Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer
File:                     8204A8F62764E655E183BB09417B0875F11B3A7D.cer (raw, json)
Hash identifier:          GySAJvJLUIFAPfgIlg8qz6IO+VzEYR3UxD9MPNalghM=
Subject key identifier:   82:04:A8:F6:27:64:E6:55:E1:83:BB:09:41:7B:08:75:F1:1B:3A:7D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       69D3072BE378A2CC55DCF4AACC615E5405697D0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 09:40:15 +0000
Certificate not after:    Thu 03 Apr 2025 09:45:15 +0000
Subordinate resources:    AS: 52913
                          IP: 167.249.4.0/22
                          IP: 170.150.76.0/22
                          IP: 170.246.164.0/22
                          IP: 177.23.168.0/21
                          IP: 179.127.40.0/21
                          IP: 190.109.80.0/22
                          IP: 2804:1088::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 03:32:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d3:07:2b:e3:78:a2:cc:55:dc:f4:aa:cc:61:5e:54:05:69:7d:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 09:40:15 2024 GMT
            Not After : Apr  3 09:45:15 2025 GMT
        Subject: CN=8204A8F62764E655E183BB09417B0875F11B3A7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0e:d4:2c:11:0f:dd:1d:c9:05:46:e6:df:d9:
                    6e:2a:0c:30:12:6d:48:2f:19:e4:60:81:6a:ff:ee:
                    02:e7:98:0f:38:c4:e9:8c:6c:25:05:2d:77:f5:37:
                    d2:ec:1b:40:2a:25:0d:39:e1:ff:f0:49:01:ba:e2:
                    2f:c4:fa:e5:94:87:c3:71:bf:81:eb:34:d3:cf:a3:
                    96:d5:4a:25:a3:65:25:38:d9:38:e4:31:3a:c9:82:
                    c1:5e:0b:72:fd:0b:c2:bb:7e:41:d0:8e:3c:b1:81:
                    d8:4b:63:ae:5c:d0:84:45:03:86:76:a3:c7:92:94:
                    6d:57:73:ec:a5:3e:64:a9:d5:ad:98:ad:1f:32:47:
                    2e:6e:b4:6e:a8:af:bd:dd:91:00:c4:17:14:1c:04:
                    33:41:41:b8:3c:4a:b0:1f:da:f0:1e:81:d5:84:57:
                    2f:7c:cb:b5:ea:7a:6d:d7:55:34:27:34:4d:60:8d:
                    a5:10:fc:fa:3b:e2:b1:85:d0:a4:ca:07:84:89:8b:
                    6f:a0:bf:b6:9a:48:5b:05:b5:02:ce:e3:a9:f1:04:
                    62:0c:15:6b:98:69:26:cd:ae:88:f4:4b:c8:ce:6b:
                    3a:36:83:9b:bd:c6:a3:b1:e1:f4:46:a8:b9:a1:d5:
                    69:5b:47:52:13:65:40:c7:00:8a:06:4b:a7:21:12:
                    d9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                82:04:A8:F6:27:64:E6:55:E1:83:BB:09:41:7B:08:75:F1:1B:3A:7D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.4.0/22
                  170.150.76.0/22
                  170.246.164.0/22
                  177.23.168.0/21
                  179.127.40.0/21
                  190.109.80.0/22
                IPv6:
                  2804:1088::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52913

    Signature Algorithm: sha256WithRSAEncryption
         22:26:18:df:a8:c1:0f:c0:32:77:dd:fd:fd:b2:a0:a2:08:76:
         41:c5:d0:bc:84:5b:b1:66:be:3e:00:f8:10:6f:9f:49:e5:ec:
         eb:21:27:03:c4:3e:2f:fc:1f:d3:92:cb:de:8d:35:7b:9a:95:
         90:e0:44:c7:9e:7d:59:5f:ae:49:29:18:06:6f:95:e7:80:fb:
         75:dd:34:2a:de:f5:e9:2a:c8:2a:7b:f0:61:41:e0:61:1c:38:
         12:f1:b3:9e:a3:62:9f:e6:88:7a:26:fc:66:ab:9e:72:4e:7e:
         7e:6a:9a:9d:18:f3:46:51:b0:50:36:04:c4:5c:d1:13:a8:ea:
         db:fb:5c:94:76:dc:af:cb:28:e9:66:5c:b4:68:6a:fb:7a:19:
         c8:ac:87:0b:ac:10:38:dd:13:09:7b:73:19:e5:dc:cd:d0:c4:
         81:b7:71:01:16:ba:2f:40:e1:45:fd:0b:b1:cd:96:1c:f5:07:
         bf:de:24:bd:1c:90:06:c4:2e:54:7c:ed:1a:c3:e9:83:97:93:
         a6:87:47:a5:6e:05:2f:2f:3d:c7:3a:ff:40:78:7c:10:a1:b1:
         04:55:d6:32:1e:d1:61:59:13:c7:fc:02:ef:5d:92:ae:35:9c:
         32:a6:02:fb:9e:ed:e6:ea:c4:b7:35:b8:fd:cd:ce:4a:af:9b:
         d5:46:ef:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:35:20 2024 by rpki-client on console-fra.rpki-client.org