Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/32D155FEA2C9BB85294DD20888F5E06CA89F60D0.cer
File:                     32D155FEA2C9BB85294DD20888F5E06CA89F60D0.cer (raw, json)
Hash identifier:          +/g5tDF7bh6HMjDzzWmEUflXQ7dYEeSilgXFSNbx6X4=
Subject key identifier:   32:D1:55:FE:A2:C9:BB:85:29:4D:D2:08:88:F5:E0:6C:A8:9F:60:D0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3AC1D51FE4BD450D53F5BAFA564AFAF43F461040
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/3/32D155FEA2C9BB85294DD20888F5E06CA89F60D0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/3/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 25 Nov 2024 17:04:42 +0000
Certificate not after:    Mon 24 Nov 2025 17:09:42 +0000
Subordinate resources:    AS: 22706
                          IP: 200.152.80.0/20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 16:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c1:d5:1f:e4:bd:45:0d:53:f5:ba:fa:56:4a:fa:f4:3f:46:10:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 25 17:04:42 2024 GMT
            Not After : Nov 24 17:09:42 2025 GMT
        Subject: CN=32D155FEA2C9BB85294DD20888F5E06CA89F60D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:91:04:6f:6c:28:c7:cf:51:c2:e9:e2:09:3c:
                    f0:55:14:1b:85:78:11:43:b5:7c:c4:f9:bf:f7:39:
                    11:74:d1:8c:fe:ad:f0:b0:90:f1:fd:7d:84:63:d4:
                    00:c0:f9:21:ef:05:fd:bd:ce:d3:f2:48:43:d1:6a:
                    51:2b:f5:64:69:95:3b:5d:08:78:c6:73:05:0f:c4:
                    23:5d:ff:68:c4:52:f3:a3:8b:32:c9:86:ea:bd:e0:
                    ce:39:24:b6:51:ee:4b:d7:33:8f:2e:0c:23:7a:bd:
                    9e:91:b1:5f:de:ff:d0:9d:ae:bd:be:cf:3e:cf:92:
                    7d:68:0d:ba:62:e7:ba:bc:8c:7c:6e:00:cf:bb:7b:
                    5b:de:45:f6:3f:1e:d3:20:94:e6:bb:cd:f8:f7:57:
                    07:ba:31:3f:d1:62:b0:1c:3e:0c:9c:a8:1e:f8:4c:
                    80:2f:47:50:d3:14:11:2d:54:2d:f0:74:21:9b:db:
                    55:98:b6:22:16:ec:3b:29:83:b7:98:8b:dc:64:71:
                    c6:a1:e6:4b:37:a7:f9:3c:62:74:92:c5:c4:0e:50:
                    f9:98:a8:bd:d9:36:d8:f8:97:ca:56:ef:82:a2:d5:
                    bf:5f:04:87:ff:1c:d5:80:de:24:ee:c4:06:66:df:
                    d1:8f:c7:0a:1b:87:e9:3b:e4:9d:9a:e0:21:22:05:
                    2d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                32:D1:55:FE:A2:C9:BB:85:29:4D:D2:08:88:F5:E0:6C:A8:9F:60:D0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/3/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/3/32D155FEA2C9BB85294DD20888F5E06CA89F60D0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.80.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22706

    Signature Algorithm: sha256WithRSAEncryption
         07:33:c4:a2:db:8e:9f:2e:84:b6:15:6a:15:77:ec:7a:7c:2d:
         fd:cf:12:f4:84:be:fc:0a:43:3b:ea:a7:99:3b:7c:9a:5c:c6:
         c7:48:6a:b8:29:1b:d1:78:6d:2c:d9:99:8c:78:b9:b6:2f:ae:
         50:ff:31:d3:88:16:64:43:53:71:4c:b1:3a:4d:99:35:b1:d3:
         00:d8:70:81:5b:26:4c:bb:2c:d6:30:de:81:38:f1:a1:83:23:
         95:48:93:b5:ea:bc:d2:70:19:33:09:dd:04:2e:85:c1:87:7e:
         6b:92:dd:13:a6:ef:d2:50:ac:22:81:d5:37:a6:c8:5e:1a:ad:
         d5:3d:60:32:31:b8:6d:d4:d2:23:bd:ca:a9:ed:9f:92:df:c0:
         8c:18:20:f6:da:ba:9b:aa:81:2a:4f:ab:36:2a:9d:b2:ac:d7:
         1a:22:f5:81:22:fe:26:bd:a0:9b:15:d2:41:53:9d:be:07:aa:
         60:32:cc:c3:db:9d:c8:0c:dd:04:87:ef:8d:18:d1:6c:2b:17:
         8c:52:64:83:4e:d0:60:97:6d:0b:dd:c9:65:6a:03:d3:26:78:
         10:df:a0:64:48:02:c6:84:62:93:77:d0:17:fd:1c:98:83:18:
         bf:4d:14:1e:89:05:20:79:7b:c2:b4:1b:c5:5d:44:60:ae:34:
         4d:e0:b7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:17:18 2024 by rpki-client on console-ams.rpki-client.org