:
         f0:23:4f:52:2d:f1:62:e3:40:8d:e2:14:c1:a7:c7:5d:98:84:
         ce:37:d4:90:ad:f8:4a:0d:02:c8:1b:bd:4a:2e:f6:16:28:17:
         ae:70:86:77:b5:fb:a5:d7:ca:87:04:dc:e6:6e:f6:64:ce:c4:
         55:cc:1f:76:2c:72:8e:a2:e1:0d:cd:b2:d7:50:a0:6d:d6:c4:
         64:94:cc:41:b7:7b:43:b3:4b:7d:03:1b:e3:e5:db:0d:e8:d9:
         73:57:b6:c7:89:23:98:a2:e5:26:a0:a8:07:95:5e:40:b8:9f:
         d4:d0:b5:76:74:c9:9c:8a:e7:03:b1:8d:e6:3a:3c:5f:b5:2d:
         e1:84:ce:fc:a1:21:87:33:1d:13:4a:66:d4:a7:09:12:7a:74:
         54:18:9a:0e:1c:11:13:09:b2:fb:67:ad:7a:a8:d6:ff:81:e5:
         9f:66:6f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:21 2024 by rpki-client on console-fra.rpki-client.org