Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/43A7C7C2B310D67DE688F19B159433597525FE31.cer
File:                     43A7C7C2B310D67DE688F19B159433597525FE31.cer (raw, json)
Hash identifier:          LeRn0lX5J73y3VKPx6U+OfOQNFY9k0u83taJCKmVr9Y=
Subject key identifier:   43:A7:C7:C2:B3:10:D6:7D:E6:88:F1:9B:15:94:33:59:75:25:FE:31
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       13E2C09F0762948A42231B17FB9ACA4F864B0609
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/43A7C7C2B310D67DE688F19B159433597525FE31.mft
caRepository:             rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:25:57 +0000
Certificate not after:    Wed 02 Apr 2025 18:30:57 +0000
Subordinate resources:    AS: 266136
                          IP: 45.6.136.0/22
                          IP: 2804:3b38::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 23:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:e2:c0:9f:07:62:94:8a:42:23:1b:17:fb:9a:ca:4f:86:4b:06:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:25:57 2024 GMT
            Not After : Apr  2 18:30:57 2025 GMT
        Subject: CN=43A7C7C2B310D67DE688F19B159433597525FE31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:69:7d:92:f2:be:25:99:e0:19:32:c0:bd:9e:
                    6d:f2:15:56:c6:03:1e:44:1f:7a:28:74:1d:a6:b8:
                    9b:16:e5:d0:21:3e:88:7f:b5:5f:08:c0:bf:49:27:
                    4b:75:9d:95:38:15:64:53:5e:e0:e1:9c:04:69:14:
                    e8:7c:db:f8:41:60:39:0e:14:a8:91:ef:94:a8:1c:
                    09:63:85:3f:98:1e:0f:8f:d8:a7:17:fd:6c:4c:5f:
                    8d:6d:a9:a9:8b:18:aa:e1:77:01:2c:09:24:18:6f:
                    ba:48:5d:87:fb:f0:35:0f:d2:7b:2a:62:ca:4d:7f:
                    f6:08:f9:65:c9:2e:c2:da:2f:9b:13:e8:31:0a:f8:
                    d4:0b:fa:9b:d0:79:0d:80:5f:a9:71:5a:2b:fb:5e:
                    2d:c0:00:f9:d4:fb:63:36:f0:3d:b1:ca:6a:ba:e7:
                    e5:c9:ea:18:b2:25:9a:58:54:60:38:f4:cb:c5:46:
                    70:c5:3f:82:da:2b:6e:73:e0:55:cb:d2:22:e9:5d:
                    42:17:08:66:df:79:5c:26:a8:64:61:f4:63:f9:65:
                    1e:9d:d8:c0:06:e1:72:1b:a5:18:a4:8e:31:c0:9e:
                    b7:cc:16:75:8b:f3:92:7a:a9:5a:95:4f:79:a4:80:
                    14:e8:f4:f1:5e:b9:ac:53:e1:9b:29:7e:bd:32:40:
                    31:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                43:A7:C7:C2:B3:10:D6:7D:E6:88:F1:9B:15:94:33:59:75:25:FE:31
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/43A7C7C2B310D67DE688F19B159433597525FE31.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.136.0/22
                IPv6:
                  2804:3b38::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266136

    Signature Algorithm: sha256WithRSAEncryption
         07:d2:a0:de:da:40:30:69:9b:55:d1:17:9c:52:8d:65:95:b5:
         9b:7c:c8:5f:59:75:8f:d0:24:78:6f:94:92:ab:42:64:4d:9b:
         3a:7a:6b:77:42:d2:25:68:bf:bd:ec:69:45:8b:1e:65:53:47:
         9f:21:30:64:6e:21:b8:de:4f:02:a2:c5:c9:53:d2:7b:c0:44:
         7e:c2:dd:a7:3b:84:49:57:4c:9b:d9:3b:8e:ec:d9:02:39:28:
         59:0c:5e:21:c4:2a:6f:ae:ec:f3:25:2a:76:4b:7d:4c:5e:5f:
         12:91:f8:7c:cb:12:db:d3:12:a0:3e:7e:b7:4d:42:b5:d4:fa:
         69:30:44:71:90:ed:fa:a1:c1:d9:b5:90:95:61:c3:5a:73:e5:
         a2:6e:93:f5:03:8d:68:b2:b9:05:d8:43:0f:bd:84:bc:b4:de:
         1b:47:89:2c:0f:2a:89:ae:5f:5e:0c:ba:ce:35:d1:2f:cc:21:
         27:5d:33:30:0d:7f:75:76:07:2e:f2:ca:3d:97:65:05:d7:cc:
         a9:13:6b:91:91:ab:c7:fc:d0:4f:7b:bc:4e:eb:a6:cc:d1:c5:
         37:3d:61:52:35:b8:4b:d8:3b:f0:41:0b:83:6d:27:07:07:db:
         35:48:66:e0:3d:b8:dd:f2:ad:da:ae:13:03:b0:a6:3f:18:17:
         32:f6:22:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 00:29:10 2024 by rpki-client on console-ams.rpki-client.org