Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/63CE5DDC6D8DDB9FA4286A19F947C1D1111C6776.cer
File:                     63CE5DDC6D8DDB9FA4286A19F947C1D1111C6776.cer (raw, json)
Hash identifier:          tN7/M0cZeVimxvB+i5iLIcV/SwLkSI/rV0IQ5Uuov5Y=
Subject key identifier:   63:CE:5D:DC:6D:8D:DB:9F:A4:28:6A:19:F9:47:C1:D1:11:1C:67:76
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5665AAF197C4A88E1125385EE3FF90988C6F692A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BoGz2CgWnBUbtewGZwfdnkktpcT8FvTBmW7trcpFC1dZ/0/63CE5DDC6D8DDB9FA4286A19F947C1D1111C6776.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BoGz2CgWnBUbtewGZwfdnkktpcT8FvTBmW7trcpFC1dZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 13 Nov 2024 15:37:59 +0000
Certificate not after:    Wed 12 Nov 2025 15:42:59 +0000
Subordinate resources:    AS: 263024
                          IP: 186.249.80.0/20
                          IP: 2804:a20::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:65:aa:f1:97:c4:a8:8e:11:25:38:5e:e3:ff:90:98:8c:6f:69:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 13 15:37:59 2024 GMT
            Not After : Nov 12 15:42:59 2025 GMT
        Subject: CN=63CE5DDC6D8DDB9FA4286A19F947C1D1111C6776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:69:2f:d4:82:09:a1:58:31:f3:c2:dd:97:0b:
                    d7:d1:93:e6:3a:a8:22:5c:42:fa:50:e4:a2:ea:2a:
                    81:f6:73:bc:99:5b:f7:c3:f4:9a:cf:57:be:63:38:
                    46:e2:7e:8a:75:ff:17:ff:16:a6:ad:3d:fe:c1:28:
                    e4:6f:3b:bb:80:5f:79:88:3f:f1:54:e3:11:4c:42:
                    bc:f2:57:74:6c:65:59:0d:67:4d:7f:80:38:89:5b:
                    08:bc:04:6c:b9:e8:71:80:35:fd:e2:51:c9:d1:b7:
                    9e:16:20:99:e7:4a:6e:a9:4c:80:c3:8c:be:ee:92:
                    a3:ed:b3:a4:f4:87:7f:71:66:5d:ce:a8:6c:27:7a:
                    62:60:a8:15:f7:35:71:29:dd:2a:fc:ad:2b:02:c7:
                    fa:0f:29:d5:8f:36:6f:8c:e1:79:5a:42:72:f6:ff:
                    cb:1e:12:c5:1c:23:b7:11:56:74:4e:36:b1:f4:ca:
                    cf:87:9c:5a:e5:da:8b:bc:fe:b8:a2:b2:0c:9c:2d:
                    ab:78:3c:b8:9b:6e:7c:93:7d:71:d7:38:19:33:10:
                    dd:3b:a8:75:e3:a1:43:da:78:9b:5c:aa:91:9b:13:
                    a2:aa:77:30:41:2f:d3:15:14:56:b5:f1:53:1f:9f:
                    97:fb:55:a3:4d:da:b9:4b:9b:03:c0:4c:19:73:2b:
                    b9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                63:CE:5D:DC:6D:8D:DB:9F:A4:28:6A:19:F9:47:C1:D1:11:1C:67:76
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BoGz2CgWnBUbtewGZwfdnkktpcT8FvTBmW7trcpFC1dZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BoGz2CgWnBUbtewGZwfdnkktpcT8FvTBmW7trcpFC1dZ/0/63CE5DDC6D8DDB9FA4286A19F947C1D1111C6776.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.80.0/20
                IPv6:
                  2804:a20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263024

    Signature Algorithm: sha256WithRSAEncryption
         22:8a:5a:6c:72:98:7c:e5:30:56:7b:46:4d:58:4a:fb:36:2c:
         dd:92:32:19:14:b8:f5:cd:9d:af:80:d5:0f:60:94:f7:42:25:
         e6:df:c5:45:1c:3e:05:e6:1e:f9:bb:37:c7:88:58:df:de:1f:
         dd:0d:ff:da:a5:1f:26:81:29:7c:86:ec:de:f6:44:20:ef:84:
         9a:85:00:96:74:81:47:81:fd:89:dd:84:2b:75:64:0e:b0:85:
         52:4b:48:95:5c:9e:75:96:1f:f1:58:8a:65:d2:82:27:96:21:
         2c:91:68:8f:7e:56:70:53:ee:fb:82:e0:c8:0e:3d:14:ee:c3:
         b2:5e:41:fd:cf:4b:40:78:71:20:8e:8b:2c:32:e9:4c:82:8a:
         7d:72:75:51:db:82:f6:f1:b9:61:5e:77:d3:9d:bf:2e:11:fd:
         14:b4:53:61:67:b9:d9:44:8a:86:66:ae:e7:c1:e2:e5:61:f4:
         32:11:a6:cd:26:c0:fe:b9:75:19:9a:09:a0:9e:cb:e4:33:90:
         a0:ff:02:6c:23:5f:89:a2:23:8e:a9:11:4c:4c:7a:9f:45:99:
         ed:99:9e:87:e7:3f:34:fc:0b:8c:2f:91:0d:e3:8a:30:a0:af:
         7d:05:82:fe:96:90:20:05:2c:c9:60:11:59:57:37:5c:ae:1d:
         7a:f2:bd:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:44:02 2024 by rpki-client on console-ams.rpki-client.org