Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1836EFADFB51110C70863E841A306704CF99117E.cer
File:                     1836EFADFB51110C70863E841A306704CF99117E.cer (raw, json)
Hash identifier:          Rb9mjswZ9nkmdQ4Jj45jIVQOo7057IoRywvONSrseRw=
Subject key identifier:   18:36:EF:AD:FB:51:11:0C:70:86:3E:84:1A:30:67:04:CF:99:11:7E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       59CE74BE849D460285514E3E7F03150BF5E1F7D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/2/1836EFADFB51110C70863E841A306704CF99117E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Apr 2024 02:20:44 +0000
Certificate not after:    Fri 04 Apr 2025 02:25:44 +0000
Subordinate resources:    AS: 61592
                          IP: 45.224.216.0/22
                          IP: 45.232.188.0/22
                          IP: 45.234.100.0/22
                          IP: 2804:4c34::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jul 2024 12:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ce:74:be:84:9d:46:02:85:51:4e:3e:7f:03:15:0b:f5:e1:f7:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  5 02:20:44 2024 GMT
            Not After : Apr  4 02:25:44 2025 GMT
        Subject: CN=1836EFADFB51110C70863E841A306704CF99117E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:7d:58:d7:01:39:77:8c:bb:99:d0:dc:37:f0:
                    b5:75:1e:ac:cf:88:60:ea:6b:60:af:42:7b:c3:11:
                    6f:cb:cf:26:93:9a:63:5e:23:90:59:4b:c9:65:a5:
                    0c:f8:02:c4:ed:0f:d4:c0:85:d4:91:e2:ee:db:5a:
                    5d:3c:a1:6f:87:e3:ca:f6:d6:e5:db:d0:dd:91:93:
                    6c:43:bc:ff:2b:2a:bc:53:75:03:4d:5a:3d:fc:6f:
                    ed:7a:ff:5c:12:ef:9a:41:00:88:01:05:34:53:3d:
                    9f:08:94:e0:c4:de:22:51:43:e2:4b:d0:66:d5:22:
                    ce:9d:0e:0b:e8:f4:5e:da:61:c7:3a:9a:ff:a7:d5:
                    c6:b7:a6:49:84:7a:f8:e6:76:54:af:e2:01:3d:c7:
                    ba:eb:db:43:c5:13:c3:c6:86:9e:e1:58:0e:61:c7:
                    30:91:7d:a9:3c:bc:4a:40:5f:e0:6d:59:d2:12:d6:
                    51:71:01:90:48:7b:89:86:35:77:aa:32:f3:02:c5:
                    01:71:c7:95:5c:17:64:fa:92:17:9b:88:c2:87:7c:
                    ba:a7:88:eb:90:18:be:e5:42:0c:ff:7f:a7:cf:73:
                    1f:88:a7:1c:79:34:ee:13:a8:a2:c1:97:c4:c2:0b:
                    d8:9f:d8:16:a1:cd:cd:18:2a:a1:41:cb:34:94:cb:
                    2d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                18:36:EF:AD:FB:51:11:0C:70:86:3E:84:1A:30:67:04:CF:99:11:7E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/2/1836EFADFB51110C70863E841A306704CF99117E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.216.0/22
                  45.232.188.0/22
                  45.234.100.0/22
                IPv6:
                  2804:4c34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61592

    Signature Algorithm: sha256WithRSAEncryption
         5f:46:58:eb:98:9d:93:20:a2:4d:e1:c8:b5:2f:f2:a0:86:bb:
         f1:bb:01:42:3e:6e:10:d6:21:ef:51:7b:a9:32:40:15:2e:2f:
         a7:6d:ef:81:6f:d9:57:4a:30:3c:4c:69:83:30:eb:4c:d4:51:
         85:d4:10:a3:cd:b9:1c:b7:c4:7b:d0:2b:dc:4f:02:5b:83:58:
         49:4f:36:67:cb:65:20:75:4e:ca:57:f1:37:31:a7:3c:48:89:
         e6:88:52:ea:42:7f:dc:c4:68:31:31:d3:56:47:76:2c:c7:1f:
         50:72:d0:e0:46:10:da:89:90:db:02:7b:14:52:46:c0:bf:9f:
         05:34:42:3b:fa:84:0d:34:c6:fa:8b:5c:8d:24:c3:f8:3e:b4:
         c0:0e:be:79:52:f4:59:46:95:68:31:5b:aa:1e:79:0b:c6:57:
         95:d4:f7:90:8a:e5:1c:da:67:5e:a3:6f:46:23:84:2f:23:cc:
         75:bc:b9:2e:cb:c5:a5:c8:ac:dc:77:39:fd:9f:4e:8d:9a:ce:
         ba:46:9d:ee:53:e5:7e:2c:fb:e1:74:4b:1c:b5:8f:64:d8:e8:
         44:f6:bc:af:4c:5e:66:ef:23:b3:b7:3d:54:a1:1f:ac:69:97:
         b7:45:ee:ee:85:7a:0a:81:1d:f2:60:66:19:7d:0f:a8:de:62:
         d5:8c:75:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 10:26:44 2024 by rpki-client on console-ams.rpki-client.org