Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1B28A0DFEAF5E541033A585610458FFD3C111004.cer
File:                     1B28A0DFEAF5E541033A585610458FFD3C111004.cer (raw, json)
Hash identifier:          fSI9uxHs68oUwNfwmYKPTBsJ0fNIr85M5AVfQ9QqZCw=
Subject key identifier:   1B:28:A0:DF:EA:F5:E5:41:03:3A:58:56:10:45:8F:FD:3C:11:10:04
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       50E3ABD51DA49B778097F563DC0E41D8EA929A29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/1B28A0DFEAF5E541033A585610458FFD3C111004.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Nov 2024 14:19:00 +0000
Certificate not after:    Wed 05 Nov 2025 14:24:00 +0000
Subordinate resources:    AS: 266095
                          IP: 45.5.100.0/22
                          IP: 2804:3a8c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e3:ab:d5:1d:a4:9b:77:80:97:f5:63:dc:0e:41:d8:ea:92:9a:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  6 14:19:00 2024 GMT
            Not After : Nov  5 14:24:00 2025 GMT
        Subject: CN=1B28A0DFEAF5E541033A585610458FFD3C111004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ca:88:64:88:3c:cc:1f:78:25:1d:8e:74:a0:
                    5d:5c:b0:c1:a0:e8:1f:c8:6c:52:8c:63:36:24:3e:
                    ab:98:79:74:db:85:cf:17:e5:3c:9d:6d:21:5b:a4:
                    fa:e2:8b:e7:5e:d8:36:4c:8a:18:d7:80:dc:09:8c:
                    af:7d:ff:3e:13:1b:8b:89:8c:8e:ea:86:de:8b:34:
                    82:8d:79:fd:c3:8b:88:85:d7:e3:3d:d1:7b:61:7a:
                    72:cd:bb:7e:4b:9a:71:14:02:9f:9d:30:ae:62:31:
                    87:a0:da:02:84:4c:77:9b:a6:4d:2b:b6:4c:86:99:
                    b5:17:14:bc:4a:59:15:3f:2e:33:28:8a:27:59:6b:
                    78:d7:6a:5b:fb:71:bc:9b:0a:ac:d5:6b:1f:f1:25:
                    3d:af:0d:a7:60:76:6d:f7:b5:11:23:e3:fb:5a:f8:
                    b4:7d:49:6c:c7:d2:39:77:96:bb:34:5a:77:0f:54:
                    43:5b:95:13:57:14:93:67:6e:0c:56:c2:87:9b:cf:
                    8c:b7:56:67:ef:b2:a4:43:66:7e:4f:c7:db:d0:00:
                    f5:22:b2:fd:46:dd:cd:ab:83:5e:87:9c:e1:e8:37:
                    6b:c0:f3:72:4b:b5:29:fa:28:7c:14:58:0d:4b:84:
                    62:f4:70:32:b3:4f:77:a7:7a:ad:ee:6b:3f:a8:47:
                    4e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1B:28:A0:DF:EA:F5:E5:41:03:3A:58:56:10:45:8F:FD:3C:11:10:04
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/1B28A0DFEAF5E541033A585610458FFD3C111004.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.100.0/22
                IPv6:
                  2804:3a8c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266095

    Signature Algorithm: sha256WithRSAEncryption
         1e:20:e9:16:e6:a7:16:80:58:fe:af:25:15:b2:3b:48:1a:ef:
         a7:b2:2d:65:35:0d:b0:d6:5f:93:e7:a7:57:54:d2:a2:b1:aa:
         7b:6e:d5:88:3b:71:31:e7:20:a9:b4:ee:91:79:3d:72:96:5f:
         94:45:28:15:16:be:17:ef:74:e4:f7:f9:11:a7:1a:b9:ee:f4:
         99:a5:50:fb:ad:08:92:5c:f9:ec:34:e8:f1:8c:2d:ef:1d:09:
         1b:86:a7:4b:9b:da:51:d3:c7:72:77:f6:fb:2e:db:0d:63:65:
         35:b3:f5:fe:71:40:d5:98:ac:98:ff:62:e4:87:a5:b3:18:96:
         6f:47:5d:29:04:d9:29:15:e3:26:99:44:93:e8:3f:c7:a2:eb:
         da:ae:c2:7e:64:5b:06:7e:31:fc:06:a6:0a:9f:3c:2b:d3:ad:
         b9:9d:fa:08:18:7c:8d:61:89:96:7c:b5:2a:d6:62:16:c1:96:
         83:f7:4a:7a:25:7b:74:34:e7:d0:9b:b9:ee:ba:83:12:cc:8a:
         86:82:a8:dd:aa:63:47:c6:5d:f1:42:67:df:19:c3:38:25:02:
         b2:0a:c5:9d:57:2c:fc:10:c8:f2:d6:06:1f:b2:f4:1e:c2:a9:
         28:52:e1:ed:ff:50:d8:a8:95:ed:ea:c2:d6:d3:70:2e:81:ee:
         6d:63:80:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:13 2024 by rpki-client on console-fra.rpki-client.org