Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4055DA0ACB382D3CF1F290979963231C8BAB34C2.cer
File:                     4055DA0ACB382D3CF1F290979963231C8BAB34C2.cer (raw, json)
Hash identifier:          OGcD6cbOjTlGHqkxtsc+djj5ecoKlt0NEmsPCfC7G3Y=
Subject key identifier:   40:55:DA:0A:CB:38:2D:3C:F1:F2:90:97:99:63:23:1C:8B:AB:34:C2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       384C95E34BE7C195A53F909606696D7ADF939DE0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/4055DA0ACB382D3CF1F290979963231C8BAB34C2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 06:14:51 +0000
Certificate not after:    Thu 03 Apr 2025 06:19:51 +0000
Subordinate resources:    AS: 273412
                          IP: 200.196.40.0/22
                          IP: 2804:8e3c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jul 2024 12:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:4c:95:e3:4b:e7:c1:95:a5:3f:90:96:06:69:6d:7a:df:93:9d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 06:14:51 2024 GMT
            Not After : Apr  3 06:19:51 2025 GMT
        Subject: CN=4055DA0ACB382D3CF1F290979963231C8BAB34C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ae:5a:91:ec:35:28:9d:d8:b7:51:2c:63:ca:
                    af:cc:2c:1d:c8:d5:16:05:75:0d:2a:6a:e2:31:4f:
                    30:4e:39:09:3a:fb:2d:83:bf:66:9a:a4:f8:d5:10:
                    a3:e7:2f:8e:93:48:c7:b4:43:8b:e2:67:3d:83:e0:
                    23:66:36:8d:36:88:a1:d0:bb:76:ed:a7:f8:e8:57:
                    7f:06:ce:5d:e4:60:57:f0:d3:cf:3b:ef:50:77:fb:
                    c0:be:02:fe:3d:f8:a9:6b:e0:a6:52:93:75:d4:3b:
                    2e:9f:0a:3a:23:59:61:9a:94:b3:43:ee:ad:3f:5d:
                    2d:23:67:af:43:9c:ea:c3:68:95:62:a0:6e:7d:7c:
                    59:4f:03:dc:a4:ec:44:63:09:d8:d1:b4:6a:26:49:
                    35:65:f3:21:80:d0:bc:c8:42:de:4b:64:a1:74:32:
                    ad:44:2f:94:d8:64:eb:79:bb:a8:a2:f1:b8:0f:e9:
                    28:54:6e:cd:6c:3b:7f:e5:29:db:b4:c3:d9:8c:65:
                    ed:e1:9b:e5:cc:de:08:66:4a:cc:80:1f:1b:1e:52:
                    64:f4:5b:fc:ec:6f:f6:5b:22:3c:bc:9d:c9:47:b6:
                    df:85:85:27:13:74:83:21:6f:7f:8f:46:fc:ca:28:
                    0b:5e:a6:65:0a:61:94:84:ca:a2:39:db:42:13:37:
                    e7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                40:55:DA:0A:CB:38:2D:3C:F1:F2:90:97:99:63:23:1C:8B:AB:34:C2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/4055DA0ACB382D3CF1F290979963231C8BAB34C2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.40.0/22
                IPv6:
                  2804:8e3c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273412

    Signature Algorithm: sha256WithRSAEncryption
         1e:80:32:6c:15:e7:f6:24:57:8f:ab:cb:e2:20:2b:71:c4:5a:
         bf:f4:07:c9:93:54:c2:ad:e6:c5:32:1c:be:f8:56:b1:bc:94:
         6e:03:b5:34:6d:23:6a:27:78:26:dd:78:70:f6:97:72:8b:e4:
         66:73:ca:c6:2d:1e:be:f3:fb:09:34:0f:44:08:7e:cc:d0:57:
         ee:72:83:9f:dd:3f:bf:35:3d:59:0d:af:fe:2e:4c:ae:70:72:
         5b:45:f6:d6:d8:2c:a6:81:c2:0a:a8:50:fb:5f:d2:bd:ac:91:
         bf:fa:1d:72:3f:43:d0:52:ef:e2:b1:24:29:53:5f:cd:86:26:
         0a:86:9f:6a:50:8a:b6:34:cf:fc:0e:46:f5:30:32:ce:91:98:
         5c:40:a3:85:39:49:77:e3:4e:38:87:82:d3:71:fa:c8:a9:44:
         59:a3:ba:36:ad:f5:42:f3:e9:25:90:b5:e8:c9:60:f8:34:e5:
         20:01:2f:a0:69:f3:09:4e:1d:6e:61:9b:ec:79:44:35:b5:a3:
         90:2d:d5:72:47:45:e7:e5:45:95:f6:05:92:05:80:58:b3:76:
         98:f2:22:a3:20:f9:4c:86:bf:a7:5d:5d:53:7c:1e:1b:81:05:
         93:b5:ab:8d:c6:21:e7:cb:0c:07:58:d4:99:84:50:1d:cb:f7:
         06:89:45:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 10:26:48 2024 by rpki-client on console-ams.rpki-client.org