Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/648C0855082FB44E47607549445757FD4ABB0BD4.cer
File:                     648C0855082FB44E47607549445757FD4ABB0BD4.cer (raw, json)
Hash identifier:          VsH3m48WatVNY/3aXP09+1JC7hIPWENSNOOO4L/klFs=
Subject key identifier:   64:8C:08:55:08:2F:B4:4E:47:60:75:49:44:57:57:FD:4A:BB:0B:D4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0E0B8FBCDBD1DE757BCEFC1462257183F885BC46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/0/648C0855082FB44E47607549445757FD4ABB0BD4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 28 Oct 2024 14:31:47 +0000
Certificate not after:    Mon 27 Oct 2025 14:36:47 +0000
Subordinate resources:    AS: 272176
                          IP: 2804:8318::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:0b:8f:bc:db:d1:de:75:7b:ce:fc:14:62:25:71:83:f8:85:bc:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 28 14:31:47 2024 GMT
            Not After : Oct 27 14:36:47 2025 GMT
        Subject: CN=648C0855082FB44E47607549445757FD4ABB0BD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:63:6b:3d:1e:aa:f8:09:86:86:1a:fe:65:fa:
                    90:3a:22:95:f7:38:c6:14:e0:5b:4c:c5:91:b5:7d:
                    c0:23:c8:0b:ab:ae:bd:df:a0:56:4a:ae:db:13:a4:
                    30:ac:78:eb:ec:64:ac:5f:95:c9:7a:57:1f:d5:f1:
                    c4:8a:58:15:da:61:62:02:6c:5f:bc:1a:24:80:33:
                    47:3e:fa:44:db:47:cf:10:56:20:5f:c3:80:c8:89:
                    b0:3b:fa:d8:ca:90:1c:90:98:70:90:be:44:1e:70:
                    90:ed:df:2c:d7:c5:f2:3b:9e:dd:75:73:db:15:1a:
                    aa:cc:d6:a6:70:3d:1a:c6:0e:28:f1:2d:d0:b4:c7:
                    00:26:9b:5a:46:31:f9:41:1f:36:5f:cc:d3:1d:d5:
                    b2:3b:5f:d8:f2:e0:71:e6:4c:91:76:00:c9:0b:d5:
                    b8:7c:25:84:c0:7c:8b:c1:4f:7a:01:2a:12:03:71:
                    54:e8:04:ca:5b:5b:61:c7:3c:16:bb:a1:21:c9:98:
                    9b:0a:8b:97:30:aa:2a:4b:17:b5:6e:a8:20:cf:13:
                    7c:f7:65:aa:b6:e5:53:b5:5f:bf:18:82:69:02:84:
                    1a:f4:55:17:3a:b6:2d:73:93:af:78:d6:5a:21:0b:
                    d8:6d:ba:ac:bd:b4:42:1b:b6:6d:d1:84:3b:6f:68:
                    3d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                64:8C:08:55:08:2F:B4:4E:47:60:75:49:44:57:57:FD:4A:BB:0B:D4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/0/648C0855082FB44E47607549445757FD4ABB0BD4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8318::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272176

    Signature Algorithm: sha256WithRSAEncryption
         85:4e:a8:e0:6d:3f:62:18:88:b4:71:ce:21:0d:77:dc:85:5d:
         87:32:0c:4c:a8:2a:13:81:a7:63:25:6c:14:da:8a:48:9b:b0:
         47:ee:6f:60:0f:49:a5:93:b9:d4:2b:9b:e7:21:5a:ad:9f:c3:
         64:f2:98:f0:19:58:7d:47:4a:b6:09:36:39:46:31:48:77:5f:
         f6:26:02:02:f1:e9:4a:fe:d8:3a:e3:b1:1a:57:6e:5b:4d:a5:
         28:92:26:d1:6b:9d:36:da:e7:ac:99:18:7d:21:aa:1d:b3:67:
         f1:ec:30:04:5f:45:c5:40:d4:d2:ca:5a:2e:fe:64:2f:f8:c7:
         da:d6:ea:16:c4:f6:6e:c5:d9:c4:77:aa:bd:98:9f:fd:f5:d3:
         57:2e:f1:fb:98:f6:4a:20:ff:dc:25:0c:4b:77:36:f4:5e:6a:
         6f:62:56:60:16:25:7b:b6:a1:84:e6:03:99:65:97:04:f6:dc:
         ac:da:2c:1b:0e:db:d9:0e:d2:78:0d:dc:d9:70:d3:5a:da:23:
         38:fd:0d:33:2a:d6:8a:6f:a9:16:0b:02:f5:eb:f7:50:5b:be:
         df:43:e3:3a:00:15:96:db:e1:31:6f:35:d3:ff:2d:37:3d:cc:
         7d:40:8b:d7:ee:e3:d4:f4:12:88:0c:fa:c6:d0:90:c1:54:3d:
         2d:fe:ca:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:51 2024 by rpki-client on console-fra.rpki-client.org