Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
File:                     801C62756CEAB17FA0153A254E96D04D8EA570B3.cer (raw, json)
Hash identifier:          0lN1mw+bqp6SVkMQvCYfKaWPqz0px09f4jHQT/o9fCE=
Subject key identifier:   80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3CE8F996520B9E4758EBE227629C584019097DA5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 14:12:20 +0000
Certificate not after:    Thu 03 Apr 2025 14:17:20 +0000
Subordinate resources:    AS: 27712
                          IP: 200.220.160.0/20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e8:f9:96:52:0b:9e:47:58:eb:e2:27:62:9c:58:40:19:09:7d:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 14:12:20 2024 GMT
            Not After : Apr  3 14:17:20 2025 GMT
        Subject: CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:86:42:07:96:86:5a:58:35:fe:62:ce:96:1d:
                    31:3a:6f:75:0e:e7:72:f9:62:b2:95:d5:f6:a7:3a:
                    01:1a:c1:48:2b:f7:8c:7f:aa:74:2e:2e:6e:03:59:
                    a4:fe:7d:d5:fa:21:e0:08:d3:97:53:aa:ef:02:47:
                    92:66:79:e7:68:7d:67:67:9d:70:eb:a3:ff:a9:32:
                    55:5a:94:04:ec:ae:e2:e7:71:c8:68:1b:12:cb:0c:
                    50:6f:ae:bf:c1:82:86:12:10:da:9d:3b:75:dc:7f:
                    91:66:df:e9:d9:31:70:df:24:54:64:66:83:6c:d9:
                    7b:6b:de:5b:94:93:f8:08:cb:ee:7d:4e:35:b4:77:
                    d9:38:33:0a:28:54:98:58:fa:85:8c:8c:99:42:24:
                    6d:3c:30:ce:29:2a:6c:06:a6:1c:66:6a:0b:ed:db:
                    dd:88:cf:34:de:18:b4:88:ef:89:4d:ed:f5:64:4d:
                    50:41:44:d2:88:b3:26:39:ea:ac:a2:80:ce:03:14:
                    0e:fc:4a:0e:45:4e:e1:62:f0:9c:0d:9f:6f:2c:c9:
                    4f:4e:9b:ea:03:92:25:fc:a4:e5:ac:3a:66:96:9e:
                    d5:92:5d:83:12:56:0e:e7:27:73:3e:41:aa:74:1d:
                    02:5f:5d:15:f0:6d:dd:87:a9:6f:69:eb:d8:39:3e:
                    49:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.160.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27712

    Signature Algorithm: sha256WithRSAEncryption
         28:53:62:91:01:ca:04:e2:99:0b:3f:5f:9a:90:43:55:7d:3c:
         66:01:72:aa:3d:30:b7:d6:8e:ab:aa:56:90:da:68:e9:ac:03:
         57:8c:14:57:70:e6:05:ff:4e:8a:b0:fb:61:b4:2d:9c:d5:c6:
         45:e2:cb:f3:62:8d:50:16:b5:fb:f1:e1:bf:29:f4:9e:14:79:
         0a:b6:6d:ae:6b:62:59:64:0b:01:23:dd:f4:0b:8d:2f:17:c3:
         e7:92:94:2b:81:cc:40:c9:c3:d9:83:81:3f:f7:e5:42:b4:7c:
         1c:34:54:22:4c:f4:87:91:ff:bd:24:72:fd:01:f2:91:7e:df:
         2d:da:b3:a2:db:35:d3:c5:86:cf:6f:9e:91:8a:0b:56:a7:dd:
         18:b0:c9:b1:32:61:79:c1:ab:82:b1:dd:7e:77:c1:fc:ec:db:
         82:5a:45:02:a0:e7:c9:f5:9a:40:be:38:be:c8:17:04:ff:65:
         03:3c:d3:9e:8d:d1:cd:97:bd:5e:21:94:4b:87:1f:da:de:22:
         52:52:e9:20:a2:79:79:d3:d0:31:81:81:be:64:80:bc:b1:09:
         26:3a:ff:03:68:95:83:7a:ae:f4:b3:45:14:3b:22:67:0d:dc:
         a8:83:ad:f6:27:39:ba:ec:3e:b1:dd:30:e6:c0:ad:47:e7:87:
         39:4c:d0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:57:09 2024 by rpki-client on console-fra.rpki-client.org