Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/431709AD8ECE3D05E720A9D6B6A05996B26D73BD.cer
File:                     431709AD8ECE3D05E720A9D6B6A05996B26D73BD.cer (raw, json)
Hash identifier:          uJfMPerbbAUXTkKqwInkmfzYF5kUBJe5dHWhTUFQ7ak=
Subject key identifier:   43:17:09:AD:8E:CE:3D:05:E7:20:A9:D6:B6:A0:59:96:B2:6D:73:BD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2F3E350935FA43641D020AC7E5E2B5BAAECCA06C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/431709AD8ECE3D05E720A9D6B6A05996B26D73BD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 Apr 2024 21:03:18 +0000
Certificate not after:    Tue 22 Apr 2025 21:08:18 +0000
Subordinate resources:    AS: 270440
                          IP: 200.13.84.0/22
                          IP: 2804:6c04::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 13:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:3e:35:09:35:fa:43:64:1d:02:0a:c7:e5:e2:b5:ba:ae:cc:a0:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 23 21:03:18 2024 GMT
            Not After : Apr 22 21:08:18 2025 GMT
        Subject: CN=431709AD8ECE3D05E720A9D6B6A05996B26D73BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:93:26:7e:22:6a:ab:e7:08:53:58:90:9e:f9:
                    1e:a3:db:05:cd:e5:73:7b:14:e5:42:6e:ce:f8:29:
                    c3:b5:cd:c7:37:84:10:c5:b2:23:0a:f6:cf:93:6b:
                    0c:33:8b:29:cd:c9:c4:0c:86:e6:cf:be:be:84:b6:
                    45:a2:10:af:6f:35:51:84:13:c0:af:35:50:64:59:
                    c6:4e:27:29:68:43:68:83:90:50:c3:c0:90:ab:f4:
                    82:d7:cd:ef:cf:1a:b4:bb:d3:77:be:93:d8:54:1b:
                    a8:ca:17:e0:78:78:0f:dd:df:7a:b2:08:08:26:34:
                    d8:93:73:1a:19:d8:b6:4a:0f:b1:44:74:83:c7:86:
                    22:3e:d4:b1:f1:33:95:f1:3b:07:18:ec:b7:06:49:
                    99:fb:8d:90:21:93:c8:a1:49:ef:e2:1e:4d:b8:21:
                    71:b9:8b:f5:4c:d0:9d:28:0a:3b:64:56:70:a9:ca:
                    f9:ad:04:b0:44:ad:ef:9f:c9:d7:ec:17:70:b6:de:
                    08:8e:ae:c7:5b:91:35:bf:e7:2c:ca:60:7e:2e:4e:
                    cb:54:22:43:57:99:5b:2d:0a:a6:a2:2a:73:5e:f1:
                    bb:86:0a:79:7f:63:a1:3a:6c:81:8e:37:d9:57:29:
                    78:c2:d0:5b:3e:5c:89:89:1d:29:26:1b:c9:6b:1b:
                    73:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                43:17:09:AD:8E:CE:3D:05:E7:20:A9:D6:B6:A0:59:96:B2:6D:73:BD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/431709AD8ECE3D05E720A9D6B6A05996B26D73BD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.84.0/22
                IPv6:
                  2804:6c04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270440

    Signature Algorithm: sha256WithRSAEncryption
         ae:15:a7:67:f5:b2:e2:de:e8:4a:d0:31:11:04:0b:4c:ee:7a:
         08:24:60:4a:c7:7a:03:0a:aa:8b:b5:62:c7:9f:f8:26:d6:36:
         6b:d2:d1:3d:9b:9f:c3:88:4c:29:59:00:a6:81:61:52:f5:70:
         ae:5b:57:58:5c:0a:d9:23:31:db:9b:9b:e6:97:5f:38:fd:73:
         e5:59:91:07:ae:fc:57:74:b2:48:8e:9c:01:59:df:88:52:dd:
         c3:c5:70:a5:fe:4c:55:80:5f:c5:76:99:a0:14:7a:b4:03:05:
         ab:10:0a:27:ee:65:af:70:05:b1:f8:a8:e0:07:e5:9e:6b:3a:
         c5:03:7d:fa:e7:26:19:65:7e:87:95:fd:cf:a0:3f:86:1e:f4:
         aa:2f:07:4f:b5:32:c1:3e:78:39:a9:ce:01:a8:56:0e:30:c0:
         6b:26:91:95:c4:e7:bc:36:4d:c4:fd:16:b9:a2:5e:14:e5:4b:
         a7:be:22:9f:e6:01:32:af:40:be:73:11:06:14:96:87:72:c3:
         6e:10:8e:11:f2:45:66:f7:93:7f:00:be:ea:d7:43:e9:9e:4c:
         51:de:12:ba:03:92:24:63:8d:f9:98:4f:08:4f:26:18:cd:ec:
         4f:c2:68:50:71:74:f1:cf:0a:f7:dd:39:10:ab:a4:10:6e:32:
         eb:8b:39:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 12:55:04 2024 by rpki-client on console-fra.rpki-client.org