Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/818877B39D32BF83248D22BD29D162AD2243D97A.cer
File:                     818877B39D32BF83248D22BD29D162AD2243D97A.cer (raw, json)
Hash identifier:          V0xx7qAgZYW9SzBxvr8x7ODT3GaVXA85Rb9uBEY0B3w=
Subject key identifier:   81:88:77:B3:9D:32:BF:83:24:8D:22:BD:29:D1:62:AD:22:43:D9:7A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2581F55C7DDFB6460F862B5FF4CDA42372483EEB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/818877B39D32BF83248D22BD29D162AD2243D97A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 15:32:44 +0000
Certificate not after:    Thu 03 Apr 2025 15:37:44 +0000
Subordinate resources:    AS: 61717
                          IP: 45.71.144.0/22
                          IP: 131.72.4.0/22
                          IP: 170.233.16.0/22
                          IP: 2804:1b44::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 03:32:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:81:f5:5c:7d:df:b6:46:0f:86:2b:5f:f4:cd:a4:23:72:48:3e:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 15:32:44 2024 GMT
            Not After : Apr  3 15:37:44 2025 GMT
        Subject: CN=818877B39D32BF83248D22BD29D162AD2243D97A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:82:00:ed:fb:60:d0:ad:7f:fc:1a:17:69:9e:
                    c5:95:86:89:6e:81:46:b5:cc:0b:85:95:2e:3c:eb:
                    a7:5c:2d:78:f1:61:09:ea:1e:2d:71:7b:89:d8:d4:
                    31:02:44:89:bc:0e:04:15:d8:f7:3e:45:d8:f9:ce:
                    d4:99:7d:7b:9d:9d:88:d9:c4:cc:41:5e:0a:00:99:
                    8d:46:ba:c5:7c:9b:83:f9:e9:c2:a5:ff:1a:03:f1:
                    a0:f7:5e:b5:fc:e9:54:47:9c:e9:c1:58:cc:1f:ca:
                    75:7c:03:17:a0:c1:46:a5:e3:5a:89:fe:b5:03:41:
                    a1:1b:8c:38:67:51:82:b4:f5:d8:24:7c:58:a2:99:
                    f0:ff:ba:e1:90:ff:f5:08:08:be:56:42:c3:b1:eb:
                    a6:57:c6:4b:8b:3e:d9:5f:dc:b7:4f:31:ae:bd:cd:
                    bc:b2:79:61:fc:da:9f:a5:dc:4b:4c:91:b0:83:f6:
                    3e:1f:04:3f:58:f0:06:1a:77:9e:84:fb:c6:4d:36:
                    0c:a9:b2:83:26:dc:ec:5e:76:bc:ff:21:b6:49:8b:
                    19:65:3b:b2:09:75:30:1f:9c:b4:18:ea:b7:ed:34:
                    8a:af:db:44:5d:08:29:09:a8:fe:0b:0f:0d:5f:41:
                    f7:aa:43:46:94:2c:c0:30:e1:5a:41:df:33:83:7a:
                    17:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                81:88:77:B3:9D:32:BF:83:24:8D:22:BD:29:D1:62:AD:22:43:D9:7A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/818877B39D32BF83248D22BD29D162AD2243D97A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.144.0/22
                  131.72.4.0/22
                  170.233.16.0/22
                IPv6:
                  2804:1b44::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61717

    Signature Algorithm: sha256WithRSAEncryption
         4b:14:69:7a:48:31:ca:5a:a7:94:41:e3:47:b7:86:e7:57:f5:
         51:af:67:f9:95:1b:ba:3d:17:cd:dc:bd:17:b6:a3:11:f3:93:
         d2:0a:6c:f2:cd:62:18:6d:6f:27:de:25:da:68:bd:19:16:c9:
         f7:6d:52:05:19:55:b3:7f:40:e3:10:e8:59:b3:7d:ca:17:99:
         b7:37:77:c2:f2:b9:a1:8b:85:74:fc:c8:e1:3a:09:5c:28:83:
         a4:5f:f6:1c:e1:c2:75:78:cc:9d:a6:3c:ef:65:96:91:ff:bd:
         e8:89:e0:3d:b4:7b:d2:86:27:05:c9:27:5c:af:87:78:ad:45:
         d5:8a:47:b3:dd:03:cd:a0:8a:12:a5:81:8a:2f:04:6c:41:8e:
         cd:c8:19:46:5d:a7:58:54:8c:cd:17:d6:b8:3c:7a:1d:91:fa:
         9f:04:8d:89:4f:29:1a:01:f8:ff:2a:f5:10:c2:df:7e:90:e3:
         8a:29:f3:68:93:bc:8d:77:8d:17:f4:0d:64:ba:e5:91:84:70:
         96:85:5f:60:4d:62:41:ae:ab:77:6a:ee:19:90:d7:b5:7a:2f:
         3d:5f:18:2c:ec:3f:20:44:27:1f:fc:48:73:f1:13:8d:a7:26:
         80:14:c8:b4:9f:da:1c:ab:92:b5:64:ef:b5:14:29:90:d8:f9:
         98:c0:f8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:39:05 2024 by rpki-client on console-ams.rpki-client.org