Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
File:                     2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer (raw, json)
Hash identifier:          PF1ti1yzZb0e8eizJLoQWLaXMKHTIYS4s+EJSlNxqmA=
Subject key identifier:   2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       24C74133FF701FF94FC8A8D5E6EEEB722601B741
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 07 Nov 2024 20:45:56 +0000
Certificate not after:    Thu 06 Nov 2025 20:50:56 +0000
Subordinate resources:    AS: 262493
                          IP: 138.255.216.0/22
                          IP: 168.121.148.0/22
                          IP: 170.82.132.0/22
                          IP: 177.8.48.0/21
                          IP: 177.55.48.0/20
                          IP: 2804:fec::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:c7:41:33:ff:70:1f:f9:4f:c8:a8:d5:e6:ee:eb:72:26:01:b7:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  7 20:45:56 2024 GMT
            Not After : Nov  6 20:50:56 2025 GMT
        Subject: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:43:b4:ea:53:fb:1e:f6:a6:a7:af:61:40:54:
                    0a:68:b2:2d:33:f7:41:ef:6c:85:7e:f9:bc:a1:b4:
                    61:1b:00:ff:0b:fd:cd:99:1a:01:fb:e3:ee:2b:e5:
                    97:64:12:5f:06:cb:1d:88:29:95:01:81:63:23:16:
                    ff:7e:19:7e:83:2d:93:fc:26:6a:2c:11:eb:ec:c3:
                    db:20:31:0f:50:d7:88:f2:03:5b:09:83:9e:c0:db:
                    78:b4:6c:d0:2b:ca:34:e3:43:b5:ff:61:63:fd:06:
                    5c:57:f5:43:8d:1c:2e:3c:b9:4d:90:e4:ea:a0:72:
                    a1:25:3d:7c:95:a8:5c:07:29:47:78:2d:cb:31:1e:
                    ec:9e:26:e5:5b:1b:42:8b:bf:88:e0:44:93:f8:15:
                    12:39:3c:a7:ae:85:26:63:fa:a9:74:46:ff:54:9d:
                    34:91:b8:87:2d:a2:76:86:9a:25:d6:fd:fa:4a:30:
                    bb:95:6b:80:09:08:df:5d:cf:c0:d3:26:bf:91:32:
                    64:5f:1c:35:3f:76:79:dc:d4:2b:83:51:19:24:42:
                    32:14:59:7d:10:a4:54:a2:ff:ce:02:ec:e4:7e:7d:
                    79:e7:53:48:11:73:30:9d:1f:83:5c:77:b9:88:bf:
                    72:e7:8f:4d:bb:49:f0:b9:b2:b9:4a:bb:d8:03:6c:
                    92:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.216.0/22
                  168.121.148.0/22
                  170.82.132.0/22
                  177.8.48.0/21
                  177.55.48.0/20
                IPv6:
                  2804:fec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262493

    Signature Algorithm: sha256WithRSAEncryption
         67:8c:ff:e5:fb:95:29:07:cd:22:f4:07:ba:bf:ff:5a:48:ea:
         54:95:bc:2e:30:1c:44:53:51:ab:c6:90:77:79:9f:dd:ca:c1:
         50:59:bc:48:6e:4e:47:9f:b9:a3:75:56:23:b9:28:9a:1d:2d:
         12:b1:0b:80:d6:e8:de:d2:ed:f3:28:c7:4a:7c:ed:76:fa:9e:
         3a:86:a1:80:4c:90:65:de:17:c5:2e:64:27:eb:a2:7a:0d:4e:
         b6:b3:e5:fd:28:64:7c:04:9c:13:3c:9d:b1:3b:a9:81:ec:27:
         30:2e:0a:9e:7f:7c:28:80:db:ee:be:7d:1c:38:fe:d0:1c:13:
         55:93:d2:ad:83:4c:5a:90:25:a8:0c:21:68:6c:98:27:ac:b9:
         e9:16:34:4e:af:5a:07:e9:3a:75:1a:9e:7e:21:c8:de:ed:d3:
         02:58:3c:a4:44:a7:7b:a0:89:bf:ed:5b:01:fc:b1:7e:ff:91:
         1b:9d:c3:d9:b6:2e:e6:fe:4d:b4:4d:55:b8:69:71:53:45:92:
         bc:3c:fb:04:ed:7e:af:4c:25:f1:19:9d:16:d1:d1:98:82:19:
         fb:b2:8d:2b:4f:02:da:10:2d:96:96:e8:d3:69:1d:ea:25:70:
         36:a0:69:82:ae:77:91:11:d5:4d:c7:94:0b:e1:ee:53:74:6b:
         6b:97:e5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:59 2024 by rpki-client on console-ams.rpki-client.org