Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/89CE27D64527B101D4BBA3737DAAF6FA000F34B0.cer
File:                     89CE27D64527B101D4BBA3737DAAF6FA000F34B0.cer (raw, json)
Hash identifier:          3QYKoSdLXAXzAS3kt3v83iJWJ3gIIXQz8STG0ZCU+5U=
Subject key identifier:   89:CE:27:D6:45:27:B1:01:D4:BB:A3:73:7D:AA:F6:FA:00:0F:34:B0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       68B2CA1C7C3E6E7D232CBA09261AA3AAD1F1C6B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DB3qcBDFeWcShX3dtY9JiSoPaYJFXtycgcE2mh9TkRBA/1/89CE27D64527B101D4BBA3737DAAF6FA000F34B0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DB3qcBDFeWcShX3dtY9JiSoPaYJFXtycgcE2mh9TkRBA/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:26:30 +0000
Certificate not after:    Wed 02 Apr 2025 18:31:30 +0000
Subordinate resources:    AS: 268527
                          IP: 45.162.172.0/22
                          IP: 2804:5294::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 04:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b2:ca:1c:7c:3e:6e:7d:23:2c:ba:09:26:1a:a3:aa:d1:f1:c6:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:26:30 2024 GMT
            Not After : Apr  2 18:31:30 2025 GMT
        Subject: CN=89CE27D64527B101D4BBA3737DAAF6FA000F34B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:92:7a:76:13:3f:ea:da:96:32:8b:25:aa:fe:
                    82:e1:2d:12:d1:d1:7f:3e:e0:2a:38:b2:f8:65:63:
                    dc:ec:72:86:0d:16:86:13:a3:54:8f:26:fc:9c:bc:
                    01:70:e3:a1:af:2e:9d:3e:38:17:a2:e8:5a:90:7b:
                    df:55:60:72:de:36:b1:c1:a2:6b:e4:58:d9:37:eb:
                    03:12:d2:57:36:7c:43:f8:50:7e:dd:5f:76:7d:8d:
                    94:a0:aa:2c:bd:7c:e1:0e:28:69:0e:af:a3:1c:b3:
                    67:7d:99:83:07:44:cb:07:38:e2:5e:06:bb:91:43:
                    d8:84:8b:49:55:ac:e8:bb:79:c3:db:45:f1:27:91:
                    d7:e4:6d:90:22:e4:39:e4:d0:3b:56:17:77:be:28:
                    0c:16:62:ca:40:b9:9f:30:8c:9d:a1:bb:e4:e9:66:
                    9f:a2:47:0b:04:a2:65:8a:85:f1:84:19:9b:be:94:
                    94:d5:45:87:f9:65:5b:4f:f3:33:29:75:f1:22:e5:
                    36:9a:f8:31:8e:13:1f:72:ec:7c:a8:d1:a1:b9:c9:
                    e6:b2:67:36:3e:35:d9:82:da:1d:13:d2:de:c3:f4:
                    9d:02:15:62:4b:6b:ee:a8:6a:7e:14:38:f8:67:d2:
                    6c:24:53:3c:4c:a0:e6:b2:79:ed:8f:15:e5:a6:a2:
                    bc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                89:CE:27:D6:45:27:B1:01:D4:BB:A3:73:7D:AA:F6:FA:00:0F:34:B0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DB3qcBDFeWcShX3dtY9JiSoPaYJFXtycgcE2mh9TkRBA/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DB3qcBDFeWcShX3dtY9JiSoPaYJFXtycgcE2mh9TkRBA/1/89CE27D64527B101D4BBA3737DAAF6FA000F34B0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.172.0/22
                IPv6:
                  2804:5294::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268527

    Signature Algorithm: sha256WithRSAEncryption
         3f:91:41:14:6f:5d:06:ad:f5:40:23:b2:50:b1:a0:c2:96:72:
         62:fa:2c:bf:dd:1b:01:9e:68:2d:d4:a4:71:f3:13:c5:7f:f4:
         a8:02:d1:54:c2:f6:4a:f7:a3:5c:7b:11:a3:68:2a:e0:5a:bb:
         1b:b7:40:24:1d:c8:60:3a:3f:8f:b6:ad:50:3f:c2:8f:dd:8b:
         9d:13:89:12:f5:52:24:c1:7c:50:66:84:57:ff:4e:1b:96:74:
         b4:72:52:22:41:77:e0:b9:f8:06:ce:55:89:f9:40:08:ec:75:
         11:e4:b1:65:e4:60:fe:1e:29:5d:94:b7:bd:05:21:e7:11:94:
         2f:dd:99:ca:56:19:25:d0:37:cb:6e:dd:60:73:a7:eb:e3:1c:
         3e:ea:30:79:01:f6:d2:d4:10:29:f5:3f:4a:6d:7b:07:25:53:
         d3:27:6d:c0:16:5a:4f:b7:c6:1c:98:e5:90:70:58:56:3b:38:
         73:eb:4e:c9:1a:77:c5:97:a5:54:3a:3b:59:ec:7d:30:eb:64:
         0d:c2:b9:7e:bc:10:43:83:12:2f:d1:d5:6e:1a:13:bb:d8:24:
         3e:ee:5e:a4:b7:dd:05:e3:e0:ec:72:04:80:de:d0:0f:88:a6:
         75:b3:66:5d:ea:07:05:83:96:09:c4:7a:d9:ed:f3:b9:f5:b1:
         8d:91:3b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:36:39 2024 by rpki-client on console-ams.rpki-client.org