Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1254D60C0E743AE17BC43FD38413C27FDD4AE0CE.cer
File:                     1254D60C0E743AE17BC43FD38413C27FDD4AE0CE.cer (raw, json)
Hash identifier:          Xk4ICI91ScAmK+xY7pFQIz+uo1yFI5RU7yjC/8Mlm+U=
Subject key identifier:   12:54:D6:0C:0E:74:3A:E1:7B:C4:3F:D3:84:13:C2:7F:DD:4A:E0:CE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       269D556E0FC2548CD72F8DFD18D3EA49AFB0C24A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3wkwS4E4Jq9dNATK1nZqKoyP7kroWNJTEpBaW6mJQwMF/0/1254D60C0E743AE17BC43FD38413C27FDD4AE0CE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3wkwS4E4Jq9dNATK1nZqKoyP7kroWNJTEpBaW6mJQwMF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 25 Oct 2024 15:01:41 +0000
Certificate not after:    Fri 24 Oct 2025 15:06:41 +0000
Subordinate resources:    AS: 52757
                          IP: 177.23.20.0/22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 00:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:9d:55:6e:0f:c2:54:8c:d7:2f:8d:fd:18:d3:ea:49:af:b0:c2:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 25 15:01:41 2024 GMT
            Not After : Oct 24 15:06:41 2025 GMT
        Subject: CN=1254D60C0E743AE17BC43FD38413C27FDD4AE0CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d2:7f:03:e2:17:94:3b:a8:1e:af:b9:f1:a1:
                    06:97:21:e4:ce:3d:c8:fb:51:6f:d8:4c:f2:2f:86:
                    73:b6:69:3b:26:86:d2:33:2f:56:84:2a:24:02:23:
                    9b:2c:cf:06:9b:9d:a7:87:fe:18:f9:eb:55:44:58:
                    cd:8a:c1:35:38:44:f4:59:97:72:95:56:0b:bb:21:
                    84:e0:8b:0d:e4:bf:a1:91:1a:42:62:91:0f:5b:ed:
                    ea:43:a8:06:64:45:f7:58:4e:d6:c0:d7:aa:24:f7:
                    04:1e:46:c9:0f:ff:da:b9:aa:f5:1a:57:c6:4f:b6:
                    ab:94:56:e1:5b:18:b9:c1:5e:a6:a3:9c:3d:64:09:
                    c3:a1:d1:2b:9e:52:7d:ed:dd:51:4c:6f:1f:9d:a1:
                    de:8f:80:c2:77:da:8a:e7:17:3c:37:bf:d9:17:64:
                    e7:a1:86:e2:ae:25:c4:b4:ce:0f:e4:69:73:a6:bf:
                    d1:52:24:85:59:0e:1f:f9:26:45:91:65:0c:0f:8e:
                    7b:b2:fb:ad:7e:5e:8a:7b:fa:37:05:39:59:c5:1f:
                    d0:9a:b4:dd:5d:ea:de:cb:f4:67:a4:99:e6:e9:7d:
                    ea:93:4a:e2:cd:5d:01:46:a5:9d:ca:f5:f5:44:1c:
                    47:04:e5:25:3f:24:00:e8:e1:85:4c:aa:a9:98:db:
                    c2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                12:54:D6:0C:0E:74:3A:E1:7B:C4:3F:D3:84:13:C2:7F:DD:4A:E0:CE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3wkwS4E4Jq9dNATK1nZqKoyP7kroWNJTEpBaW6mJQwMF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3wkwS4E4Jq9dNATK1nZqKoyP7kroWNJTEpBaW6mJQwMF/0/1254D60C0E743AE17BC43FD38413C27FDD4AE0CE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.20.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52757

    Signature Algorithm: sha256WithRSAEncryption
         90:f2:03:21:4d:2e:23:6c:cc:bb:b3:61:9a:05:e9:ce:e8:b1:
         af:7e:44:d8:dc:ff:81:f7:74:70:6f:5b:fb:65:30:75:f8:a5:
         6d:8d:c2:95:43:f0:f0:63:31:6c:8c:a7:f7:59:29:52:25:9f:
         c0:77:f9:8d:f1:cf:55:8d:c6:f9:c5:52:cc:8b:5d:5a:08:07:
         de:3b:1b:e0:bd:bc:fc:3b:f4:ea:24:6f:ea:e3:e5:8e:1d:08:
         73:e7:ab:12:21:63:ad:f1:e4:76:46:76:45:10:4d:90:84:18:
         aa:bc:b3:f9:a9:46:c5:ef:1a:8a:c1:a0:78:fd:a3:7b:67:3d:
         e8:74:98:0d:b0:cb:d3:c6:09:e2:08:bd:9f:4f:de:02:c3:c3:
         d0:89:44:5c:54:8f:c6:02:4e:78:ce:23:23:b5:e4:d3:51:00:
         a0:33:25:d4:6d:cb:b1:aa:ea:1a:94:22:78:fd:29:e6:1e:e9:
         f1:a7:4c:bf:42:3e:32:36:7a:4b:6c:22:a2:a9:7e:18:e9:e0:
         09:f5:26:f7:d2:47:66:66:ad:08:0c:2d:03:79:32:65:60:02:
         ca:0b:33:df:34:c9:aa:f3:a2:7d:6e:73:c3:23:d0:bb:e7:d8:
         ce:08:c5:0b:d6:81:9f:e3:23:47:37:1b:ad:df:f8:37:9f:e6:
         32:6e:b1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:16:13 2024 by rpki-client on console-fra.rpki-client.org