Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2B879BD1BC8C8BC4822F65B21C2481479AEF4474.cer
File:                     2B879BD1BC8C8BC4822F65B21C2481479AEF4474.cer (raw, json)
Hash identifier:          s433s+xxXGV4qJy3Cr0BYpZERWs5vHGwi3Kt7n5qEK0=
Subject key identifier:   2B:87:9B:D1:BC:8C:8B:C4:82:2F:65:B2:1C:24:81:47:9A:EF:44:74
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       300DE0417670FCEC5DA7124940BDC7E7903C85E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/warijSjJEV8nVc5KcLabSwroPbYEZpAV6xvDUXcYqBb/1/2B879BD1BC8C8BC4822F65B21C2481479AEF4474.mft
caRepository:             rsync://rpki-repo.registro.br/repo/warijSjJEV8nVc5KcLabSwroPbYEZpAV6xvDUXcYqBb/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 14:17:27 +0000
Certificate not after:    Thu 03 Apr 2025 14:22:27 +0000
Subordinate resources:    AS: 272633
                          IP: 2804:8648::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 23:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:0d:e0:41:76:70:fc:ec:5d:a7:12:49:40:bd:c7:e7:90:3c:85:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 14:17:27 2024 GMT
            Not After : Apr  3 14:22:27 2025 GMT
        Subject: CN=2B879BD1BC8C8BC4822F65B21C2481479AEF4474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:75:9f:c1:84:60:61:93:01:eb:9a:d6:bb:78:
                    30:d4:e4:fd:44:76:7a:ad:1d:aa:93:6f:42:79:8b:
                    52:66:9d:07:6a:0a:f8:ec:da:95:12:a2:29:65:82:
                    3e:fa:5d:f6:66:f5:a9:af:51:b2:a3:ae:ed:01:63:
                    19:0d:cb:09:98:4e:dd:b4:be:93:86:14:07:e5:04:
                    ca:17:12:32:51:80:de:bb:1e:32:36:62:70:72:bb:
                    25:e2:4d:0b:29:e7:e6:5d:b2:63:b5:ba:f9:1e:9f:
                    b9:e2:0e:06:c2:2b:d9:14:e4:91:96:f0:27:09:48:
                    28:4f:28:57:59:cb:af:68:1d:d2:da:92:98:25:c7:
                    69:68:58:2e:3f:93:17:77:b2:8a:ef:30:13:65:94:
                    a1:0e:ae:4a:7e:4d:e6:c1:01:b2:b2:37:87:31:a7:
                    db:24:be:7f:6a:37:b3:2e:1a:64:ff:7d:07:b2:86:
                    0a:50:a9:ff:ff:90:12:d8:ad:fb:5d:3c:0b:c6:b1:
                    4c:19:b8:ba:40:0a:cd:41:db:9b:af:af:da:65:72:
                    2f:05:f5:b7:3b:ea:94:ea:99:10:81:51:e2:ff:72:
                    80:82:2c:89:cb:1d:51:57:9a:1e:56:44:60:92:ee:
                    15:15:37:cf:ac:e2:53:d8:7b:5e:bf:78:fd:32:ad:
                    cc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2B:87:9B:D1:BC:8C:8B:C4:82:2F:65:B2:1C:24:81:47:9A:EF:44:74
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/warijSjJEV8nVc5KcLabSwroPbYEZpAV6xvDUXcYqBb/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/warijSjJEV8nVc5KcLabSwroPbYEZpAV6xvDUXcYqBb/1/2B879BD1BC8C8BC4822F65B21C2481479AEF4474.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8648::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272633

    Signature Algorithm: sha256WithRSAEncryption
         7e:c5:ec:e8:08:cf:4f:98:71:62:0f:fa:14:d4:d7:04:5a:50:
         76:fc:e3:e1:18:bd:ba:f6:53:73:32:02:3b:fc:7d:27:d8:33:
         af:5a:44:bd:9b:53:b6:b0:40:2d:ba:b9:3e:fb:47:4b:ea:11:
         13:aa:e9:76:e9:50:07:9b:6c:52:f2:b8:c2:cb:52:fa:6e:67:
         19:00:92:b2:78:0f:54:53:5a:0d:1b:17:af:f3:30:77:7e:e7:
         e6:9e:c8:11:ce:a2:7f:a1:35:19:53:32:e6:7d:7f:a4:19:49:
         6c:6d:2c:36:26:a4:17:1c:cd:f9:29:bd:e3:cf:68:56:8c:60:
         de:a0:28:37:0b:fc:bf:25:90:3e:bb:3e:3e:6d:00:e7:2b:bc:
         48:42:76:d5:3a:70:ba:9e:df:42:5f:2d:d6:b4:a3:55:a0:48:
         78:a8:bf:6d:56:fe:3b:dc:fe:7b:09:25:66:e3:c5:f5:b2:c8:
         bc:f6:a7:34:60:d3:5a:ae:92:a3:a9:31:36:d2:90:2d:cb:56:
         45:54:da:00:6f:af:fc:ab:4a:94:c6:ff:3d:8e:01:7d:61:14:
         d3:f1:02:0e:0c:a9:08:27:9b:ab:f8:88:64:00:c1:3c:e0:ec:
         85:ef:91:6e:ef:a2:02:f7:bb:f8:9b:c6:0a:ff:e6:2c:d0:f1:
         f7:35:89:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:43:27 2024 by rpki-client on console-fra.rpki-client.org