Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9BAF32552D40CE2A2F1A065983E6605B60B3A17B.cer
File:                     9BAF32552D40CE2A2F1A065983E6605B60B3A17B.cer (raw, json)
Hash identifier:          sxeAD6iSoymyDYp+nXBg1f0B/t4RwoUDmauwgaMrHVs=
Subject key identifier:   9B:AF:32:55:2D:40:CE:2A:2F:1A:06:59:83:E6:60:5B:60:B3:A1:7B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4E3D6A3278DFA13F71ECEEDBCA684A8E5552570B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/1/9BAF32552D40CE2A2F1A065983E6605B60B3A17B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 13:31:19 +0000
Certificate not after:    Thu 03 Apr 2025 13:36:19 +0000
Subordinate resources:    AS: 266156
                          IP: 192.144.68.0/22
                          IP: 2804:3b8c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 23:19:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:3d:6a:32:78:df:a1:3f:71:ec:ee:db:ca:68:4a:8e:55:52:57:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 13:31:19 2024 GMT
            Not After : Apr  3 13:36:19 2025 GMT
        Subject: CN=9BAF32552D40CE2A2F1A065983E6605B60B3A17B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:31:3a:0c:6d:a5:5a:50:cf:26:61:1f:a7:68:
                    53:21:24:1c:ce:2d:ed:d2:61:f8:a2:48:6b:e1:ad:
                    90:41:24:83:10:72:f1:2b:d4:f9:0b:19:16:0c:6d:
                    57:fd:dd:9b:c9:7b:c4:9d:3d:c7:5b:bb:e4:0d:62:
                    16:eb:7f:ea:b0:f8:c1:9b:90:d1:a4:d8:21:e2:7b:
                    2b:b4:d2:b4:09:5f:5a:59:cf:00:d2:5f:49:a2:49:
                    6a:c6:88:57:b7:c7:81:fc:c8:c0:b4:dd:08:e1:4e:
                    a6:f0:01:0b:cd:a5:cd:6f:64:47:38:0c:16:b9:3b:
                    0e:77:39:d6:b9:6a:a6:2f:11:b4:55:1b:79:d5:13:
                    68:45:95:aa:ce:27:3e:e9:2b:8d:ae:be:66:10:cc:
                    74:3f:02:cb:3d:a4:14:f9:e5:da:4e:fe:bf:c8:34:
                    34:b1:94:1f:62:28:19:50:f0:f3:7f:6c:d1:71:59:
                    c8:50:76:5e:42:c0:b2:93:f7:43:2e:f4:b5:d7:b2:
                    3a:67:ef:47:fa:0c:54:5e:4c:bd:69:d7:2b:25:8a:
                    ca:6c:dc:b5:d7:ed:89:80:0d:38:51:67:96:d7:ca:
                    d0:de:13:cf:cc:d3:84:6d:83:ce:2e:1b:10:bb:26:
                    39:a5:3c:7a:0a:09:6e:aa:87:82:95:52:93:6b:a3:
                    24:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9B:AF:32:55:2D:40:CE:2A:2F:1A:06:59:83:E6:60:5B:60:B3:A1:7B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/1/9BAF32552D40CE2A2F1A065983E6605B60B3A17B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.68.0/22
                IPv6:
                  2804:3b8c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266156

    Signature Algorithm: sha256WithRSAEncryption
         5c:f2:f9:17:16:ce:38:2a:19:33:83:52:d5:62:4a:f7:a7:59:
         fc:f2:55:b1:a9:0c:88:70:2c:6e:a4:4d:a4:d0:40:73:12:2a:
         e6:6d:41:e0:10:e9:ea:b9:d0:2a:40:c5:a6:75:43:e8:d6:60:
         82:56:a5:68:3b:9a:11:36:80:6f:dc:b4:e8:58:ee:3f:ba:86:
         91:61:d6:d0:eb:59:39:7b:7e:19:7d:3c:b8:ce:4a:89:cb:c6:
         c4:8f:99:08:08:6a:ce:1a:69:4d:e8:4c:d0:93:3a:02:19:e5:
         1f:ae:89:68:58:0f:5c:5c:d0:bc:cc:c8:95:ab:ed:0d:de:47:
         11:51:db:3b:d4:5c:09:23:b8:ef:a8:41:24:42:25:22:7f:4e:
         3c:ad:02:6a:b5:7b:78:4e:f7:40:ff:91:59:79:c4:af:35:c2:
         d9:60:91:62:80:09:c6:c8:6a:7d:16:45:84:98:e0:02:35:a4:
         45:ac:15:73:fc:a6:76:2a:6b:04:81:03:4c:d3:0c:99:4e:99:
         c0:60:7e:03:54:2b:0b:cc:a5:82:10:96:4d:20:6f:4a:ac:ee:
         9a:7c:96:d1:45:42:1a:ea:99:3f:5f:37:0f:e6:39:1f:e5:11:
         8b:39:28:3a:2d:06:05:05:be:9f:56:ad:37:22:df:45:96:aa:
         43:cb:d2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 23:02:48 2024 by rpki-client on console-fra.rpki-client.org