Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.cer
File:                     0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.cer (raw, json)
Hash identifier:          WcY+GnkGyZIgMEwEbEcoa246ZmPDHuFA/f8O66x7g8g=
Subject key identifier:   08:48:CF:00:33:EB:DC:84:F7:0F:E9:7C:EF:07:FD:EA:40:97:9F:F9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       189AE6E2953C500B4D1503379F228A06353844B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 16:02:40 +0000
Certificate not after:    Thu 03 Apr 2025 16:07:40 +0000
Subordinate resources:    AS: 265483
                          IP: 168.197.148.0/22
                          IP: 2804:34d4::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:9a:e6:e2:95:3c:50:0b:4d:15:03:37:9f:22:8a:06:35:38:44:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 16:02:40 2024 GMT
            Not After : Apr  3 16:07:40 2025 GMT
        Subject: CN=0848CF0033EBDC84F70FE97CEF07FDEA40979FF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d3:b4:a8:41:6c:52:60:22:8b:31:97:98:28:
                    52:58:5a:56:41:fe:1b:5e:56:1f:30:62:5f:8b:64:
                    58:5c:5b:bc:84:7b:81:7a:f2:61:32:51:89:d7:62:
                    20:1e:b9:3f:18:c2:4d:14:36:0a:5c:8b:65:d4:3c:
                    69:a4:ce:69:cf:84:78:d5:89:8f:a4:eb:c6:77:7a:
                    6e:cd:95:d5:97:2c:0a:ca:f0:e8:e8:11:44:fe:95:
                    ea:ed:dd:6c:1f:c6:c4:04:49:e7:b4:d5:76:bc:14:
                    95:9c:c5:02:7b:03:dd:c0:c2:8b:53:a8:f2:cb:20:
                    c0:d0:46:ec:3a:5c:c8:f8:e0:c0:3f:27:9d:98:06:
                    73:81:c1:f1:00:0f:69:35:40:c0:48:b7:b4:af:ff:
                    bd:80:22:a8:2c:79:82:ac:3a:3a:cd:4a:fa:d0:0f:
                    b5:35:79:ca:ee:39:97:b9:8a:ac:df:9a:1c:79:3d:
                    91:a4:0a:38:3c:24:b1:fa:ca:63:6e:d0:63:95:f4:
                    58:ff:7a:c0:12:9c:03:47:df:cc:0a:cf:b1:48:e4:
                    ee:6f:27:3c:79:ba:ea:11:88:a1:65:a6:43:8b:4a:
                    12:12:05:65:3f:6f:58:a5:81:f9:b9:0e:c5:a4:3a:
                    b3:58:07:69:71:23:9e:cf:22:04:59:ea:16:fd:2a:
                    cd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                08:48:CF:00:33:EB:DC:84:F7:0F:E9:7C:EF:07:FD:EA:40:97:9F:F9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.148.0/22
                IPv6:
                  2804:34d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265483

    Signature Algorithm: sha256WithRSAEncryption
         30:92:3b:ca:d3:3b:da:9e:fd:7d:97:87:71:73:03:c0:68:ee:
         bb:0d:2a:38:70:7c:a6:da:a8:8f:b9:e3:54:13:3f:1e:f9:a0:
         1d:7d:8b:a1:31:a5:b9:da:03:db:c8:e2:08:60:94:67:c9:b5:
         50:16:48:36:22:0d:e0:3d:da:5a:19:58:ca:80:78:53:59:ba:
         7a:da:a3:82:15:0c:24:e6:35:50:e1:8a:a3:9e:72:86:c5:72:
         9e:00:66:58:59:12:04:df:7e:b9:d1:11:e4:13:11:70:ef:87:
         6a:7b:6b:1e:4a:87:5e:c3:70:ff:0e:50:76:06:e3:d4:b4:22:
         1b:cd:71:d4:46:8f:49:b7:4c:d2:cb:48:df:0b:c1:69:a3:a0:
         c6:41:4a:f3:4c:85:35:72:47:98:ef:27:76:6e:b7:53:dd:1d:
         8e:94:8e:23:42:5c:56:a7:90:e0:18:bd:6d:d1:2f:78:fc:c3:
         ec:5a:50:73:87:4e:b4:f8:f7:80:25:ce:24:08:14:2f:5f:32:
         df:70:aa:3d:15:f4:76:e2:52:d4:d8:02:d8:0a:95:44:d7:83:
         aa:41:8d:f1:fd:20:fd:07:01:11:b1:1b:20:02:8e:e6:c7:56:
         f2:cb:51:79:91:dc:50:dd:79:cf:72:15:c2:6a:f6:b5:08:de:
         69:4a:69:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:50 2024 by rpki-client on console-ams.rpki-client.org