Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3071090FBC805FB9D55E39C8A4C6C934680AAC8C.cer
File:                     3071090FBC805FB9D55E39C8A4C6C934680AAC8C.cer (raw, json)
Hash identifier:          1Xkd1Y5K9UjmKVGy/jK8hNKUFba1+8HIBgReMG2zbW0=
Subject key identifier:   30:71:09:0F:BC:80:5F:B9:D5:5E:39:C8:A4:C6:C9:34:68:0A:AC:8C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7EFD71EAE281550B9345173BDCDFAFEF04C0F4FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/3071090FBC805FB9D55E39C8A4C6C934680AAC8C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 27 Nov 2024 21:50:48 +0000
Certificate not after:    Wed 26 Nov 2025 21:55:48 +0000
Subordinate resources:    AS: 264864
                          IP: 168.205.168.0/23
                          IP: 2804:2efc::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Dec 2024 00:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:fd:71:ea:e2:81:55:0b:93:45:17:3b:dc:df:af:ef:04:c0:f4:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 27 21:50:48 2024 GMT
            Not After : Nov 26 21:55:48 2025 GMT
        Subject: CN=3071090FBC805FB9D55E39C8A4C6C934680AAC8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:10:1a:97:3b:78:a5:f7:b3:4e:24:ac:89:71:
                    4b:01:78:24:e5:f7:de:31:d3:36:2c:26:f4:79:1b:
                    07:b0:ce:44:84:aa:a5:a1:be:c0:be:33:c6:db:4c:
                    25:87:aa:42:0e:55:5e:c8:9c:37:74:11:94:e4:42:
                    5b:62:da:66:e9:5c:a4:2e:fd:f3:9b:fc:80:8a:7f:
                    f7:e4:ca:d8:83:94:9b:b8:19:30:ab:68:52:02:cf:
                    2b:15:a2:ef:7a:01:02:bc:bf:a0:6c:8a:08:b1:fc:
                    c3:21:b0:60:4b:ff:e1:3a:49:83:68:fa:af:4c:37:
                    4d:19:35:2c:44:3b:cb:b8:9f:9d:8d:d5:4a:7b:8e:
                    a4:35:61:aa:38:17:d5:e2:ba:10:ae:85:2d:af:33:
                    17:42:28:79:5a:7c:84:d0:5f:50:d7:e1:8d:c6:20:
                    79:96:63:36:39:f2:03:17:cd:89:c5:d8:9c:ac:f8:
                    e1:eb:6b:65:c2:0d:25:32:38:d5:bb:e8:cc:6d:62:
                    2e:4a:0b:b7:99:c7:fb:e4:61:b7:bd:ba:8b:ed:1a:
                    b1:05:df:44:8a:b1:73:f6:e1:23:d5:c4:bc:a5:5a:
                    aa:97:ff:d3:8b:28:86:0c:96:38:cb:b0:27:04:af:
                    a7:ce:e4:9e:79:f7:86:7a:02:67:5a:76:49:90:f8:
                    f7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:71:09:0F:BC:80:5F:B9:D5:5E:39:C8:A4:C6:C9:34:68:0A:AC:8C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/3071090FBC805FB9D55E39C8A4C6C934680AAC8C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.168.0/23
                IPv6:
                  2804:2efc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264864

    Signature Algorithm: sha256WithRSAEncryption
         56:ca:73:13:76:75:a0:87:9f:e9:12:9d:c4:d1:96:79:46:e0:
         6e:94:de:3e:4f:7d:ff:9d:f1:f1:d6:fa:bf:1c:c5:b4:bf:66:
         4f:53:c2:b2:f0:5d:39:de:27:4f:20:5c:a4:74:ad:cf:10:8c:
         38:c4:a8:b3:d2:14:ee:62:1a:25:e2:32:21:9f:37:09:79:e4:
         21:b2:58:bd:34:9d:a6:fc:2b:c9:2b:43:c8:23:c0:1e:2f:88:
         df:fc:8e:7e:26:de:dd:8f:c2:c9:2b:70:f6:81:5a:4f:1b:80:
         d7:b3:21:e1:f3:33:e4:16:f1:04:a0:fc:40:c0:e6:e2:e0:0b:
         36:7f:fa:03:00:bf:44:74:07:e3:67:7e:f0:72:41:64:36:2e:
         b3:52:ae:8e:b2:f9:52:f6:39:5f:a3:2e:09:8f:c8:31:11:bc:
         24:ac:e0:6e:fe:ca:10:68:bb:0c:a0:c9:6d:d3:c1:32:9d:1a:
         5b:b3:22:2b:b2:73:3c:fe:c5:91:36:fb:0c:6b:79:d0:b9:a1:
         87:43:98:94:e5:d5:b7:3c:bf:00:2e:08:c0:0c:84:86:1c:69:
         44:da:69:69:f5:5c:5a:e7:75:5d:98:a6:5e:fd:8c:1c:79:49:
         7e:14:20:da:81:f1:ad:c4:d7:9f:b7:39:88:9c:ab:c6:cb:fa:
         7e:61:31:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 21:26:44 2024 by rpki-client on console-fra.rpki-client.org