Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
File:                     0B641968F54E16F4A6E72B1F243A760255821D7E.cer (raw, json)
Hash identifier:          1JFYBeKzHFfh/AdJZ2lIKTCrcj6hwmUr6owWMihlvag=
Subject key identifier:   0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0D34AF6178C3D845210EB578B1B05BFB4B4AD787
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 09 Sep 2024 14:47:36 +0000
Certificate not after:    Mon 08 Sep 2025 14:52:36 +0000
Subordinate resources:    AS: 262493
                          IP: 138.255.216.0/22
                          IP: 168.121.148.0/22
                          IP: 170.82.132.0/22
                          IP: 177.8.48.0/21
                          IP: 177.55.48.0/20
                          IP: 2804:fec::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 21:04:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:34:af:61:78:c3:d8:45:21:0e:b5:78:b1:b0:5b:fb:4b:4a:d7:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep  9 14:47:36 2024 GMT
            Not After : Sep  8 14:52:36 2025 GMT
        Subject: CN=0B641968F54E16F4A6E72B1F243A760255821D7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2b:f2:b3:f1:91:8b:e1:f0:ce:e4:51:09:3d:
                    4c:b3:5e:01:49:90:fd:83:7a:12:72:47:d5:ea:3f:
                    51:91:d3:33:1c:9b:e2:12:c9:de:24:b2:45:32:c0:
                    e3:ed:b6:ab:b1:3e:a1:73:a9:8f:37:2a:b5:e4:14:
                    5a:0a:0d:df:db:53:6f:0f:55:c5:40:a8:e6:cf:45:
                    3e:c2:b7:b7:0f:f1:c5:d2:a0:9c:d1:46:46:9e:a6:
                    0f:c2:d9:b5:97:c7:d2:49:cd:79:30:ff:8c:f3:77:
                    2e:1c:5d:93:28:fb:fa:48:75:52:33:08:a7:15:2f:
                    d1:fa:c1:04:42:4a:d6:69:42:4c:4e:a4:7b:8c:fe:
                    f0:f4:b1:0c:38:c6:aa:45:b1:4c:ac:c4:f2:da:d6:
                    05:d5:94:5b:28:2f:6b:24:d0:75:b9:31:8d:21:1d:
                    7e:7a:b6:58:67:e5:09:2a:99:42:80:5c:67:d1:4a:
                    62:78:ee:96:3a:b0:c4:50:31:20:d8:01:fa:9a:3e:
                    4f:91:c4:c2:4f:42:30:66:bb:26:fe:79:80:0e:75:
                    97:3d:67:fb:79:fd:2a:5b:ea:5b:dd:79:7e:3f:cf:
                    47:f3:a4:54:ea:ef:8f:b1:59:e9:50:2f:4f:70:a5:
                    a5:76:61:a3:bf:69:49:c9:2f:f7:c2:c2:56:90:62:
                    53:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.216.0/22
                  168.121.148.0/22
                  170.82.132.0/22
                  177.8.48.0/21
                  177.55.48.0/20
                IPv6:
                  2804:fec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262493

    Signature Algorithm: sha256WithRSAEncryption
         19:56:84:b2:0d:05:3a:35:94:67:c8:99:bb:7c:f4:12:c8:33:
         19:c9:4c:a6:e1:df:fa:5c:5b:a6:c0:ce:98:90:fd:b4:03:66:
         d5:a9:09:64:32:43:82:2d:48:3a:62:8b:5e:5e:ae:50:46:98:
         79:53:f5:85:8d:4e:f2:64:b8:53:6a:4c:fa:25:f8:f0:9b:c2:
         34:0f:47:b4:77:3b:ef:07:72:8d:6f:cb:b4:91:9e:87:7f:00:
         42:d6:81:de:85:b1:50:40:b6:48:93:e3:93:13:af:fb:b4:93:
         78:6d:95:5c:37:35:05:d8:5f:12:a2:71:8a:7c:6e:fb:f5:af:
         1e:71:c0:f7:9f:db:62:dc:be:24:7a:3d:f3:87:e1:4e:8b:5c:
         ef:d7:9e:d0:60:56:11:2d:e5:03:02:9c:04:0e:5d:a5:ae:8e:
         8e:55:af:9c:2c:61:07:a4:b9:24:bf:41:47:8d:d4:9e:c0:c9:
         d1:d4:1e:e8:58:5c:e4:31:6c:3d:85:5c:34:45:14:dd:88:39:
         e3:65:4e:b7:3f:95:9d:6a:56:de:a9:a7:02:5a:9d:2f:ec:32:
         2c:32:2f:32:fa:06:4a:fc:43:5c:ad:8c:ac:8c:cf:4a:b3:d6:
         3d:09:ef:3d:ed:46:68:4d:58:27:8f:60:a9:73:a2:02:dc:cf:
         86:73:43:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 20:29:52 2024 by rpki-client on console-fra.rpki-client.org