Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/683DE3BC7AE9EEEF8F160B60C8FD37229C08B941.cer
File:                     683DE3BC7AE9EEEF8F160B60C8FD37229C08B941.cer (raw, json)
Hash identifier:          kPDKKVGMA3K5lK6eiVJ6tu6tH5/Rekch0OOvwpxr+74=
Subject key identifier:   68:3D:E3:BC:7A:E9:EE:EF:8F:16:0B:60:C8:FD:37:22:9C:08:B9:41
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       17726BA7F3BFA8C385FC0BD51DD17C920B1C4B26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4FkAAdRe6HGQgonQKDfumJwbQ9ibSuSA5Lz78rTJvHsG/0/683DE3BC7AE9EEEF8F160B60C8FD37229C08B941.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4FkAAdRe6HGQgonQKDfumJwbQ9ibSuSA5Lz78rTJvHsG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 18 Apr 2024 19:04:04 +0000
Certificate not after:    Thu 17 Apr 2025 19:09:04 +0000
Subordinate resources:    AS: 273381
                          IP: 2804:8dcc::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 18:08:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:72:6b:a7:f3:bf:a8:c3:85:fc:0b:d5:1d:d1:7c:92:0b:1c:4b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 18 19:04:04 2024 GMT
            Not After : Apr 17 19:09:04 2025 GMT
        Subject: CN=683DE3BC7AE9EEEF8F160B60C8FD37229C08B941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d5:23:b8:aa:8f:f6:0c:c2:ee:68:8c:c6:f9:
                    b5:17:0e:27:6b:38:4d:f6:e5:3a:9c:24:24:8b:83:
                    d5:ff:d8:31:af:8e:01:fd:cd:e0:0c:38:41:e6:56:
                    83:9c:85:c6:41:06:b6:d6:63:2c:31:4a:e2:5a:15:
                    83:35:d8:51:f7:74:5c:d8:5e:62:cd:b6:03:44:e6:
                    1c:0f:42:d3:aa:78:f1:bb:bb:98:52:a9:93:18:cf:
                    17:fd:9f:22:1f:95:20:1c:2b:97:3d:20:27:fe:a7:
                    66:51:33:c8:2b:b4:55:e1:6b:1d:c0:1b:88:4a:65:
                    7f:a2:55:b2:7d:06:4a:66:6e:48:00:85:3c:03:3e:
                    3c:18:2e:b7:bf:fa:91:ff:24:77:fb:c6:b2:1a:df:
                    ab:73:42:fe:a6:35:60:2d:ba:db:26:29:36:57:19:
                    5e:7e:46:0d:18:4e:58:a4:75:f5:b8:57:94:43:e7:
                    66:fb:66:8a:26:c7:27:28:fd:ec:e5:ab:9b:36:2e:
                    6a:c9:35:da:41:bd:11:45:35:b9:2f:03:2d:81:e3:
                    95:1f:de:9c:32:04:b6:4d:e1:7c:01:43:0a:da:8b:
                    61:e7:04:7d:eb:98:1a:08:e6:f2:09:28:4d:62:d3:
                    ba:14:77:0f:8a:36:70:d2:28:ff:a2:81:79:8b:7e:
                    64:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                68:3D:E3:BC:7A:E9:EE:EF:8F:16:0B:60:C8:FD:37:22:9C:08:B9:41
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4FkAAdRe6HGQgonQKDfumJwbQ9ibSuSA5Lz78rTJvHsG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4FkAAdRe6HGQgonQKDfumJwbQ9ibSuSA5Lz78rTJvHsG/0/683DE3BC7AE9EEEF8F160B60C8FD37229C08B941.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8dcc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273381

    Signature Algorithm: sha256WithRSAEncryption
         51:07:d9:e9:79:cd:7f:62:e7:da:b0:95:80:77:37:cd:a3:d1:
         8c:f4:df:0c:f3:91:0e:0b:a2:3c:58:d0:a8:95:da:3f:99:13:
         89:8d:a4:b3:f7:7b:b1:f2:2a:70:e2:7b:6d:24:50:e7:6b:7a:
         c3:6b:66:5d:d6:13:af:33:30:35:c2:d5:c2:9b:44:8b:bf:a0:
         72:33:a1:9d:fa:10:d5:a0:32:1b:d0:1f:36:b4:9d:6d:f6:0e:
         19:31:70:10:18:d3:85:ca:2a:87:1a:6d:43:e2:e0:ae:3d:61:
         28:d9:ad:49:c7:59:48:17:4a:8c:01:68:9f:1c:48:f7:cc:78:
         5d:81:5e:9a:b2:42:02:93:7c:df:06:f8:b0:32:d0:1c:a0:e3:
         ab:31:d0:5d:08:3c:6c:f6:be:70:7b:76:31:84:30:61:2d:f6:
         82:71:9a:bf:25:90:8c:53:bf:4f:26:19:21:e9:ee:c0:a8:dd:
         dd:e8:6d:99:87:f5:a5:4c:9c:30:7d:16:11:df:ac:9b:85:cd:
         29:98:b6:b7:d7:6d:94:ed:63:32:bf:de:b7:94:37:54:bc:78:
         3c:9a:08:f8:bd:0a:da:76:5a:5d:e8:d6:fc:69:21:b9:7e:03:
         ca:76:d6:c3:88:b7:3e:55:6c:ad:ef:c6:21:ba:49:fb:0f:ed:
         9e:33:dd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 16:14:03 2024 by rpki-client on console-fra.rpki-client.org