Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer
File:                     870F31E28EB6835FE94CC62D908989A74790CB3E.cer (raw, json)
Hash identifier:          RB6BDiKRHZSpDFzaYNgo9pq6W+IXZtzgi15srxrzc3I=
Subject key identifier:   87:0F:31:E2:8E:B6:83:5F:E9:4C:C6:2D:90:89:89:A7:47:90:CB:3E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       604418ABB66E3CFB6502B9BE3BDBA89C8847A543
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 16 Oct 2024 13:02:02 +0000
Certificate not after:    Wed 15 Oct 2025 13:07:02 +0000
Subordinate resources:    AS: 269175
                          IP: 45.181.92.0/22
                          IP: 2804:1f4c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:44:18:ab:b6:6e:3c:fb:65:02:b9:be:3b:db:a8:9c:88:47:a5:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 16 13:02:02 2024 GMT
            Not After : Oct 15 13:07:02 2025 GMT
        Subject: CN=870F31E28EB6835FE94CC62D908989A74790CB3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:59:39:ce:b4:d3:2d:8a:0b:fa:b0:6c:68:bd:
                    71:2e:9e:76:20:be:61:2c:d4:52:83:2d:36:85:e4:
                    01:2d:eb:39:5f:91:af:29:19:78:1b:2b:95:1d:d2:
                    ff:ba:d7:30:85:89:7d:89:c6:4f:82:c1:69:e7:aa:
                    6e:bc:f7:e1:35:54:ad:a4:c6:90:76:67:30:81:b6:
                    b7:c1:6e:44:14:1e:07:8e:5b:ae:f0:65:a7:c8:94:
                    98:81:89:fe:42:1f:85:28:1a:64:09:3a:cc:72:7e:
                    a9:8b:17:7f:10:94:d1:78:f6:94:1b:ad:3b:ec:fc:
                    a9:b0:d7:07:ec:ce:d9:57:cd:ba:bb:f0:11:27:ed:
                    02:43:c2:bb:32:63:61:f6:74:cb:b8:98:4b:6c:60:
                    67:06:50:c9:ff:02:2a:af:d0:e2:5e:07:00:2f:c5:
                    0f:ce:b9:04:56:84:53:bf:7d:a9:b9:ee:4d:fa:72:
                    a4:7b:4c:19:86:90:e8:d7:db:5f:d3:79:8d:68:d6:
                    4a:e2:51:43:6a:4d:e6:57:1b:75:27:a1:55:f6:b9:
                    2a:b8:6c:da:77:d0:d3:d3:13:70:7b:12:5d:44:d7:
                    2a:e0:18:07:74:4c:60:80:69:c6:c5:54:8b:f6:4f:
                    3b:2f:43:a8:fe:b2:c9:2f:04:91:92:09:ac:7f:a2:
                    87:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                87:0F:31:E2:8E:B6:83:5F:E9:4C:C6:2D:90:89:89:A7:47:90:CB:3E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.92.0/22
                IPv6:
                  2804:1f4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269175

    Signature Algorithm: sha256WithRSAEncryption
         98:af:99:40:0c:b1:7c:ce:61:80:2c:f1:11:4a:bd:3a:b8:90:
         06:a8:75:6a:91:2a:71:ff:c8:53:ed:5d:3c:38:ef:7d:49:2d:
         21:02:5a:3b:ca:78:5b:fc:c0:e2:05:7d:c2:c7:df:45:12:2e:
         ba:0b:12:05:30:65:34:f2:58:f2:57:be:f5:c5:0e:d1:68:6d:
         e6:dd:92:26:f1:e4:a0:56:28:5e:6f:82:fa:81:f7:79:e8:f2:
         08:5f:75:57:79:3b:fa:c8:e8:32:f7:3c:ea:41:05:1e:d6:57:
         57:21:ee:f7:7f:3e:ae:13:af:cb:e9:d5:61:73:8a:fd:da:f7:
         a0:da:dc:f2:f1:d4:3d:60:98:49:66:dd:84:bc:a1:95:99:a0:
         29:3f:b1:79:06:ea:05:3d:e7:e0:88:7e:cb:c1:a1:c6:d7:b9:
         13:a3:66:34:43:c9:43:f1:93:5e:b1:e4:3a:8e:0f:b7:51:fa:
         e5:09:90:05:81:dd:e4:2c:86:99:7d:18:d6:65:a8:a5:58:a8:
         94:9f:77:9b:a3:9e:7d:ad:b5:1b:a5:1f:4d:d9:48:c8:3e:3c:
         f9:95:a3:43:a5:8c:6f:3d:5a:5a:5d:e4:a1:89:aa:2e:fa:b7:
         f7:4d:ca:71:a0:67:c5:a6:ef:83:cb:8d:cb:c0:79:c0:c5:46:
         73:eb:cf:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:03:13 2024 by rpki-client on console-fra.rpki-client.org