Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5A2848029237EDE072BF0D27156F239E1FEBEF52.cer
File:                     5A2848029237EDE072BF0D27156F239E1FEBEF52.cer (raw, json)
Hash identifier:          EFv6OGBcShd5JSoouZLThJKkKF7wnu69l4o7msCGFOU=
Subject key identifier:   5A:28:48:02:92:37:ED:E0:72:BF:0D:27:15:6F:23:9E:1F:EB:EF:52
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       524101A714DD2F9860F3D1C523BBDDF1D99DF4C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/5A2848029237EDE072BF0D27156F239E1FEBEF52.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 19 Nov 2024 19:55:24 +0000
Certificate not after:    Tue 18 Nov 2025 20:00:24 +0000
Subordinate resources:    AS: 61831
                          IP: 201.140.252.0/22
                          IP: 2804:1a00::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:41:01:a7:14:dd:2f:98:60:f3:d1:c5:23:bb:dd:f1:d9:9d:f4:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 19 19:55:24 2024 GMT
            Not After : Nov 18 20:00:24 2025 GMT
        Subject: CN=5A2848029237EDE072BF0D27156F239E1FEBEF52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cc:24:98:30:24:7a:f4:d4:0f:6d:c1:1c:54:
                    69:b1:3a:ae:47:b9:d8:49:ea:76:0c:7a:3a:63:4d:
                    34:e7:a5:c8:ad:5d:f2:fd:f9:c4:d0:c4:4d:f3:3a:
                    cb:35:24:47:f0:86:4f:2a:82:fb:af:f7:a3:e7:2d:
                    f9:4a:73:cb:12:ab:fb:d7:b4:b0:7b:30:37:8f:24:
                    9f:16:26:40:9d:97:1f:11:33:f0:ae:fb:d2:11:95:
                    90:72:82:93:34:93:17:12:c0:f8:39:e8:c0:43:22:
                    b3:55:9e:70:7a:b0:bc:67:51:29:ec:27:40:a8:1e:
                    53:12:0b:89:63:59:bf:4c:71:1a:f7:5e:90:5e:bc:
                    3f:12:4f:71:81:6d:9e:8f:88:2a:da:5c:d5:3f:df:
                    a6:aa:a0:ed:e9:04:47:89:4e:70:99:42:60:41:c3:
                    fa:ef:13:6e:61:c5:af:be:48:69:39:dd:a7:5f:40:
                    84:c2:bd:4e:c0:96:c4:1c:67:89:d0:76:6d:96:b4:
                    09:b4:c2:38:77:5a:e5:77:a7:e9:29:e2:ec:d2:ae:
                    03:4d:55:2e:d3:38:7f:b6:a1:70:f8:c8:71:57:f2:
                    eb:e5:74:11:aa:95:e0:01:21:0b:8b:e8:62:eb:82:
                    35:e4:af:e2:18:d2:dd:08:32:ba:8f:f5:aa:65:a9:
                    ec:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:28:48:02:92:37:ED:E0:72:BF:0D:27:15:6F:23:9E:1F:EB:EF:52
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/5A2848029237EDE072BF0D27156F239E1FEBEF52.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.140.252.0/22
                IPv6:
                  2804:1a00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61831

    Signature Algorithm: sha256WithRSAEncryption
         53:a1:0e:56:c5:52:a6:61:5d:2f:12:4a:6d:24:c1:9f:9d:ec:
         c2:84:4e:e9:cf:d0:14:fd:53:2b:85:c8:30:c0:b9:b4:69:1a:
         71:1c:d8:d1:6c:97:f4:d7:17:d9:4a:41:b4:1b:cf:27:26:9a:
         9e:8d:7c:2f:7d:3c:66:64:6f:e6:f7:07:b3:d6:68:3c:43:10:
         9f:9a:16:96:28:94:58:94:d5:c5:4a:73:e3:85:db:75:20:4c:
         ab:bf:c6:7b:2b:7d:aa:34:59:5a:03:1f:bf:4e:79:73:9e:42:
         c9:02:c9:32:0e:7e:1d:34:da:e3:9c:45:99:0c:11:9c:b1:99:
         ea:57:c0:ee:ae:fb:b1:8c:d8:30:80:02:e2:79:72:09:84:c2:
         60:2d:8b:ab:7b:04:7d:53:04:59:64:f4:a4:fd:c4:d0:67:13:
         e9:7a:38:99:ed:d1:09:ca:4e:7c:0a:5d:ff:ad:9f:12:38:25:
         f7:e5:34:87:8e:11:a3:95:93:0a:0c:09:60:7a:cc:f0:1e:28:
         20:d8:52:90:b3:41:8a:74:49:59:f1:e4:ee:c3:a9:fa:26:8e:
         dc:70:88:90:0c:2d:c8:35:d1:62:b0:63:c1:b0:d1:b9:39:1f:
         4b:6b:17:53:d8:5a:f4:38:69:1d:7c:74:cf:7f:4b:cd:90:cc:
         b3:fe:61:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:29 2024 by rpki-client on console-fra.rpki-client.org