Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/14C031B5DB12666C2E130FC76F30D7C942EE390F.cer
File:                     14C031B5DB12666C2E130FC76F30D7C942EE390F.cer (raw, json)
Hash identifier:          /iYMwA/wSOKvLKNwL2OrkMbQhPuxzqek85wjcbRFhVI=
Subject key identifier:   14:C0:31:B5:DB:12:66:6C:2E:13:0F:C7:6F:30:D7:C9:42:EE:39:0F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6FDDC235491F40EC19A06A797764B8F9D92B6D5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/2/14C031B5DB12666C2E130FC76F30D7C942EE390F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/2
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 06:38:37 +0000
Certificate not after:    Thu 03 Apr 2025 06:43:37 +0000
Subordinate resources:    AS: 23289
                          IP: 200.160.208.0/20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 06:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:dd:c2:35:49:1f:40:ec:19:a0:6a:79:77:64:b8:f9:d9:2b:6d:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 06:38:37 2024 GMT
            Not After : Apr  3 06:43:37 2025 GMT
        Subject: CN=14C031B5DB12666C2E130FC76F30D7C942EE390F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4b:17:d6:6d:1e:49:cd:6f:3e:bc:d0:4d:fd:
                    73:9f:ff:f2:d8:0a:86:2f:00:a6:9f:96:f3:8f:05:
                    49:27:6a:79:84:ab:7f:6b:b3:3f:1b:de:ac:ba:18:
                    85:bf:1f:d4:8d:b5:e4:1c:97:9b:34:b5:fe:8c:af:
                    0b:80:0b:c6:88:65:1f:1d:c4:0e:f9:c6:7f:f7:b8:
                    15:46:b8:7f:2f:d8:3e:38:64:e5:8c:31:4f:bf:f4:
                    05:6f:13:a0:91:33:fe:dd:95:e7:f5:95:cf:36:ec:
                    dd:55:4e:ff:e0:08:28:3e:26:3e:68:1b:61:a0:0e:
                    37:41:0d:cc:5f:ee:51:77:57:40:16:4e:92:b6:6b:
                    ec:30:34:03:bd:3e:a9:bd:58:dc:12:ee:74:1f:cf:
                    d8:a1:bc:6b:e9:a2:1d:16:03:1a:61:fd:19:83:b2:
                    c4:94:27:51:b7:ad:8f:ef:51:05:89:4c:be:28:96:
                    d5:c6:56:24:e7:11:41:ff:05:ac:28:6c:10:a7:34:
                    f6:c4:e2:c0:ef:d1:4b:5c:23:3e:b2:ed:95:7b:9a:
                    3c:6d:92:ef:25:86:30:0c:28:53:90:97:f7:ba:fe:
                    8f:0e:07:7f:f0:51:96:70:35:26:7c:bc:d2:44:c5:
                    29:fd:a4:c8:3f:4b:0a:72:bc:00:37:6c:12:e9:d7:
                    80:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                14:C0:31:B5:DB:12:66:6C:2E:13:0F:C7:6F:30:D7:C9:42:EE:39:0F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/2
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/2/14C031B5DB12666C2E130FC76F30D7C942EE390F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.160.208.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23289

    Signature Algorithm: sha256WithRSAEncryption
         32:c1:0a:15:36:28:c2:3d:0e:4a:28:5f:26:2d:ea:77:b5:86:
         40:28:30:bb:02:9f:bc:eb:fb:b1:cf:2c:6f:d4:6b:f2:8c:5a:
         c2:f1:23:8b:c8:1b:92:22:02:fc:9d:00:e9:10:69:3a:d0:a0:
         6c:de:55:ea:36:75:e5:b9:26:21:1e:69:6e:94:a4:5b:15:b9:
         cb:40:9b:4c:cf:8e:fb:83:fb:fe:43:d0:0e:fe:6e:ea:23:ae:
         d0:f1:9c:d3:96:b1:4e:22:93:ee:24:9d:d9:a1:af:4e:84:57:
         90:be:e6:57:ed:d5:86:35:80:2d:44:5f:a4:9b:69:69:b2:7e:
         cc:45:0e:30:fa:f0:9b:2b:e3:2b:80:3c:74:2a:7d:c6:ec:48:
         a8:43:27:fc:88:ee:37:ef:de:6b:85:18:34:02:e9:b2:54:c6:
         d1:0c:b9:9a:11:80:ee:06:4d:8c:d9:38:7b:35:f9:91:d2:6a:
         0b:87:ba:77:6c:9e:d4:11:56:8d:27:15:7e:f6:fa:95:f8:8f:
         37:c4:e0:7b:b5:1e:46:96:89:d9:c5:f6:e0:67:fd:0d:79:ba:
         b7:43:be:18:8b:4e:4b:a4:52:d7:b0:53:54:c8:de:dd:60:74:
         f2:07:bd:af:5c:28:c5:da:5a:ad:b6:c5:5b:97:5e:f1:1d:94:
         14:d5:e2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 05:37:09 2024 by rpki-client on console-ams.rpki-client.org