Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A740A7A96036C4D621D5040D884971C669EFC62A.cer
File:                     A740A7A96036C4D621D5040D884971C669EFC62A.cer (raw, json)
Hash identifier:          8ocClbk9Q3j/rEDQGgFT9EETqy5bf8A497RZHVnOvyU=
Subject key identifier:   A7:40:A7:A9:60:36:C4:D6:21:D5:04:0D:88:49:71:C6:69:EF:C6:2A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2E803A7F811B8CA4715FDF7E8AA456C5B3680CC6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C5S7R5AZN7FRZVPhY3NYX3m6Nh8CFqHTdBdEBnr31fFW/0/A740A7A96036C4D621D5040D884971C669EFC62A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C5S7R5AZN7FRZVPhY3NYX3m6Nh8CFqHTdBdEBnr31fFW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Jun 2024 11:37:52 +0000
Certificate not after:    Tue 24 Jun 2025 11:42:52 +0000
Subordinate resources:    AS: 270280
                          IP: 200.125.172.0/22
                          IP: 2804:699c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:80:3a:7f:81:1b:8c:a4:71:5f:df:7e:8a:a4:56:c5:b3:68:0c:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 25 11:37:52 2024 GMT
            Not After : Jun 24 11:42:52 2025 GMT
        Subject: CN=A740A7A96036C4D621D5040D884971C669EFC62A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:49:f4:34:13:6a:c8:25:2f:f8:d6:ed:03:6e:
                    87:8a:2c:22:4e:3e:06:bc:76:95:5a:14:e6:f6:4a:
                    f4:66:68:a8:da:ff:a4:65:f5:ce:e4:cd:ac:3c:c1:
                    56:36:21:eb:55:3b:fd:c5:bd:6f:92:e7:b7:ca:bd:
                    32:bb:ad:d3:a9:8f:ff:ac:8f:91:bb:61:50:36:4e:
                    a8:5c:18:38:f6:7c:b9:87:2e:ee:3c:03:bd:9a:5c:
                    3f:09:b6:53:d4:a1:10:40:e3:fb:98:6f:b2:b9:59:
                    32:f6:8d:41:f0:3b:b4:1a:b6:d5:e6:e6:ca:74:2e:
                    4b:d6:12:b2:58:c2:bc:21:6e:64:bb:a9:00:67:f3:
                    56:20:51:0f:57:15:f4:65:73:b6:a8:73:50:be:ac:
                    d0:47:60:1b:15:19:45:70:64:fc:8f:15:5f:86:8a:
                    af:be:92:f8:51:81:3c:8b:ba:80:df:60:c9:2a:e6:
                    c0:59:c9:58:44:53:a0:b1:a2:21:1d:58:fd:e3:9c:
                    b0:e2:6e:40:a7:06:e8:a7:34:5b:6f:88:f1:18:64:
                    51:a5:fc:fd:4a:d5:da:a4:7c:a3:62:eb:bd:99:d9:
                    8e:13:19:09:1d:e5:48:9c:45:ce:0d:ca:d4:c3:b9:
                    a6:48:04:a7:29:c9:80:70:d0:e0:da:c3:7b:e9:4b:
                    86:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A7:40:A7:A9:60:36:C4:D6:21:D5:04:0D:88:49:71:C6:69:EF:C6:2A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C5S7R5AZN7FRZVPhY3NYX3m6Nh8CFqHTdBdEBnr31fFW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C5S7R5AZN7FRZVPhY3NYX3m6Nh8CFqHTdBdEBnr31fFW/0/A740A7A96036C4D621D5040D884971C669EFC62A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.172.0/22
                IPv6:
                  2804:699c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270280

    Signature Algorithm: sha256WithRSAEncryption
         36:7d:6d:31:04:de:23:ca:32:f5:ce:00:ee:8a:9b:77:36:ec:
         97:87:ea:32:08:52:d2:d4:0a:04:26:b0:c4:63:76:b9:67:b3:
         cc:a6:55:a5:9c:a6:e1:14:ee:1c:74:07:74:79:c4:38:72:be:
         21:0a:77:ee:82:77:68:1e:1b:8b:ce:64:7d:56:ee:4a:d8:75:
         75:d3:82:d0:08:17:54:53:49:07:34:c3:db:3e:53:46:77:8b:
         42:9c:1d:4e:1c:b9:4e:f7:96:b4:26:6a:29:8f:c0:ae:c5:3a:
         05:a9:85:05:33:0f:60:0f:56:f6:4b:ea:23:e8:0c:7f:d3:18:
         c8:9e:4f:af:07:b8:cb:a1:11:43:b0:e0:e0:ab:d6:e0:8b:3e:
         9f:b7:cf:c3:fb:75:80:ba:9e:ff:11:e5:f6:88:49:38:68:1f:
         33:7a:27:d9:b9:c5:7c:8c:ba:90:34:65:07:f8:d0:31:53:c2:
         ba:b8:6d:f6:22:d6:25:b9:1c:cf:ae:1d:bf:4f:35:ce:b8:e9:
         27:07:6f:00:4b:0b:7c:82:16:e1:96:c1:8b:54:85:ce:2b:a0:
         96:0a:ed:0d:60:15:de:5a:93:26:f7:0d:4f:10:b3:81:8a:f8:
         f4:31:87:01:2e:be:ad:a6:c1:08:a4:e8:c5:62:9c:0b:c1:ad:
         a0:f9:2c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:01 2024 by rpki-client on console-fra.rpki-client.org