Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/436CDA1F9370BE6E582FE8897E382D5816B0AE61.cer
File:                     436CDA1F9370BE6E582FE8897E382D5816B0AE61.cer (raw, json)
Hash identifier:          y9ps5Mrn7nri0F7KewNI5SxTVS3WgNT2MmSPl8Pafk4=
Subject key identifier:   43:6C:DA:1F:93:70:BE:6E:58:2F:E8:89:7E:38:2D:58:16:B0:AE:61
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       577806C65EBC5A8214B2E5127F7CDB5BDE89A6AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/1/436CDA1F9370BE6E582FE8897E382D5816B0AE61.mft
caRepository:             rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 20:45:35 +0000
Certificate not after:    Thu 03 Apr 2025 20:50:35 +0000
Subordinate resources:    AS: 266310
                          IP: 170.79.196.0/22
                          IP: 2804:35d8::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:78:06:c6:5e:bc:5a:82:14:b2:e5:12:7f:7c:db:5b:de:89:a6:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 20:45:35 2024 GMT
            Not After : Apr  3 20:50:35 2025 GMT
        Subject: CN=436CDA1F9370BE6E582FE8897E382D5816B0AE61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e7:da:50:5b:0b:c8:98:26:57:ba:e1:9b:86:
                    72:0a:52:d5:d9:dd:3c:91:4f:b8:fc:e5:f7:2a:b0:
                    e6:ce:2f:c3:1b:37:c5:81:9a:f5:e1:24:0b:c3:5f:
                    df:41:7a:05:98:09:93:b8:a0:2e:5e:95:85:d9:44:
                    cf:f8:d0:58:60:6e:3f:04:2e:a6:a5:7f:2e:46:9a:
                    57:e9:bc:d1:6c:e7:ce:30:45:5e:03:61:09:48:a8:
                    cf:bc:3f:86:6e:cd:d3:c2:8b:3c:4e:c3:e4:82:ff:
                    35:4c:3f:c9:80:b1:9f:9e:05:2f:ad:d5:da:1f:8e:
                    1d:d2:07:2a:54:be:f1:bc:4a:b2:66:bb:b8:71:2c:
                    f6:cf:eb:66:52:f0:e2:f1:b5:67:bf:74:f9:1b:bd:
                    6c:bb:d2:81:6f:3c:95:36:7b:e7:a8:0a:f2:a9:cc:
                    00:12:8a:c1:7b:b0:43:f6:ca:87:62:23:ac:4e:8b:
                    55:76:41:f2:a7:f1:bc:83:f5:3b:85:98:6f:c5:bc:
                    96:40:c1:6d:f9:cd:88:53:92:a1:8e:c4:30:32:ef:
                    82:43:79:85:a7:7f:ac:7e:46:16:9f:93:da:6e:ea:
                    c3:86:cc:ec:d0:e5:ff:66:95:22:b4:ca:9b:bc:e6:
                    0f:16:7e:10:72:cb:92:09:13:29:37:b4:b4:18:08:
                    6a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                43:6C:DA:1F:93:70:BE:6E:58:2F:E8:89:7E:38:2D:58:16:B0:AE:61
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/1/436CDA1F9370BE6E582FE8897E382D5816B0AE61.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.196.0/22
                IPv6:
                  2804:35d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266310

    Signature Algorithm: sha256WithRSAEncryption
         cc:4b:2e:a0:31:d6:e2:98:bd:45:4d:dd:a6:ff:8a:49:78:4d:
         13:06:e3:2b:ca:77:98:a1:da:a1:a6:7c:7e:64:01:40:d5:0c:
         4d:3d:14:9c:79:b2:1b:dd:03:22:20:82:68:8f:fc:6e:d8:74:
         b8:1f:21:95:f7:df:08:6d:a5:dd:0f:c8:65:50:5c:05:2f:bd:
         3d:36:e0:77:0c:fd:d2:04:64:10:d7:a6:c8:a2:03:04:9e:44:
         3e:bb:eb:18:b2:56:af:93:44:c4:a9:38:59:bc:59:b1:7c:18:
         85:2d:4d:59:46:ba:b6:50:51:d4:51:8b:e2:ec:98:bb:1c:22:
         85:70:a6:5b:bf:2e:2a:92:26:5e:a5:12:40:a9:a2:a4:a3:64:
         30:31:0a:92:bc:2d:36:3a:c3:0f:96:58:96:05:1b:74:07:3f:
         cf:51:4f:b1:b2:c9:e8:18:14:64:2b:a5:01:84:83:cb:87:06:
         91:cc:5c:9c:e1:ea:62:c0:d7:07:5c:f4:fd:1d:49:26:27:43:
         01:f9:50:18:8c:47:e8:67:7b:56:d8:15:67:8b:00:9e:52:a8:
         37:14:58:a0:fc:a7:14:e5:9e:18:8d:b2:bf:58:0b:9d:fa:4e:
         ee:cd:78:94:44:63:fd:f9:7a:1d:8a:8e:cd:da:04:43:d2:81:
         f4:7f:34:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:37 2024 by rpki-client on console-fra.rpki-client.org