Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/41FAEE4FB242061F96FA0AC747E9DAAF65360241.cer
File:                     41FAEE4FB242061F96FA0AC747E9DAAF65360241.cer (raw, json)
Hash identifier:          b14tpVLl9X/wpivL1bRsDWbRraKEs5nTGjoeOuR70P4=
Subject key identifier:   41:FA:EE:4F:B2:42:06:1F:96:FA:0A:C7:47:E9:DA:AF:65:36:02:41
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       53CE19A4FAA2854EA9EFED1DF639F8A8AD8BF5CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/1/41FAEE4FB242061F96FA0AC747E9DAAF65360241.mft
caRepository:             rsync://rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 20:58:46 +0000
Certificate not after:    Wed 02 Apr 2025 21:03:46 +0000
Subordinate resources:    AS: 269555
                          IP: 45.187.188.0/22
                          IP: 2804:6664::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ce:19:a4:fa:a2:85:4e:a9:ef:ed:1d:f6:39:f8:a8:ad:8b:f5:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 20:58:46 2024 GMT
            Not After : Apr  2 21:03:46 2025 GMT
        Subject: CN=41FAEE4FB242061F96FA0AC747E9DAAF65360241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4a:48:92:17:5b:07:8c:32:95:39:c7:35:29:
                    c8:9d:0f:21:69:b6:dc:5a:11:61:f8:c4:24:56:9d:
                    0b:30:ab:ab:c7:e6:9a:6a:e5:25:d2:d6:f5:ba:1a:
                    38:41:0c:d3:7d:9f:d8:fc:55:f7:37:d2:86:3a:cf:
                    2b:03:85:0b:3a:33:d8:0b:ea:f4:9f:01:3d:06:9a:
                    8d:7f:70:4a:e3:e8:d7:d0:80:a0:a2:70:95:0f:97:
                    60:1f:90:b0:23:cc:fb:6c:67:21:ac:fe:4a:98:0e:
                    5b:97:51:05:fc:7e:be:66:ed:71:39:cf:44:7c:f2:
                    a3:98:e5:24:fc:13:d5:aa:84:24:73:03:67:53:2a:
                    94:a7:9b:d0:ae:07:6f:47:9e:e6:af:05:20:c8:b7:
                    e2:c9:de:7c:12:36:51:2e:63:4a:16:50:e3:68:8d:
                    2b:33:0b:87:4b:df:b4:1e:10:4f:ce:0b:d6:ea:eb:
                    12:0d:90:d8:87:4d:53:aa:13:18:52:27:a4:63:9c:
                    28:87:88:49:df:99:0d:ef:3f:5b:c4:6b:84:0c:5a:
                    d1:47:25:71:1f:cf:ff:a7:17:4b:f5:24:1e:e7:2c:
                    cf:1e:e2:81:e3:5d:2f:e3:e9:f7:4e:6b:36:cb:fa:
                    74:cf:66:b8:73:38:43:b3:1a:63:2f:5e:6d:32:a2:
                    a2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                41:FA:EE:4F:B2:42:06:1F:96:FA:0A:C7:47:E9:DA:AF:65:36:02:41
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/1/41FAEE4FB242061F96FA0AC747E9DAAF65360241.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.188.0/22
                IPv6:
                  2804:6664::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269555

    Signature Algorithm: sha256WithRSAEncryption
         d7:1c:3c:9b:94:67:7f:0f:44:38:4b:8f:c2:88:1d:d2:de:92:
         e9:23:ba:fb:13:42:94:16:6c:d1:f1:95:39:d7:93:d0:23:df:
         5a:6d:02:53:ad:1a:b9:d9:0c:76:ac:28:fb:03:94:7e:11:bc:
         f4:d2:64:04:a7:d9:fc:1b:70:81:b1:3a:e1:30:3b:a2:34:73:
         a2:59:56:2a:99:a0:97:42:6f:d5:3d:7e:24:bc:03:7c:31:30:
         a9:b7:6e:77:71:4d:37:e6:a1:b8:c1:bc:6e:a0:0b:75:4c:2a:
         7c:fc:1c:fe:81:51:d8:99:72:9f:5b:33:32:45:f4:c7:56:87:
         cf:f1:35:b1:e6:c8:61:d4:d0:db:e6:74:bb:39:07:92:e5:b6:
         73:06:8d:09:1e:12:60:17:d8:39:bd:d5:8a:d6:30:dd:6e:76:
         5e:45:71:37:43:43:c5:32:5e:90:e2:be:73:1a:33:ab:f2:69:
         b9:6a:76:91:ce:41:c7:be:19:d2:b9:72:61:33:83:4f:a5:d6:
         d2:c1:89:0d:2e:e8:89:9c:46:5e:df:8c:98:f0:40:ef:d6:d6:
         57:f6:34:ca:9e:bc:d9:9f:ef:b2:54:92:8b:2f:08:98:2e:1e:
         98:e2:6a:d9:42:ed:b3:1c:ac:fa:e9:7d:cc:db:36:1d:b3:fb:
         63:a3:04:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:36 2024 by rpki-client on console-fra.rpki-client.org