Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/33E0AB84CEF869E76435D17DB5E5566182625773.cer
File:                     33E0AB84CEF869E76435D17DB5E5566182625773.cer (raw, json)
Hash identifier:          GK/B8y5S+6LJKCuvOKlhcAZZvn/C4LBCQepMWwQzfS8=
Subject key identifier:   33:E0:AB:84:CE:F8:69:E7:64:35:D1:7D:B5:E5:56:61:82:62:57:73
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       79221BBBC3715F384C3EC561481BD5FEDD473E20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/33E0AB84CEF869E76435D17DB5E5566182625773.mft
caRepository:             rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 22:57:51 +0000
Certificate not after:    Wed 02 Apr 2025 23:02:51 +0000
Subordinate resources:    AS: 267440
                          IP: 192.141.0.0/22
                          IP: 2804:418c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:22:1b:bb:c3:71:5f:38:4c:3e:c5:61:48:1b:d5:fe:dd:47:3e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 22:57:51 2024 GMT
            Not After : Apr  2 23:02:51 2025 GMT
        Subject: CN=33E0AB84CEF869E76435D17DB5E5566182625773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:06:62:b8:8d:46:3d:2d:62:6c:b7:55:76:b8:
                    fe:1b:c8:cf:d4:f6:c9:f2:a8:4a:57:eb:92:58:52:
                    cb:c7:d6:6b:86:96:c1:26:89:ea:39:3f:cc:59:27:
                    53:52:ff:bd:74:7d:3a:0d:02:eb:e9:4f:a8:49:f5:
                    24:4b:3f:8d:86:99:17:ef:05:4e:8a:a0:18:4b:13:
                    56:c6:1a:9a:9d:c7:42:cc:c7:13:16:25:f8:c5:4d:
                    ae:bc:5b:71:7d:d8:16:61:03:e3:10:6e:0a:f8:b2:
                    e0:ac:b8:43:15:a6:93:7b:25:91:ca:7d:d9:56:fb:
                    2c:f1:2c:26:50:4a:8a:66:2f:d2:d9:f4:dc:ec:f5:
                    fb:31:c8:08:d4:aa:0b:a6:46:e1:74:9f:d4:e4:b3:
                    f4:99:d0:7d:14:4b:1c:c9:02:82:db:35:69:d8:13:
                    e6:8a:57:50:e4:06:05:12:c8:ac:49:6e:fa:1d:54:
                    f9:fa:fe:16:13:05:2d:eb:8a:16:a4:1c:1f:25:a1:
                    94:32:2e:43:fd:dd:4b:f0:8d:ce:c3:07:4f:ce:fe:
                    e5:a6:cd:c7:cc:d7:3c:0b:02:2c:bb:ae:71:fa:cb:
                    9f:08:20:a0:aa:81:76:44:a1:84:71:e2:28:9f:23:
                    9a:b7:24:5a:d3:58:ad:ef:bc:6c:8d:9e:1c:16:81:
                    52:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                33:E0:AB:84:CE:F8:69:E7:64:35:D1:7D:B5:E5:56:61:82:62:57:73
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/33E0AB84CEF869E76435D17DB5E5566182625773.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.0.0/22
                IPv6:
                  2804:418c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267440

    Signature Algorithm: sha256WithRSAEncryption
         54:00:c7:14:49:e9:88:78:2b:99:3e:72:1e:04:e2:a4:53:9a:
         78:b8:d4:13:2a:ab:ca:30:8f:8f:a5:5a:20:75:36:99:76:48:
         bd:0d:37:21:e8:ed:86:07:59:ec:87:c8:f5:34:c2:8c:24:cc:
         20:d4:26:59:42:58:73:93:55:d0:77:22:3f:9e:19:b2:af:94:
         6b:bd:b4:4f:08:56:26:7f:db:dc:75:dd:1b:d5:a5:bd:fc:6c:
         d4:72:95:73:69:a3:7f:1e:9a:0d:ea:b9:28:9f:c4:14:59:14:
         37:df:c7:57:90:f2:f8:be:76:c2:dc:a3:b7:7f:97:c9:39:1d:
         e8:5a:c9:31:91:0f:d5:3b:5e:03:aa:29:38:c7:97:31:33:d3:
         fd:18:26:09:0d:e3:b7:96:3a:11:bb:0f:4b:89:21:02:e7:6e:
         a9:e9:24:3a:87:fa:b0:1e:a3:a8:e4:61:85:10:a5:47:99:3c:
         1c:27:c7:ea:b3:d4:0a:8f:1a:a5:8b:fc:e2:c8:86:b4:a9:43:
         2d:e2:0e:e0:f0:7e:49:0d:63:45:a6:e8:43:78:bf:7b:dd:e3:
         34:89:42:82:87:7c:bc:a9:bb:13:7e:df:34:6c:c1:76:8a:3f:
         0f:3f:01:49:e8:32:91:92:f2:42:65:87:58:ec:6a:85:35:5e:
         2a:f9:58:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:23 2024 by rpki-client on console-fra.rpki-client.org