Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/038EA35AF01B781289F24933082A9857B17EAE3A.cer
File:                     038EA35AF01B781289F24933082A9857B17EAE3A.cer (raw, json)
Hash identifier:          ijLkaU3X+7Zr10f7ujCxo3WnC+PTn95OJ4KsS1x+u2U=
Subject key identifier:   03:8E:A3:5A:F0:1B:78:12:89:F2:49:33:08:2A:98:57:B1:7E:AE:3A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       47362A4319E28E1F1BE6D9E6D8432863DD68D085
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/038EA35AF01B781289F24933082A9857B17EAE3A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 17 Oct 2024 12:56:34 +0000
Certificate not after:    Thu 16 Oct 2025 13:01:34 +0000
Subordinate resources:    AS: 266556
                          IP: 160.238.228.0/22
                          IP: 2804:3dd4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:36:2a:43:19:e2:8e:1f:1b:e6:d9:e6:d8:43:28:63:dd:68:d0:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 17 12:56:34 2024 GMT
            Not After : Oct 16 13:01:34 2025 GMT
        Subject: CN=038EA35AF01B781289F24933082A9857B17EAE3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ca:7c:c1:17:11:f9:7f:c2:2c:fa:ea:3c:47:
                    a4:16:02:72:13:35:9c:91:44:27:59:36:d3:2c:e4:
                    55:3b:27:2c:b8:b3:20:b5:e0:01:c8:76:01:26:d7:
                    e0:5b:ba:45:e4:56:61:07:1e:4d:d7:0c:ec:a6:b6:
                    0f:96:37:f8:9f:c6:80:8e:6a:eb:e5:7a:2f:4c:41:
                    85:c3:06:90:4f:cb:66:84:24:58:0d:16:f1:bd:4b:
                    7e:c1:15:5f:b9:db:bf:1c:6b:b4:74:0e:05:a0:c1:
                    40:ac:cd:f8:c1:4b:67:a5:9b:c7:53:76:04:92:1b:
                    90:a7:ea:f9:bf:74:4b:1c:90:ac:2d:e2:cd:80:f9:
                    1c:30:e0:e6:94:e9:bc:24:f3:cd:1e:96:31:b7:77:
                    8f:c9:39:9e:70:68:76:2d:b6:e7:92:d8:01:99:1a:
                    87:0f:f4:d1:a3:63:4b:78:69:da:73:dd:11:2b:11:
                    7e:17:bc:e7:b1:79:2a:aa:fb:25:85:ec:35:a0:d9:
                    83:00:03:bd:c8:ad:69:dd:db:83:ed:95:67:49:c8:
                    49:50:98:4e:61:a2:59:93:fd:e1:1d:71:98:b1:65:
                    b7:cd:bc:ce:66:94:90:a5:4a:ba:d8:9a:c5:6b:b2:
                    0c:06:1b:28:2c:2f:dd:50:be:5a:a7:81:78:fc:f3:
                    15:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                03:8E:A3:5A:F0:1B:78:12:89:F2:49:33:08:2A:98:57:B1:7E:AE:3A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/038EA35AF01B781289F24933082A9857B17EAE3A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.228.0/22
                IPv6:
                  2804:3dd4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266556

    Signature Algorithm: sha256WithRSAEncryption
         6e:82:1c:29:29:c9:a1:00:d8:86:9e:36:c5:f3:ef:5a:84:47:
         94:82:b2:55:ab:d8:f1:dd:a5:44:e0:6f:3e:a4:ba:50:d1:4d:
         c7:e7:30:71:a1:87:ee:08:4c:63:9f:4e:b7:63:e6:89:00:97:
         7c:59:0a:32:e5:fc:12:92:00:ac:5b:0e:51:47:d9:b2:98:9d:
         10:b4:fd:a9:7f:ad:e0:e9:56:cc:5e:89:31:9b:62:46:19:2f:
         e5:64:6f:ba:5b:22:a0:b3:d5:6a:73:d7:d9:8d:4e:c9:01:03:
         3b:cf:4c:a3:61:df:b7:65:9d:db:6a:da:94:20:b2:ff:78:34:
         35:08:59:6e:b1:14:45:2d:97:31:55:b4:02:b9:a1:cc:42:16:
         be:ad:da:26:ac:ec:ed:db:f8:1e:8a:5a:89:91:6f:bb:50:03:
         d7:18:1f:b9:9f:09:c2:b0:21:43:07:47:ec:2b:0c:a9:bc:c8:
         73:6f:f8:bb:44:5e:8a:3c:cb:0c:40:71:85:b0:b9:36:20:b7:
         0a:a8:c7:f2:94:86:45:26:b2:2d:22:39:9b:5d:d2:28:9b:03:
         67:94:db:05:05:46:0e:27:a1:ab:3c:3b:e5:0e:c8:1d:b0:a4:
         74:fd:68:5d:0f:46:87:44:05:96:cb:2c:b1:28:10:c7:dd:d8:
         7e:d7:dc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:21 2025 by rpki-client