Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer
File:                     74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer (raw, json)
Hash identifier:          wEi8d39bHfmBGsY2uJbWREPgC4qzkcal3yZggIDVaqg=
Subject key identifier:   74:AD:EB:5B:0B:06:9D:AC:2D:94:A5:DD:C5:51:0D:9D:CC:0C:B6:51
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2BD5D92E011C04D03E1FA81656DED9B3817091A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.mft
caRepository:             rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 09:36:29 +0000
Certificate not after:    Thu 03 Apr 2025 09:41:29 +0000
Subordinate resources:    AS: 53112
                          IP: 138.97.4.0/22
                          IP: 143.255.60.0/22
                          IP: 170.231.72.0/22
                          IP: 177.23.8.0/21
                          IP: 187.109.16.0/20
                          IP: 189.90.144.0/20
                          IP: 2804:d0c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 Nov 2024 21:52:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d5:d9:2e:01:1c:04:d0:3e:1f:a8:16:56:de:d9:b3:81:70:91:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 09:36:29 2024 GMT
            Not After : Apr  3 09:41:29 2025 GMT
        Subject: CN=74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8f:dd:e0:62:f5:d6:ca:43:05:a2:06:e4:3f:
                    5c:76:62:95:6a:20:c3:0f:c3:92:bb:b9:cb:fa:58:
                    23:1b:d9:76:5f:6f:04:7e:4c:35:01:b1:52:cf:1e:
                    a5:4f:7e:eb:f4:fd:60:b4:2c:c8:80:f4:cb:12:e8:
                    fe:22:2a:21:db:23:e9:02:97:97:98:1b:ac:40:a5:
                    ec:57:a4:54:fe:05:b6:d3:e3:1c:27:a0:3d:81:f1:
                    cd:41:f2:60:07:24:2a:bc:14:a9:19:3c:3c:97:c2:
                    cd:1b:67:9e:53:eb:1b:1d:cc:1e:18:02:1d:06:c9:
                    a7:a4:e8:78:2f:2c:07:cb:b0:1e:fb:88:69:7a:4f:
                    6b:ba:e1:d9:b1:a9:bf:6d:c1:34:a9:d1:6b:d2:ad:
                    05:82:66:19:07:21:3e:be:35:8b:9f:23:80:67:39:
                    da:99:c6:98:fe:fe:9c:2a:22:ce:0d:b6:62:11:69:
                    14:e1:a2:d7:46:08:eb:da:c9:2a:1a:34:1f:87:1a:
                    52:bc:d4:37:c8:e8:c8:f0:c5:a8:56:38:c3:a4:a3:
                    70:ae:72:31:24:c9:8c:28:b9:06:93:18:8d:ca:cf:
                    05:39:89:19:cb:0f:68:b6:79:9a:d6:99:45:36:b8:
                    18:54:81:d8:83:19:ac:b1:e5:a4:67:24:ef:95:eb:
                    1a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                74:AD:EB:5B:0B:06:9D:AC:2D:94:A5:DD:C5:51:0D:9D:CC:0C:B6:51
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.4.0/22
                  143.255.60.0/22
                  170.231.72.0/22
                  177.23.8.0/21
                  187.109.16.0/20
                  189.90.144.0/20
                IPv6:
                  2804:d0c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53112

    Signature Algorithm: sha256WithRSAEncryption
         9f:85:b5:f1:25:d2:ec:c9:57:1d:35:ff:30:4a:4a:16:7c:1f:
         c0:7e:fb:b1:a5:cc:d5:1e:b9:47:4d:92:04:84:ce:d4:1b:63:
         f2:ef:83:18:79:be:02:b4:97:f8:34:85:6f:15:63:05:16:f6:
         1d:a8:77:13:53:de:56:f1:04:7c:4b:6e:5f:55:cd:9a:df:1e:
         f1:2a:19:c7:85:0d:67:34:2d:a7:37:30:06:4b:b6:39:74:9c:
         f0:a1:4d:3c:7d:19:58:ca:e3:71:4b:b2:d8:28:a4:7e:de:63:
         5d:84:33:d4:c9:66:35:3d:93:d0:a7:e9:84:b8:c1:52:84:4f:
         0b:33:1c:71:2a:41:4d:2e:0d:c9:86:e8:23:fd:6a:4c:62:dd:
         6e:6a:f8:a3:a7:87:e5:14:c0:e9:e4:52:b4:89:aa:f0:e1:97:
         94:9e:f1:5d:8e:91:b6:f5:1a:de:8c:a8:b7:fb:87:cb:fd:6c:
         2d:e3:96:11:f7:f3:ff:4a:0b:45:9c:92:56:8c:32:cb:3f:e4:
         1b:1d:7b:b2:17:94:99:25:fc:44:76:82:b1:ea:11:7c:09:5b:
         46:9b:e6:32:11:b2:98:1b:3d:69:f1:7c:8d:7e:eb:5c:88:31:
         31:12:53:fa:70:ed:a6:11:ab:ad:55:f3:2c:ce:39:ba:59:16:
         85:1e:9e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 22:06:53 2024 by rpki-client on console-ams.rpki-client.org