Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.cer
File:                     78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.cer (raw, json)
Hash identifier:          bGzss7lsPCRY2U57CZyLREk4fW+z+42cuhH5AAGkYao=
Subject key identifier:   78:C3:1F:85:CF:8B:6A:84:18:FA:D2:5A:55:F5:94:2F:3B:AC:DE:0D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       43A2CD23AFFDFC8C39D555CD2CB820437B125D87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 20 May 2024 12:56:45 +0000
Certificate not after:    Mon 19 May 2025 13:01:45 +0000
Subordinate resources:    AS: 266986
                          IP: 45.226.40.0/22
                          IP: 200.229.92.0/22
                          IP: 2804:4660::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a2:cd:23:af:fd:fc:8c:39:d5:55:cd:2c:b8:20:43:7b:12:5d:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 20 12:56:45 2024 GMT
            Not After : May 19 13:01:45 2025 GMT
        Subject: CN=78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5d:f2:1c:f3:43:b9:39:d2:e0:31:ce:d5:b1:
                    19:d6:fb:62:f5:a1:8b:50:89:9c:c0:69:5d:59:16:
                    1b:96:c2:26:91:68:08:d2:c8:b5:b1:5e:5e:af:9b:
                    9c:9e:8a:99:82:6b:30:7a:04:d7:6e:f8:38:2e:5d:
                    e6:66:1e:7d:8b:a8:c6:b1:cc:94:48:e3:9a:04:87:
                    49:fe:94:6a:f3:8e:8f:7e:65:af:6b:a4:0d:52:01:
                    ef:da:75:ea:ad:ce:87:d8:0f:5e:8b:37:75:bb:41:
                    a3:50:f3:d2:ed:8f:74:bd:21:0c:1c:11:fc:09:01:
                    78:71:15:c3:ac:0a:5b:dd:75:34:21:40:d8:c0:5e:
                    d9:79:2d:85:31:25:f2:af:e0:c5:48:e5:4b:93:26:
                    f0:3f:0f:8f:70:7b:b8:dd:c9:63:86:fb:97:91:67:
                    d3:d1:47:6e:a2:47:a8:7b:06:9c:16:08:89:35:5b:
                    f0:af:37:2d:dd:8e:1e:c7:bc:4b:56:9c:8f:4a:3f:
                    b5:7d:0d:93:1f:f2:a6:a9:a4:dc:30:1d:f9:dc:69:
                    d0:70:b5:e8:6b:0b:5a:8a:8e:9d:1a:c5:e8:5c:56:
                    59:d4:a1:2b:61:26:3c:19:d8:53:1a:b4:53:06:c8:
                    aa:32:3c:99:0e:e2:d4:ec:af:c2:42:13:b9:03:dc:
                    47:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                78:C3:1F:85:CF:8B:6A:84:18:FA:D2:5A:55:F5:94:2F:3B:AC:DE:0D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.40.0/22
                  200.229.92.0/22
                IPv6:
                  2804:4660::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266986

    Signature Algorithm: sha256WithRSAEncryption
         27:6b:a9:c0:2c:cd:74:bc:87:4a:d8:d9:fc:66:52:c4:cc:e9:
         b5:b8:73:7d:7d:28:61:7c:bb:6c:b6:a1:97:5c:2d:bc:74:1c:
         50:ee:5d:5f:d4:9a:2e:b0:bc:83:fa:bd:e3:5e:97:6c:b2:2b:
         21:01:b8:e2:aa:d4:ee:96:8b:b4:64:96:6c:23:f1:a0:64:0e:
         fe:b2:1f:a5:7f:44:fd:ab:cd:dc:db:2f:87:3d:87:f8:c4:15:
         aa:67:45:47:ef:50:b4:cb:77:57:c5:d0:7f:8e:03:40:33:0d:
         82:f1:65:4c:14:65:1d:c8:1c:f7:60:fd:16:9e:5f:f8:0f:ba:
         a3:8a:89:bb:31:9e:b2:86:bf:0e:af:15:5e:ea:c0:c5:b1:f4:
         23:f4:56:d5:14:5c:f7:10:55:de:91:cd:68:c5:f5:9f:80:ec:
         88:e2:29:1a:6a:aa:57:da:63:34:a3:ca:98:00:3a:45:85:1d:
         ae:1f:51:a5:64:b6:87:80:45:84:55:92:bb:63:e7:4d:c2:08:
         b6:56:ba:bd:d2:f7:15:da:f4:74:e5:ef:d6:92:74:57:59:ed:
         a6:48:62:05:3e:70:79:72:3f:f4:a1:96:61:84:41:ae:d0:92:
         f4:c4:e7:86:70:21:0a:87:47:8f:59:08:8c:ef:ff:bb:1c:a0:
         4c:68:b7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:49 2024 by rpki-client on console-fra.rpki-client.org