Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/88BA7580557AA3113C46B2EE567F5D1F9F9C8197.cer
File:                     88BA7580557AA3113C46B2EE567F5D1F9F9C8197.cer (raw, json)
Hash identifier:          1nFuxE2TW9LbzViQz6s+4uNGpVIlPFjnjHb65GTsVgE=
Subject key identifier:   88:BA:75:80:55:7A:A3:11:3C:46:B2:EE:56:7F:5D:1F:9F:9C:81:97
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4FD9F31D99BE2E9B9F7AC03CC384A7A8B872F183
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9NobCjzpJjYaq7dxygh7rB31Wn5jyF3ybc4uQc9dWe65/1/88BA7580557AA3113C46B2EE567F5D1F9F9C8197.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9NobCjzpJjYaq7dxygh7rB31Wn5jyF3ybc4uQc9dWe65/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 21 Apr 2024 02:58:47 +0000
Certificate not after:    Sun 20 Apr 2025 03:03:47 +0000
Subordinate resources:    AS: 271314
                          IP: 131.196.124.0/22
                          IP: 2804:7994::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 02:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:d9:f3:1d:99:be:2e:9b:9f:7a:c0:3c:c3:84:a7:a8:b8:72:f1:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 21 02:58:47 2024 GMT
            Not After : Apr 20 03:03:47 2025 GMT
        Subject: CN=88BA7580557AA3113C46B2EE567F5D1F9F9C8197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:33:99:d6:89:4c:29:42:1f:58:13:5d:86:54:
                    ea:1f:47:0a:5f:a6:25:07:e8:7c:ac:47:8c:a1:a1:
                    0a:84:89:d8:c3:86:d5:94:9d:2d:dc:8d:d7:36:bc:
                    91:9b:31:e7:9f:91:66:2d:09:9c:c2:eb:ce:62:3d:
                    3b:38:e9:56:8a:4c:19:54:7f:d0:ed:00:d7:a2:61:
                    12:85:65:b0:f0:22:98:d0:0b:4f:3f:81:47:a0:f0:
                    f8:1d:5b:66:64:9e:d8:84:68:3e:cf:36:62:3e:65:
                    71:d8:e8:c7:82:2d:39:e7:39:1c:d1:22:96:99:f1:
                    01:8a:06:b3:49:ae:c3:00:9d:67:e2:da:e2:1f:e2:
                    97:11:fd:b1:c9:cd:c3:42:bf:24:71:52:44:46:12:
                    30:2c:ca:71:3a:cb:52:94:1e:5c:a1:f4:e7:d9:32:
                    4f:d5:94:ec:50:ee:70:88:ea:b9:50:82:a7:d6:b0:
                    e9:0c:77:3e:83:3b:ec:9d:a6:f2:01:8c:cb:d6:a3:
                    ec:7e:b0:e5:f0:32:c0:2a:18:73:f1:b5:ec:ef:37:
                    a1:16:3a:7d:3f:d1:19:ad:35:89:86:22:41:81:6f:
                    6f:71:14:d8:b2:f1:99:8a:40:f4:dc:43:fd:14:37:
                    bd:5e:ce:01:6d:02:ca:4f:54:63:9e:19:f3:cf:e4:
                    63:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                88:BA:75:80:55:7A:A3:11:3C:46:B2:EE:56:7F:5D:1F:9F:9C:81:97
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9NobCjzpJjYaq7dxygh7rB31Wn5jyF3ybc4uQc9dWe65/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9NobCjzpJjYaq7dxygh7rB31Wn5jyF3ybc4uQc9dWe65/1/88BA7580557AA3113C46B2EE567F5D1F9F9C8197.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.124.0/22
                IPv6:
                  2804:7994::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271314

    Signature Algorithm: sha256WithRSAEncryption
         39:cc:d4:3e:f5:3a:c8:6b:f5:08:eb:aa:d5:9b:9a:08:51:bc:
         80:1a:d1:df:28:ca:53:fa:60:49:3b:89:c5:4e:3b:65:17:01:
         31:25:4b:fa:65:a0:6d:49:d7:9e:33:88:69:07:79:b1:55:f0:
         79:8c:d0:e0:fc:9a:16:23:a1:79:5e:9b:78:ed:f9:bb:14:b1:
         61:ae:81:71:72:4c:c7:5a:a1:19:06:0a:5b:af:c2:fc:06:06:
         5a:59:02:03:59:1c:d9:ec:bb:25:90:00:f9:99:63:75:25:62:
         44:08:0b:7c:f8:14:7a:35:1d:8a:39:f1:8a:2e:fa:5d:1a:df:
         30:e1:2b:38:52:9a:ec:91:8f:d2:7a:0b:f3:19:26:7f:33:78:
         32:73:01:c6:e7:46:6f:4f:57:52:bf:7c:49:7b:55:f2:8a:f2:
         1d:12:b7:d3:6b:58:30:9f:e1:44:ae:b1:dd:7f:c3:54:1b:8f:
         f5:8a:77:d6:75:db:db:e1:c5:ee:0c:85:87:25:21:cd:33:46:
         32:33:ae:0b:91:98:a4:47:4c:11:13:46:ba:43:de:8f:ec:8b:
         31:ac:e8:69:5d:c6:36:8b:bd:1a:98:45:0d:85:2a:fd:11:5f:
         b9:0a:90:59:81:d7:66:43:29:25:c8:ba:c8:dd:d0:8c:0c:45:
         c6:cd:78:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:06:37 2024 by rpki-client on console-fra.rpki-client.org