Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C.cer
File:                     5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C.cer (raw, json)
Hash identifier:          xW1Wj/3nzZ+akFoWsM7uKMiRFbj7t5mFpKlaUrL2FdU=
Subject key identifier:   5C:B9:A3:9B:2C:0F:8B:2B:32:F8:33:DC:D5:B5:F5:90:0A:99:9C:8C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       07636AE632994580A572B9FD8DFA1EFD791E6C33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 02 Jun 2024 14:22:46 +0000
Certificate not after:    Sun 01 Jun 2025 14:27:46 +0000
Subordinate resources:    AS: 268684
                          IP: 45.165.172.0/22
                          IP: 2804:5504::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 00:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:63:6a:e6:32:99:45:80:a5:72:b9:fd:8d:fa:1e:fd:79:1e:6c:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  2 14:22:46 2024 GMT
            Not After : Jun  1 14:27:46 2025 GMT
        Subject: CN=5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:41:b2:c7:f5:ee:6e:af:a8:1c:ca:3c:3d:68:
                    9a:7b:61:d2:db:22:a1:cf:e9:27:6b:ac:0c:4d:11:
                    c9:26:48:0e:99:a1:b6:9f:40:b5:6b:49:9a:be:71:
                    52:b5:49:f2:05:f1:04:0e:cc:17:5a:b6:51:75:7a:
                    9a:04:0a:75:7a:29:64:91:fe:79:04:4c:fc:f5:04:
                    32:0c:5c:de:8e:a9:dc:59:d7:42:92:c1:3f:cd:cb:
                    e6:66:40:f9:3a:8c:76:dc:14:36:a0:ff:2b:48:fa:
                    8a:0e:01:69:86:e0:f0:91:e1:ba:d9:55:c2:3b:18:
                    33:ba:59:b6:8b:f3:9d:3f:16:38:00:f8:00:02:c6:
                    c5:3d:d6:f8:6a:1b:bd:29:ad:02:35:d7:ff:9a:73:
                    c4:d4:07:e5:ed:4a:da:de:c5:d3:0e:a9:74:45:e8:
                    f7:67:6a:c1:64:fd:b2:39:e8:28:5e:93:47:39:0a:
                    59:75:a1:f5:81:c7:45:38:97:ac:c7:ae:ff:9b:f9:
                    7c:89:76:43:66:44:2e:5b:70:32:96:5a:db:24:d4:
                    fe:7b:21:07:d5:21:6a:07:d3:f3:33:e5:36:60:79:
                    37:f4:6a:10:5d:85:ba:1c:c9:25:32:51:80:63:1d:
                    0d:f2:fc:d3:7f:fb:ef:15:13:3c:f5:d7:1d:93:cd:
                    26:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5C:B9:A3:9B:2C:0F:8B:2B:32:F8:33:DC:D5:B5:F5:90:0A:99:9C:8C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.172.0/22
                IPv6:
                  2804:5504::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268684

    Signature Algorithm: sha256WithRSAEncryption
         c5:7c:5c:4f:72:7a:0a:3f:aa:2e:89:1b:1c:53:63:54:6e:d8:
         92:78:a3:45:7f:9c:87:7a:ee:e3:28:dd:b8:5e:08:e9:7a:83:
         ac:cb:39:0a:80:77:5f:12:32:92:5d:8c:73:c8:9f:c1:53:46:
         e0:4a:56:10:91:9e:7e:39:cc:63:81:cb:17:a7:8a:10:66:0f:
         5c:ed:4e:dd:88:19:ad:e1:7c:91:42:e6:fa:24:b4:9c:08:50:
         79:7f:c8:a2:62:da:35:89:5a:d5:06:c6:9f:f1:53:ec:ad:5c:
         88:9f:fe:b9:ca:f5:9d:a5:85:26:47:45:00:72:30:79:a6:82:
         c3:c4:86:82:db:7e:37:6d:48:e6:0a:5a:07:69:a5:53:d3:30:
         5a:34:3e:ff:8a:20:04:8c:8a:6b:eb:55:50:80:c2:b5:1d:b2:
         40:fd:10:15:34:ac:ef:5e:63:d3:8d:01:39:62:ae:ff:83:30:
         1a:b7:16:18:65:61:fc:76:73:29:f5:c5:cf:92:5a:88:f7:91:
         18:d9:24:54:9a:30:9f:d4:11:b5:c7:80:d0:f6:c6:72:ea:74:
         90:fd:4c:16:8d:32:a2:11:ea:2b:3b:8a:d2:5b:a1:b3:ca:ca:
         2a:44:e4:42:28:88:ca:df:77:ce:88:33:36:47:39:47:48:5d:
         09:62:80:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:16:33 2024 by rpki-client on console-fra.rpki-client.org