Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/022A5382F6AB07ABD3C44930CF179443F389439D.cer
File:                     022A5382F6AB07ABD3C44930CF179443F389439D.cer (raw, json)
Hash identifier:          kGDph65cVdegQ6ctR4wjHXSmo8i/7U/FhPSkvF4O8SA=
Subject key identifier:   02:2A:53:82:F6:AB:07:AB:D3:C4:49:30:CF:17:94:43:F3:89:43:9D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7CBB5B900D229C6A9C189ECA66FB00579ECB71E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/022A5382F6AB07ABD3C44930CF179443F389439D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 04 Dec 2024 20:31:45 +0000
Certificate not after:    Wed 03 Dec 2025 20:36:45 +0000
Subordinate resources:    AS: 269667
                          IP: 45.191.60.0/22
                          IP: 2804:680c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 21 Feb 2025 00:28:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:bb:5b:90:0d:22:9c:6a:9c:18:9e:ca:66:fb:00:57:9e:cb:71:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  4 20:31:45 2024 GMT
            Not After : Dec  3 20:36:45 2025 GMT
        Subject: CN=022A5382F6AB07ABD3C44930CF179443F389439D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ac:9f:63:b3:2d:34:94:8d:68:84:29:ac:6c:
                    df:69:c4:49:d1:35:8f:15:2b:5e:9a:9f:26:6c:89:
                    b2:d1:c7:97:c0:1c:98:bb:e9:8d:bd:62:ae:41:26:
                    40:a5:3d:ba:ae:0e:51:1e:3a:c7:61:18:3f:76:12:
                    f8:80:ee:08:90:ba:a8:9a:34:31:06:b5:fd:90:14:
                    6e:22:c9:f3:09:e1:d5:25:0f:5b:58:90:1a:6d:8a:
                    aa:fd:13:bb:8f:be:c4:40:42:ee:d8:2a:47:a4:05:
                    46:51:b8:a5:fa:a2:1e:85:52:5a:f9:7b:db:2f:13:
                    15:e7:ca:2a:f1:f9:b8:fc:7c:96:21:36:44:56:91:
                    93:e4:c1:78:90:8e:2b:97:a3:46:12:26:4a:d1:f1:
                    47:53:4c:89:c6:46:4e:bb:b8:a4:26:fb:8b:98:de:
                    b0:d5:f2:f1:1a:46:2c:54:bd:d3:d7:b0:f7:ba:cc:
                    76:26:cb:6f:b0:ba:23:9f:d3:70:50:eb:74:8d:27:
                    88:b2:c0:18:3a:2d:dd:b8:2d:12:39:7a:8c:8d:57:
                    f1:34:04:ef:8d:ee:4a:6d:c3:f8:c2:d6:b3:ac:4e:
                    83:1a:30:6a:2f:2b:2e:af:ad:cd:48:bf:53:ea:7a:
                    08:24:02:18:6f:bd:e3:09:70:17:5b:da:6c:83:86:
                    b5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                02:2A:53:82:F6:AB:07:AB:D3:C4:49:30:CF:17:94:43:F3:89:43:9D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/022A5382F6AB07ABD3C44930CF179443F389439D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.60.0/22
                IPv6:
                  2804:680c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269667

    Signature Algorithm: sha256WithRSAEncryption
         8b:88:e6:83:7a:92:94:ba:64:85:fb:13:df:58:43:b1:69:c3:
         9e:48:fe:1d:f6:3c:e0:dc:5f:16:b8:da:b6:6e:53:06:b7:e0:
         3c:82:a6:27:4e:f8:ad:91:17:57:51:bb:7b:1f:c1:21:bc:bf:
         e9:5b:37:00:73:89:f4:c6:72:38:b6:21:96:09:42:52:3a:45:
         e8:8b:95:24:66:e8:7b:80:fb:29:92:7d:c5:8d:e1:c2:1c:5b:
         8f:8f:be:df:da:9b:28:10:b7:60:1c:b9:27:86:2a:9b:31:66:
         d0:74:ea:31:8d:02:b1:d0:1d:1b:cc:69:2a:78:33:7b:99:36:
         4a:af:6c:a3:4d:00:2b:80:74:4d:79:21:33:7a:04:dd:ae:fb:
         50:7c:bb:d3:f6:62:ce:e7:fb:df:fd:25:60:f9:92:82:e7:b8:
         43:dc:ff:f8:ac:1b:09:93:bd:49:fa:35:de:39:47:04:af:a9:
         16:de:23:d4:63:0c:ae:49:0b:24:b8:e3:62:9d:3e:a8:29:00:
         a9:0d:7c:0d:b2:7a:2f:dd:a1:71:4d:42:f9:b9:55:d6:0e:eb:
         b0:88:c4:29:02:fc:5b:34:4e:f9:7e:f5:f7:dd:4d:3b:5e:5b:
         9a:ea:bd:e3:87:7c:af:e0:2f:10:9d:52:93:ad:f2:2f:27:4a:
         6b:6c:fa:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:49 2025 by rpki-client