Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/998C075E7A590DD191A410E239E80D3BF1F7AAC4.cer
File:                     998C075E7A590DD191A410E239E80D3BF1F7AAC4.cer (raw, json)
Hash identifier:          7e9SsDBls4f6bu6L0HiC0jkquv0FtgLog6FZIluv+5E=
Subject key identifier:   99:8C:07:5E:7A:59:0D:D1:91:A4:10:E2:39:E8:0D:3B:F1:F7:AA:C4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3F4BE77503374AEEBFD3ACC291324E3455252836
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CzuvtricDrLiTUu81jm3eo21EVLrV6tTZdy5FmS6VvVo/0/998C075E7A590DD191A410E239E80D3BF1F7AAC4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CzuvtricDrLiTUu81jm3eo21EVLrV6tTZdy5FmS6VvVo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 26 Nov 2024 10:46:59 +0000
Certificate not after:    Tue 25 Nov 2025 10:51:59 +0000
Subordinate resources:    AS: 267566
                          IP: 45.70.64.0/22
                          IP: 2804:4360::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 16:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:4b:e7:75:03:37:4a:ee:bf:d3:ac:c2:91:32:4e:34:55:25:28:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 26 10:46:59 2024 GMT
            Not After : Nov 25 10:51:59 2025 GMT
        Subject: CN=998C075E7A590DD191A410E239E80D3BF1F7AAC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5c:3d:0a:2f:e2:2d:05:63:a0:1c:03:bd:ed:
                    64:3b:7f:da:a9:25:87:ce:d3:42:6a:4f:ad:88:54:
                    27:f7:5f:4c:78:6a:2a:80:1d:f4:3c:6c:fe:1a:ac:
                    3a:db:95:cb:1c:4a:d4:d5:77:e4:af:82:89:e0:2b:
                    1e:fc:cf:d9:7e:d1:35:c5:62:78:25:e8:54:32:60:
                    92:47:c0:7f:11:5d:d9:2b:d4:2f:21:8c:e4:5c:d6:
                    ee:7d:6f:b3:f1:af:72:60:98:8a:c5:47:3a:fd:c9:
                    d9:48:c9:8e:5d:2c:9a:b5:74:8f:08:76:ba:b1:1a:
                    43:52:62:c9:e4:57:83:f3:bf:b6:22:3e:ca:bc:cd:
                    96:ec:ad:df:a1:4c:43:1c:cd:11:67:42:47:ad:1c:
                    5c:64:a2:8c:ed:b3:40:0d:66:e4:bb:69:d9:e6:fa:
                    a6:55:e0:29:e7:59:a5:94:f7:85:2c:b7:91:86:e7:
                    ec:d9:6d:13:15:26:55:ee:9a:86:b2:b4:91:d2:2b:
                    0e:80:70:69:87:43:8f:c0:41:13:19:39:c5:bf:55:
                    ff:6e:c7:2b:c0:01:35:f0:ae:1f:bd:73:8a:6d:aa:
                    da:fc:5a:62:10:7a:57:ee:7d:aa:a8:90:6f:e8:96:
                    6f:e5:5e:89:72:93:4d:a9:69:13:6b:ee:c6:62:61:
                    a0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                99:8C:07:5E:7A:59:0D:D1:91:A4:10:E2:39:E8:0D:3B:F1:F7:AA:C4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CzuvtricDrLiTUu81jm3eo21EVLrV6tTZdy5FmS6VvVo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CzuvtricDrLiTUu81jm3eo21EVLrV6tTZdy5FmS6VvVo/0/998C075E7A590DD191A410E239E80D3BF1F7AAC4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.64.0/22
                IPv6:
                  2804:4360::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267566

    Signature Algorithm: sha256WithRSAEncryption
         5e:d9:61:2c:9c:fd:a6:c8:9e:f8:a0:fb:9b:7f:bb:63:f0:9b:
         e9:9d:01:10:4a:3d:ca:b7:37:62:08:51:3b:1b:6b:41:e4:b4:
         4a:55:28:79:a0:b8:ed:df:27:5b:40:05:5f:13:f4:5c:72:95:
         18:29:a7:46:ee:e6:13:cf:86:00:53:69:51:95:66:8c:3a:3c:
         d8:92:5b:b0:93:89:61:e6:68:4c:27:2b:2d:b9:e3:c8:b9:56:
         30:8d:0b:69:05:24:fc:a4:13:10:6a:39:86:49:c8:65:cf:ff:
         62:34:4b:76:c0:66:d7:21:8a:98:99:33:8a:6b:ed:f1:1a:39:
         c4:a5:88:64:81:b8:5d:98:fe:ae:ac:c6:af:ec:89:13:4c:62:
         de:19:79:67:ab:15:3f:e0:6c:53:6f:29:9e:e9:46:0d:83:d7:
         78:8c:5b:8f:d4:0f:2b:40:78:1a:2d:2e:fb:0b:72:a1:72:92:
         13:20:e0:54:6e:f6:96:04:e3:89:d2:2e:80:ad:fe:3d:04:fb:
         d9:ac:b6:1f:95:bf:41:a2:6b:87:af:e2:39:64:10:df:84:92:
         b3:95:f8:67:56:17:4e:bc:32:28:92:c1:f7:b3:4d:00:42:5c:
         44:05:73:6b:e9:1f:59:5a:18:aa:87:11:af:f5:e2:d9:e4:89:
         c7:11:57:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:45:50 2024 by rpki-client on console-fra.rpki-client.org