Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/68EC60223DF10BE63B7A84464ACF2A9697173D75.cer
File:                     68EC60223DF10BE63B7A84464ACF2A9697173D75.cer (raw, json)
Hash identifier:          OrB3M/1LNyxM8piJlAXVKxyBL5Mb+7F6cJbO6BOJeFs=
Subject key identifier:   68:EC:60:22:3D:F1:0B:E6:3B:7A:84:46:4A:CF:2A:96:97:17:3D:75
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7BB5463B1B140DB583761A80BBB0FE5961CE74E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 19 Apr 2024 14:12:25 +0000
Certificate not after:    Fri 18 Apr 2025 14:17:25 +0000
Subordinate resources:    AS: 265140
                          IP: 143.255.0.0/22
                          IP: 2804:2b34::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:b5:46:3b:1b:14:0d:b5:83:76:1a:80:bb:b0:fe:59:61:ce:74:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 19 14:12:25 2024 GMT
            Not After : Apr 18 14:17:25 2025 GMT
        Subject: CN=68EC60223DF10BE63B7A84464ACF2A9697173D75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:92:10:7d:90:d9:91:3d:ed:84:78:c0:1c:45:
                    74:a2:dc:c1:79:a6:ef:11:63:cc:fa:d5:74:a1:00:
                    20:3e:47:2a:c5:9d:42:e1:30:84:19:da:46:47:9b:
                    ea:e2:97:82:93:56:a7:ba:8a:3e:11:83:f9:a8:45:
                    52:d2:4d:51:1e:3d:fb:e4:f9:c2:3e:8f:72:ab:d9:
                    ff:e1:3e:c8:20:e8:3f:ab:9b:f3:d6:06:cd:3e:ce:
                    dc:81:10:be:20:06:0c:49:c4:28:6c:8e:44:67:fe:
                    24:7a:3c:51:38:18:25:ed:a5:0f:06:c8:c9:cb:80:
                    d5:d2:60:89:72:97:b8:13:cb:56:f9:dd:54:fb:9e:
                    b0:c6:d1:f7:48:be:b8:7f:c9:6e:76:c0:fb:fb:c9:
                    bc:02:6e:3c:bc:41:d4:be:6a:87:c2:d1:c2:8a:e5:
                    b7:f4:1e:a5:cf:b1:24:a3:88:5f:fd:28:06:15:0d:
                    2a:57:35:06:39:55:fd:a7:f2:38:8b:8f:ef:4a:e9:
                    f6:74:69:a6:7a:3d:3b:2f:5b:87:e2:00:3a:e7:2f:
                    c6:df:ef:32:3d:b7:71:ed:75:74:51:92:66:d7:77:
                    29:23:28:bd:45:04:57:f4:77:f9:57:be:f9:a0:b6:
                    18:0e:8a:c2:b6:80:cc:0c:88:5c:10:d5:ef:2c:e5:
                    f5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                68:EC:60:22:3D:F1:0B:E6:3B:7A:84:46:4A:CF:2A:96:97:17:3D:75
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.0.0/22
                IPv6:
                  2804:2b34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265140

    Signature Algorithm: sha256WithRSAEncryption
         8c:f2:42:65:5b:ee:00:f1:5c:7b:dd:0c:fd:8e:62:91:f2:09:
         53:33:97:c8:fa:40:15:01:73:e9:9b:2b:69:aa:e5:ca:b3:b2:
         39:19:be:b9:73:6c:93:c8:4b:57:13:34:94:22:a5:b9:86:25:
         bd:b0:68:ed:f6:b5:cf:b3:06:7d:f7:0f:73:1c:61:24:e7:46:
         b0:b9:c7:00:c6:3b:e7:c2:09:c0:b3:42:1d:32:2b:17:9a:2f:
         0d:4c:7f:8b:eb:60:3c:99:b3:15:ca:d1:94:f8:e5:57:85:95:
         92:ca:88:f5:85:b2:27:73:f5:2a:88:df:6a:92:2d:8e:0f:d3:
         bc:96:69:ec:2a:ec:b7:1a:fa:c5:e4:e5:b7:6b:7d:1b:31:78:
         be:20:ec:04:3e:5c:f0:32:19:76:18:35:ea:34:04:cd:18:b4:
         f9:81:99:21:71:09:cf:46:79:a3:c8:45:5c:77:bc:9e:0c:79:
         92:39:d0:9a:92:91:34:8b:58:d4:32:6b:3c:69:4c:3c:a7:70:
         c7:49:a2:53:5a:d6:b5:cc:dc:3f:84:de:63:39:40:08:71:85:
         c9:af:db:88:ad:91:53:95:09:01:25:9f:4b:32:77:9a:78:c8:
         b3:de:97:24:cf:b5:d2:56:c3:54:06:5e:90:3f:ce:e5:09:dc:
         1c:af:b1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:02:11 2024 by rpki-client on console-ams.rpki-client.org