Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FFFC078448D76222F00690DC23A9C960738B25A8.cer
File:                     FFFC078448D76222F00690DC23A9C960738B25A8.cer (raw, json)
Hash identifier:          dt7+f6a0tkjuhTkw3ru8/pjz02LZtZuYRIvNKgMlEBU=
Subject key identifier:   FF:FC:07:84:48:D7:62:22:F0:06:90:DC:23:A9:C9:60:73:8B:25:A8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       630BEAEE7ADCCCBA6927D95EABADF9A159803375
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6PkGV9E7K4GLjCxJivwLFN5r82JF87uLSAdrpv6Cev1B/1/FFFC078448D76222F00690DC23A9C960738B25A8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6PkGV9E7K4GLjCxJivwLFN5r82JF87uLSAdrpv6Cev1B/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 May 2024 13:39:35 +0000
Certificate not after:    Thu 08 May 2025 13:44:35 +0000
Subordinate resources:    AS: 266925
                          IP: 45.224.244.0/22
                          IP: 2804:456c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 02:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:0b:ea:ee:7a:dc:cc:ba:69:27:d9:5e:ab:ad:f9:a1:59:80:33:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  9 13:39:35 2024 GMT
            Not After : May  8 13:44:35 2025 GMT
        Subject: CN=FFFC078448D76222F00690DC23A9C960738B25A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b0:fc:85:e3:de:1a:de:47:5e:0f:ae:53:66:
                    91:96:75:ee:57:fe:8e:52:b4:94:12:9f:ad:a0:db:
                    b7:3e:fe:32:1b:aa:e7:83:48:bc:9d:6c:c0:92:cc:
                    11:4b:a4:91:24:10:37:2e:1a:06:49:09:76:80:13:
                    12:7a:78:bd:0d:d6:7b:55:ef:33:20:a1:ae:18:a2:
                    ca:86:7d:f0:a9:f4:cc:34:4b:06:1c:54:50:34:cc:
                    96:17:f0:85:27:e5:fd:2a:93:d4:df:5c:d3:31:6d:
                    ea:1a:f9:f3:09:dc:9f:bc:c7:a8:37:e3:d6:6c:83:
                    db:41:26:00:c8:95:da:48:dc:1e:1b:73:bd:ff:dc:
                    d3:4b:2b:66:57:83:64:c6:4f:90:1f:57:dd:ee:d7:
                    1b:59:6a:b6:6c:ad:c0:4a:35:03:db:92:d0:09:85:
                    75:13:53:72:e2:1c:ca:8e:01:e5:e3:ba:62:02:75:
                    df:c8:40:24:a9:c8:88:97:a3:8c:5d:20:2a:a8:e8:
                    9c:c0:9e:8a:ca:1d:cb:f9:d9:07:e0:2e:cd:57:17:
                    07:ed:c4:9c:18:60:5b:d8:7a:aa:80:df:f2:7a:4f:
                    59:36:1a:20:19:db:2c:eb:57:66:70:ca:fe:25:0b:
                    b9:37:20:08:e0:d5:91:87:15:bb:96:f4:d2:df:4a:
                    ec:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FF:FC:07:84:48:D7:62:22:F0:06:90:DC:23:A9:C9:60:73:8B:25:A8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6PkGV9E7K4GLjCxJivwLFN5r82JF87uLSAdrpv6Cev1B/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6PkGV9E7K4GLjCxJivwLFN5r82JF87uLSAdrpv6Cev1B/1/FFFC078448D76222F00690DC23A9C960738B25A8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.244.0/22
                IPv6:
                  2804:456c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266925

    Signature Algorithm: sha256WithRSAEncryption
         5b:dc:8f:58:dc:ec:66:1e:de:ef:95:cd:62:a3:d7:50:cc:48:
         04:a4:0f:1d:65:e4:3e:34:dd:e4:23:3e:bc:20:b4:06:90:b3:
         55:2f:7d:18:a6:24:89:8c:4c:45:76:44:4b:83:fe:b9:c9:c6:
         39:c7:66:6f:bb:dc:6d:69:00:ee:f9:d4:c4:c5:c4:2a:f1:db:
         e7:9b:b1:34:a7:1b:32:e7:d3:31:62:b7:5f:45:76:d1:bc:fb:
         bc:50:73:03:7d:05:0e:83:ae:b2:22:5d:5f:c1:73:dc:e9:44:
         0f:9e:8e:f9:41:66:12:d5:dd:d6:44:50:d0:b4:56:1b:78:ce:
         43:31:2d:5e:3d:df:c1:a7:9e:53:38:13:ea:4c:01:63:33:81:
         d0:00:19:19:4e:08:0c:5c:39:55:b9:77:72:53:29:ca:40:f8:
         27:b8:80:87:12:de:6a:3f:ec:f1:a8:00:54:af:d8:de:fc:35:
         5e:43:b3:d2:86:e1:0d:8e:ba:97:b1:9c:f8:0a:3e:36:50:02:
         10:33:6a:f1:67:c1:ec:f4:02:ad:d0:34:ad:38:e2:81:64:bf:
         a9:eb:ca:ab:83:f8:65:56:cf:db:15:7f:c3:de:ba:2f:08:dd:
         04:c6:03:0b:f5:fc:ab:c5:48:47:23:d9:a6:80:bc:63:c4:e7:
         ae:a2:87:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:06:44 2024 by rpki-client on console-fra.rpki-client.org