Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/43DB836C2077B43ED881A065A4DC216114503CEE.cer
File:                     43DB836C2077B43ED881A065A4DC216114503CEE.cer (raw, json)
Hash identifier:          sFIuxhsKECLMQ2UW7gzDcnMB3oUavC0Odb3wpgfVirc=
Subject key identifier:   43:DB:83:6C:20:77:B4:3E:D8:81:A0:65:A4:DC:21:61:14:50:3C:EE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       48A2FC9C7A129061AEEE9595DDD231F8B7322152
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/43DB836C2077B43ED881A065A4DC216114503CEE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 06 Apr 2024 02:16:55 +0000
Certificate not after:    Sat 05 Apr 2025 02:21:55 +0000
Subordinate resources:    AS: 28360
                          IP: 138.94.8.0/22
                          IP: 177.8.0.0/19
                          IP: 179.124.224.0/20
                          IP: 189.76.208.0 -- 189.76.239.255
                          IP: 2804:14::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Jun 2024 18:10:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a2:fc:9c:7a:12:90:61:ae:ee:95:95:dd:d2:31:f8:b7:32:21:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  6 02:16:55 2024 GMT
            Not After : Apr  5 02:21:55 2025 GMT
        Subject: CN=43DB836C2077B43ED881A065A4DC216114503CEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7c:24:2f:ba:4c:25:63:71:58:75:fc:4a:bb:
                    4f:bc:b0:66:3c:60:24:c9:98:eb:d0:d7:2e:3f:ed:
                    46:0b:c1:9a:d6:94:fd:07:ff:1e:92:27:59:d2:53:
                    b9:d3:90:c2:1d:fd:2a:2c:cd:fe:d4:95:57:82:d5:
                    b9:f9:e6:c1:60:05:82:dc:36:7a:73:7b:9f:d5:e5:
                    86:0c:96:37:62:74:7a:0c:99:1d:22:3b:4e:88:ea:
                    b2:43:e6:1d:8a:53:bd:fd:83:23:b8:9f:47:1b:b4:
                    43:18:60:7e:35:e5:41:89:06:c8:b0:b8:03:d4:f8:
                    03:d0:c4:8f:0b:3e:e6:a7:2a:61:2c:cc:1e:11:70:
                    e5:1c:c3:fa:bb:f1:74:d9:59:f6:e1:3f:78:48:08:
                    26:8e:dc:d5:ab:21:53:96:e6:be:3d:60:50:02:61:
                    5b:db:e4:d5:25:6d:54:2d:bf:00:66:10:73:ac:b8:
                    cf:0d:bb:99:27:88:16:4f:8f:33:88:42:6e:56:d3:
                    0b:87:82:e2:a6:56:43:8e:55:04:ae:4c:ae:95:ff:
                    6a:9c:fa:06:25:08:f1:da:d4:f1:c2:87:cf:b1:5f:
                    60:0c:6e:0f:a7:b2:57:ba:8e:ce:ea:d9:45:95:18:
                    78:12:f4:b3:a1:b5:71:d8:0a:f0:b8:61:59:3e:4c:
                    d6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                43:DB:83:6C:20:77:B4:3E:D8:81:A0:65:A4:DC:21:61:14:50:3C:EE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/43DB836C2077B43ED881A065A4DC216114503CEE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.8.0/22
                  177.8.0.0/19
                  179.124.224.0/20
                  189.76.208.0-189.76.239.255
                IPv6:
                  2804:14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28360

    Signature Algorithm: sha256WithRSAEncryption
         4a:44:4d:47:56:ee:44:9c:5d:90:a0:6e:47:8a:50:53:aa:e2:
         84:2f:89:be:d0:9e:eb:eb:73:eb:d2:93:78:63:f6:fa:c3:4a:
         cc:f0:d5:65:cb:89:73:0f:c6:93:7f:76:8a:38:f6:bd:b0:f6:
         27:80:43:32:1b:60:b0:7c:ba:13:44:59:86:b5:d2:49:28:0b:
         c0:e5:1f:f9:f8:eb:5d:11:c0:c7:ae:70:b3:24:63:65:b5:f8:
         4c:f6:22:48:23:52:d0:cb:1e:90:60:f2:98:78:de:11:ee:a5:
         11:83:d5:29:fe:cc:64:3f:75:cd:1a:dd:12:e6:48:14:a9:18:
         7b:ab:1c:4e:19:33:51:3d:1f:93:57:aa:3f:62:c4:b9:c8:94:
         8f:5a:d2:c1:8d:1e:ca:ba:0a:0f:98:89:d4:6b:c6:0d:f9:09:
         4f:59:3c:38:81:c6:7c:d7:7c:f9:fd:c9:16:20:91:b3:7e:d4:
         4c:89:d6:cc:45:0d:f8:37:ea:f4:a3:43:85:40:c5:8d:d2:0d:
         f6:44:97:bb:86:97:92:5a:5b:4c:fb:4b:05:23:d8:d8:3e:ca:
         90:27:b5:7a:9e:19:67:6e:04:6a:75:e9:74:52:d7:ca:16:ef:
         82:b9:42:b4:72:f9:b0:88:a8:9c:03:3d:05:2a:62:4c:0e:c2:
         f4:30:d6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 15:56:13 2024 by rpki-client on console-fra.rpki-client.org