Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
File:                     11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer (raw, json)
Hash identifier:          SLy5W0g2r1hk4Fhn5PiCSpaVZc6XhpW/kY60l8XomhE=
Subject key identifier:   11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       044F238D392CF25085554FECA09F81100BE2E2F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 18 Apr 2024 17:55:43 +0000
Certificate not after:    Thu 17 Apr 2025 18:00:43 +0000
Subordinate resources:    AS: 273309
                          IP: 45.227.84.0/22
                          IP: 45.233.220.0/22
                          IP: 131.0.208.0/22
                          IP: 131.161.32.0/22
                          IP: 138.122.16.0/22
                          IP: 138.219.48.0/22
                          IP: 168.228.24.0/22
                          IP: 177.124.184.0/22
                          IP: 177.152.112.0/21
                          IP: 177.222.208.0/21
                          IP: 186.226.220.0/22
                          IP: 191.37.216.0/21
                          IP: 2804:8c7c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 23:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:4f:23:8d:39:2c:f2:50:85:55:4f:ec:a0:9f:81:10:0b:e2:e2:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 18 17:55:43 2024 GMT
            Not After : Apr 17 18:00:43 2025 GMT
        Subject: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:db:fc:03:e2:81:a6:24:35:20:14:e6:94:cb:
                    b1:ca:9b:7e:ab:52:56:52:05:0d:10:b1:a7:da:4d:
                    2f:fd:97:fd:d6:61:66:8e:5d:77:b5:6b:f3:01:6e:
                    3a:f4:15:38:c9:f7:88:c7:61:27:62:d1:97:70:83:
                    6b:48:1a:ba:f0:75:54:aa:cf:7a:d7:e1:6c:7e:9d:
                    ff:3b:3a:03:53:3c:a1:27:fa:e3:2b:46:05:9f:2d:
                    c1:f6:a9:38:2d:41:1c:30:d0:8d:e7:74:b6:9f:fa:
                    2f:52:43:bb:41:a7:28:78:24:4c:24:f9:bb:bf:ca:
                    00:8c:d0:1f:ff:43:6d:2c:c5:b1:9a:8f:ae:25:37:
                    5a:eb:44:63:43:fa:21:d2:26:e4:99:5e:5e:93:12:
                    66:80:24:c4:a8:d8:57:71:fa:8d:7c:28:66:ba:5e:
                    ce:52:9b:d4:82:92:22:6a:5b:57:5b:70:16:55:5d:
                    7a:73:1f:88:a7:81:46:14:e0:fa:c1:96:21:16:fd:
                    45:a6:a5:ff:f6:24:91:6b:6e:5b:7d:94:7a:d5:12:
                    e9:98:01:ff:cb:9f:dd:ed:75:7a:fc:0c:ee:7e:86:
                    b2:bf:b9:79:71:d3:de:93:01:ea:9f:25:8a:2e:d4:
                    ba:95:44:71:5b:4d:4a:ac:51:19:31:4d:b5:da:aa:
                    eb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.84.0/22
                  45.233.220.0/22
                  131.0.208.0/22
                  131.161.32.0/22
                  138.122.16.0/22
                  138.219.48.0/22
                  168.228.24.0/22
                  177.124.184.0/22
                  177.152.112.0/21
                  177.222.208.0/21
                  186.226.220.0/22
                  191.37.216.0/21
                IPv6:
                  2804:8c7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273309

    Signature Algorithm: sha256WithRSAEncryption
         78:3c:18:38:c1:e3:84:fe:b4:9b:e8:91:e0:cc:02:7c:df:eb:
         16:ad:07:88:4a:c8:c3:01:2e:3e:29:b5:03:76:23:55:c6:c3:
         46:07:ad:8d:3e:fa:5f:5a:06:a0:89:09:3c:36:12:4d:e7:62:
         c7:3c:d5:d3:db:99:09:0e:4e:17:58:ac:3e:37:8f:45:01:bb:
         0e:43:38:e6:aa:e0:7e:79:56:4f:f0:0a:ea:6c:a9:3b:09:e6:
         c6:ef:93:cf:1a:1e:97:13:49:67:4c:b4:e7:0c:69:d1:74:d5:
         c6:fc:d5:bb:af:19:86:a5:f5:1e:1b:ba:d8:bd:2d:f6:35:1d:
         c9:95:7a:29:fc:40:df:c1:7e:e8:2e:49:10:28:0a:c6:c9:69:
         c0:d1:43:93:6e:ed:2e:3e:50:c6:0e:bd:a0:d4:ad:ee:c1:54:
         67:e5:02:6f:70:04:ed:ac:a5:f9:59:3f:1e:2f:95:a5:c9:a4:
         89:aa:8e:bd:61:26:de:9b:76:8d:75:20:95:78:be:df:2a:21:
         01:35:a0:68:fd:ce:8d:d2:a3:c7:10:41:61:d6:d3:df:2b:ae:
         c4:d8:c2:74:ce:7e:ae:8d:37:b5:e2:5d:c5:19:ff:db:e4:5e:
         b2:6b:45:00:6a:6c:4b:43:c7:a9:4d:3b:b2:a4:0e:6e:fe:5c:
         e5:95:5b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:43:26 2024 by rpki-client on console-fra.rpki-client.org