Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/47F932452F6354876C2CDBACA9AD34D90A502586.cer
File:                     47F932452F6354876C2CDBACA9AD34D90A502586.cer (raw, json)
Hash identifier:          zoAwmi7qGbbhwtj69x6lM+1Jz6JbUZDvaISQsA1quzE=
Subject key identifier:   47:F9:32:45:2F:63:54:87:6C:2C:DB:AC:A9:AD:34:D9:0A:50:25:86
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5E9642F6E83AAA7ACD7773AD38CD079307CCB8B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 20 May 2024 17:18:45 +0000
Certificate not after:    Mon 19 May 2025 17:23:45 +0000
Subordinate resources:    AS: 262355
                          IP: 131.161.72.0/22
                          IP: 177.91.172.0/22
                          IP: 177.125.216.0/22
                          IP: 186.195.112.0/20
                          IP: 186.233.188.0/22
                          IP: 2804:82c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 03:07:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:96:42:f6:e8:3a:aa:7a:cd:77:73:ad:38:cd:07:93:07:cc:b8:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 20 17:18:45 2024 GMT
            Not After : May 19 17:23:45 2025 GMT
        Subject: CN=47F932452F6354876C2CDBACA9AD34D90A502586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ca:73:14:13:26:97:70:70:30:ab:97:ef:66:
                    8d:0e:e5:e5:85:eb:2a:83:d5:9c:90:a0:ea:42:82:
                    55:3d:7d:09:40:27:bb:25:38:49:0b:d0:d1:5e:83:
                    59:3b:6b:39:8d:8c:85:37:5c:4a:4c:ad:c5:cf:24:
                    29:dd:33:54:c0:b9:98:16:4a:7e:17:38:b9:87:7f:
                    f6:3f:3e:61:ab:17:bd:5f:87:e1:a7:dc:bf:99:09:
                    25:af:48:90:40:93:d5:2a:fc:4b:fb:fe:94:68:fc:
                    7e:04:9e:b0:a2:45:a0:70:22:c0:25:11:36:90:f7:
                    a1:a4:43:9a:be:19:4a:f8:48:61:2e:15:90:b3:0c:
                    9c:7f:94:98:00:3d:87:a5:cc:8f:09:d7:ca:ec:2a:
                    6e:30:cd:1a:ec:5a:1d:bc:96:f7:a9:5b:78:91:b1:
                    63:34:21:5e:56:73:4c:98:41:e6:fe:36:cc:00:54:
                    e9:1c:ec:32:b7:63:1d:52:4d:08:d4:e4:cf:79:02:
                    6d:86:b8:5b:f3:14:93:53:43:2e:b2:42:89:62:3f:
                    59:19:92:49:e5:f8:af:9a:c6:91:3e:20:80:06:78:
                    26:6b:70:aa:5e:33:c7:c0:47:bb:f2:c6:4f:a7:ea:
                    bd:42:a5:07:68:68:95:f8:08:11:ec:7d:f5:8c:57:
                    23:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                47:F9:32:45:2F:63:54:87:6C:2C:DB:AC:A9:AD:34:D9:0A:50:25:86
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.72.0/22
                  177.91.172.0/22
                  177.125.216.0/22
                  186.195.112.0/20
                  186.233.188.0/22
                IPv6:
                  2804:82c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262355

    Signature Algorithm: sha256WithRSAEncryption
         cf:81:ed:4c:43:54:07:10:be:a8:1e:4a:b4:4c:92:cd:8d:93:
         de:44:12:8d:2c:01:5b:f7:22:35:24:1e:a2:28:86:82:68:70:
         98:b9:89:6b:68:47:65:5e:d6:ad:e2:80:a8:be:4b:23:e6:d4:
         95:28:28:d1:6d:07:c6:3f:56:51:b3:d1:13:4a:f6:30:d5:42:
         54:97:a8:a8:b1:df:32:59:09:8e:a6:9c:d5:e7:be:a2:70:b1:
         10:f4:72:89:4c:8a:bf:59:ac:aa:67:d1:cf:62:4e:b7:fa:7b:
         46:8c:c1:e6:1e:88:4a:bf:55:8c:f0:29:5e:3a:7b:2e:86:55:
         bc:7c:8d:92:06:25:80:b9:18:d5:5c:b5:eb:a9:61:79:a1:a6:
         55:dc:0c:5e:b5:98:fa:a2:4b:07:68:12:15:2f:90:3d:64:b7:
         c7:de:34:f9:32:cd:2e:cd:a0:57:f2:db:d9:54:30:33:d5:58:
         15:b6:77:3d:76:db:68:ca:1c:e6:62:2a:bd:94:67:ad:05:0a:
         bd:00:ef:4b:67:24:4f:b6:fd:72:00:88:40:88:b1:56:ef:7c:
         5c:a5:43:ce:c3:bc:9e:00:8a:3b:c8:2a:69:e5:d5:5b:40:6b:
         56:58:fd:e0:71:ac:43:f5:72:fd:5a:2e:df:7b:ec:19:49:ea:
         3e:17:00:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:08:44 2024 by rpki-client on console-ams.rpki-client.org