Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/88F45CA9F42577057740B3862841E292FEE58105.cer
File:                     88F45CA9F42577057740B3862841E292FEE58105.cer (raw, json)
Hash identifier:          xN+yEUEYdy1x3HA4nRIyFQzqmnAN0ppcDqoVnqrxrZQ=
Subject key identifier:   88:F4:5C:A9:F4:25:77:05:77:40:B3:86:28:41:E2:92:FE:E5:81:05
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       34480844C0546D83E7DE6D8CBB931F7BBD3D5352
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/88F45CA9F42577057740B3862841E292FEE58105.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 09 Nov 2024 13:32:45 +0000
Certificate not after:    Sat 08 Nov 2025 13:37:45 +0000
Subordinate resources:    AS: 52924
                          IP: 177.184.224.0/20
                          IP: 2804:36e8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:48:08:44:c0:54:6d:83:e7:de:6d:8c:bb:93:1f:7b:bd:3d:53:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  9 13:32:45 2024 GMT
            Not After : Nov  8 13:37:45 2025 GMT
        Subject: CN=88F45CA9F42577057740B3862841E292FEE58105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ef:a8:cf:86:e0:ac:e7:02:ab:96:92:7b:71:
                    da:94:cb:fc:29:c3:77:bf:94:15:96:fc:f2:c5:e6:
                    2a:d6:36:cf:b5:a8:a9:62:21:16:eb:87:0e:35:59:
                    7c:76:0f:e4:f2:8c:c6:60:5d:26:43:c3:83:2e:ba:
                    52:0b:f8:2e:d9:f6:38:cf:59:fe:d4:e3:c7:59:ac:
                    55:78:72:91:cf:f6:51:c7:92:02:fd:c6:27:d8:ad:
                    f8:de:8e:22:61:42:7a:50:66:7a:08:d9:ee:00:64:
                    32:e2:f4:6d:17:74:2d:b5:12:cc:d3:23:be:bd:ec:
                    78:34:30:83:c6:ab:93:99:36:96:8e:d1:c9:f9:05:
                    fd:82:3a:1a:66:6a:58:5a:0b:2d:64:cf:5c:4e:b9:
                    40:65:be:f1:f5:79:1c:13:ff:6b:d5:31:bb:b3:86:
                    94:47:25:37:15:db:d3:f6:7b:a0:e3:75:39:a9:76:
                    17:76:59:1b:b0:c8:cd:38:d6:29:4f:9b:c3:bb:02:
                    e8:de:79:ad:1a:8b:b2:1e:b7:7d:ff:5b:c8:3e:48:
                    0d:d5:30:17:8e:41:3f:f3:d5:aa:1d:ea:2d:28:8d:
                    2d:2c:45:d4:19:f1:e1:d2:00:4b:88:d8:ba:be:4f:
                    8c:e5:67:b6:22:2e:5f:af:06:e9:e8:84:a8:5b:82:
                    02:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                88:F4:5C:A9:F4:25:77:05:77:40:B3:86:28:41:E2:92:FE:E5:81:05
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/88F45CA9F42577057740B3862841E292FEE58105.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.224.0/20
                IPv6:
                  2804:36e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52924

    Signature Algorithm: sha256WithRSAEncryption
         c1:09:82:84:20:72:21:a8:1b:40:c3:c8:0a:b6:39:1e:e1:78:
         1d:a8:a6:d1:d6:17:f5:c8:e5:b8:a2:ea:96:1f:a6:3f:43:4c:
         4a:af:5e:f1:34:7e:91:45:bc:bb:f8:3e:26:dd:ee:53:02:0e:
         7e:7b:b3:67:c1:72:ff:b2:84:13:72:89:33:a0:5e:41:d3:2d:
         fb:8a:3a:4b:04:04:f8:c1:67:0a:ec:2e:87:64:25:cf:d5:96:
         4e:c5:35:a6:a7:a9:4b:10:95:2c:6b:f7:83:2d:8a:ce:1f:f1:
         17:61:ce:e5:24:43:27:fd:fe:7c:f6:d6:9e:17:64:84:6c:a8:
         01:6b:a3:e6:98:4a:3d:43:29:1c:b7:f7:73:b5:5b:30:8e:90:
         20:d0:3b:9c:04:42:d9:1b:8a:a5:df:e4:ba:a7:89:2f:1d:28:
         30:c0:ec:f9:8e:b6:e4:a1:bf:6b:85:56:56:fb:8a:26:b3:0e:
         b4:0f:bf:c4:ab:78:1d:b1:b5:de:41:eb:db:ac:38:f7:b3:14:
         b4:53:af:d8:74:b4:94:70:ac:b7:f2:55:d2:a0:13:c4:d8:9f:
         0a:53:3f:30:ed:c2:cf:22:f1:96:c7:a3:80:c9:4b:28:6f:70:
         a8:4c:f0:4c:b2:d9:36:3f:f0:63:97:b9:f2:50:ac:fc:eb:4d:
         09:c0:4d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:22 2025 by rpki-client