Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.cer
File:                     92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.cer (raw, json)
Hash identifier:          TNdKV2e7NPgQWT1kPSxyjDUl/3Y31QbRCvNXZCIKqbI=
Subject key identifier:   92:D9:D8:84:0A:39:36:32:55:BB:28:B0:D6:0B:B4:AD:3B:9C:08:D9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6D15336B437F0CF121D0EAADB1BA381879CCAC29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 19:52:46 +0000
Certificate not after:    Thu 03 Apr 2025 19:57:46 +0000
Subordinate resources:    AS: 268308
                          IP: 45.238.4.0/22
                          IP: 2804:4f28::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Jul 2024 09:05:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:15:33:6b:43:7f:0c:f1:21:d0:ea:ad:b1:ba:38:18:79:cc:ac:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 19:52:46 2024 GMT
            Not After : Apr  3 19:57:46 2025 GMT
        Subject: CN=92D9D8840A39363255BB28B0D60BB4AD3B9C08D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c1:2c:64:d1:50:2f:f6:c9:af:13:44:f0:c4:
                    66:8f:96:b1:b9:5b:12:cd:50:f4:b9:f8:bb:8d:94:
                    b2:11:25:ae:7d:b7:db:67:07:bf:c4:f0:81:68:43:
                    33:c7:fb:eb:45:d3:8a:61:af:d8:ff:5d:d7:f4:70:
                    84:88:cf:1d:54:50:d2:a8:61:f9:d3:c7:42:47:8d:
                    70:08:37:c7:0e:a1:e0:54:89:b1:7d:1d:27:ef:2b:
                    f0:d5:4c:6b:b1:37:ee:0b:33:09:78:19:6d:99:70:
                    9a:21:58:4c:04:5a:cb:cd:6b:70:99:ca:b4:d8:26:
                    a7:b3:4d:02:c5:cd:5f:f2:6f:e6:25:22:87:9f:72:
                    8d:eb:46:6f:14:4d:e0:f6:3f:90:df:f7:d7:20:50:
                    3e:b5:b7:14:e1:90:d9:7e:68:1f:29:3f:45:86:39:
                    11:be:28:42:f2:b1:8b:b6:47:75:52:d5:59:ed:e8:
                    b3:27:c6:65:40:99:67:56:97:be:90:8e:1f:23:2d:
                    bc:23:d9:27:8a:a6:7e:db:53:32:88:05:6b:71:5d:
                    67:cb:2f:33:e6:a3:97:fa:bb:90:7c:32:f0:2a:58:
                    3a:b1:69:17:51:ae:88:bd:e6:c5:11:13:04:b8:a7:
                    54:38:d4:ad:c5:10:54:9d:7b:ed:2d:62:05:15:0b:
                    c3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                92:D9:D8:84:0A:39:36:32:55:BB:28:B0:D6:0B:B4:AD:3B:9C:08:D9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.4.0/22
                IPv6:
                  2804:4f28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268308

    Signature Algorithm: sha256WithRSAEncryption
         a1:84:53:c6:1a:79:4f:0d:5f:ac:46:fb:94:06:58:87:fb:86:
         f7:14:1d:e6:80:07:48:6a:f3:bb:bd:85:27:86:4c:b5:56:38:
         6b:cc:79:e9:25:a0:2c:eb:d7:42:53:99:33:38:7c:44:8a:fc:
         98:1b:75:b7:32:34:de:39:b5:52:ec:cf:75:5f:17:e4:6f:df:
         05:0e:ee:e3:05:26:64:7a:6c:9f:a3:70:eb:07:6c:6a:15:26:
         cf:32:22:36:63:40:ad:96:97:2d:85:06:5a:c8:0d:da:8a:02:
         b2:e2:9d:7d:f0:52:6b:f7:e3:95:cc:66:3a:93:17:1c:52:a3:
         3d:91:2e:3b:4e:52:d8:85:9c:1d:d0:e0:b6:8c:47:30:a7:b8:
         92:10:ea:1e:fd:db:49:19:40:57:67:df:1b:c9:84:0c:73:65:
         0e:7f:52:bc:7a:6c:a4:37:6a:b8:51:a4:58:d2:d4:80:2e:82:
         49:99:7c:f7:38:7c:4d:1a:ae:92:1e:24:e7:49:09:80:33:f9:
         fc:c2:ab:45:fc:12:69:da:ac:e2:c0:d1:22:2f:3e:eb:e8:fd:
         5a:3f:48:c6:b5:f1:b6:d6:05:7e:e1:91:e4:9e:e9:6f:e8:76:
         b1:65:9b:4c:af:e6:36:36:94:0a:ba:71:dd:9c:b9:e5:a5:d7:
         f8:10:9c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 08:42:50 2024 by rpki-client on console-fra.rpki-client.org