Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.cer
File:                     275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.cer (raw, json)
Hash identifier:          fYoxvP23es2vGjV/94ttTHn68u39A3THBk6V8cyUrpc=
Subject key identifier:   27:5D:9E:0F:3E:6B:B4:0B:BC:90:C8:BA:26:99:DD:6A:35:6D:A2:AE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       58DAAE74581AA0E9526ECD6E7EF04A5F9F9D176B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 19:55:28 +0000
Certificate not after:    Wed 02 Apr 2025 20:00:28 +0000
Subordinate resources:    AS: 270735
                          IP: 177.221.142.0/23
                          IP: 2804:7094::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:da:ae:74:58:1a:a0:e9:52:6e:cd:6e:7e:f0:4a:5f:9f:9d:17:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 19:55:28 2024 GMT
            Not After : Apr  2 20:00:28 2025 GMT
        Subject: CN=275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f9:d4:49:ee:eb:b9:ed:ad:c7:2f:20:9c:9a:
                    22:65:ed:dd:49:53:f2:d8:ef:58:97:0f:9e:a6:6f:
                    e3:5c:be:22:e0:fe:76:0c:0b:8d:f7:9c:b8:48:51:
                    65:36:27:dc:e8:8d:d4:dc:51:af:8d:9b:10:e9:2c:
                    11:95:b3:19:8f:5d:64:47:9e:33:ba:2d:3c:e4:17:
                    aa:20:94:8f:8f:f2:eb:70:13:60:df:67:44:5b:3f:
                    ae:12:aa:23:8a:bd:56:8c:38:52:8c:be:f7:24:14:
                    1a:d3:a1:3c:99:57:e3:35:d2:7e:01:ae:cd:94:e8:
                    3d:4a:ee:55:52:81:51:58:c4:c2:01:24:2e:d6:5a:
                    80:92:7d:2e:39:9d:03:03:82:62:58:75:b7:62:f3:
                    02:bc:d4:23:c4:e8:ce:8b:99:2a:d1:7a:34:0b:e5:
                    4f:c5:83:7c:7d:6a:45:70:6a:67:4e:d7:94:fb:82:
                    1a:30:7f:f4:57:0d:db:f2:9e:b1:8b:11:5e:20:b3:
                    d8:f5:90:25:4a:7a:86:a3:16:b1:d3:43:ed:b6:d0:
                    16:51:e4:e9:06:e3:3b:84:24:b4:46:45:d8:4c:61:
                    c7:6f:53:01:1e:37:e5:fb:2f:1c:77:1c:aa:b9:4a:
                    6f:78:33:7c:bd:1a:f5:cc:07:ce:15:6a:7e:1f:10:
                    74:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                27:5D:9E:0F:3E:6B:B4:0B:BC:90:C8:BA:26:99:DD:6A:35:6D:A2:AE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.142.0/23
                IPv6:
                  2804:7094::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270735

    Signature Algorithm: sha256WithRSAEncryption
         1c:7c:25:47:60:65:37:42:41:dc:d7:3e:f1:ef:b9:12:a6:73:
         4c:27:c0:fb:4e:3b:3f:ba:0f:d5:8b:36:5c:ff:01:70:79:1b:
         57:5f:aa:f8:da:92:e0:bc:16:1b:24:e7:37:ba:85:e6:a7:af:
         04:ab:49:76:06:e4:f9:cc:f9:ed:1b:97:3d:7a:72:30:ab:83:
         64:ec:88:c1:c4:7f:cf:d8:7d:5b:40:85:e0:59:5f:f0:f4:37:
         1c:97:de:03:9d:59:40:39:d2:97:c7:e2:b8:54:87:82:79:3f:
         e0:bf:ad:8c:37:de:2c:83:a5:1d:f4:ee:63:8b:e5:24:e8:9b:
         58:5b:ff:c9:01:49:90:4a:41:c7:1a:3d:c2:71:3a:0e:ec:22:
         62:0c:7b:56:c8:6d:f4:ae:e0:58:42:ff:78:fb:45:e2:0a:8f:
         f4:6b:83:41:e1:b8:94:01:1b:3f:1b:51:42:f9:2b:0d:eb:4f:
         62:cb:31:55:45:76:a4:fc:54:04:40:84:1d:a8:58:e6:e6:fc:
         d6:cd:8c:c7:f8:46:fb:47:8b:90:fb:02:23:96:f5:c7:5c:27:
         d0:fd:64:ad:1c:46:90:13:4c:2c:f8:b1:de:bb:3d:b6:61:43:
         15:a3:23:e0:2a:02:bb:96:3e:9b:df:9e:7f:5f:68:e6:e1:51:
         d5:4d:53:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:17 2024 by rpki-client on console-fra.rpki-client.org