Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
File:                     ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer (raw, json)
Hash identifier:          I/mObY0/7yssCoytPUzM62L3NIBAsQWuNl26cnHmm/A=
Subject key identifier:   AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       53782423BDC8174F89DE489D8CC1213014503768
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.mft
caRepository:             rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 26 Jul 2024 17:40:03 +0000
Certificate not after:    Fri 25 Jul 2025 17:45:03 +0000
Subordinate resources:    AS: 28589
                          IP: 200.152.176.0/20
                          IP: 2804:998::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 00:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:78:24:23:bd:c8:17:4f:89:de:48:9d:8c:c1:21:30:14:50:37:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 26 17:40:03 2024 GMT
            Not After : Jul 25 17:45:03 2025 GMT
        Subject: CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:90:9e:8c:aa:4e:6a:b3:fa:6e:76:97:d5:6b:
                    28:86:86:40:70:80:54:6c:52:79:ba:2c:4b:d6:c5:
                    ff:7c:4e:cd:bb:87:27:a7:47:7a:04:d8:12:59:ef:
                    f0:ce:2d:a6:44:29:5f:d3:70:19:06:c0:19:7c:89:
                    df:9b:f1:43:8c:a6:e1:7d:6b:bb:8d:9c:76:be:56:
                    d2:e8:ea:26:3f:9a:f5:1b:7c:5b:11:38:d4:59:60:
                    7a:94:8e:a6:62:0c:a5:0e:fe:76:7e:28:b3:1e:65:
                    b8:c1:c7:01:44:20:8c:9e:ff:6d:2d:79:71:89:7f:
                    11:1b:20:3e:26:96:5d:a1:66:ba:1c:aa:e7:a0:5a:
                    0d:d5:d9:8f:a6:fe:b6:d7:2a:91:2e:3b:0d:2c:5b:
                    73:82:fb:1a:2e:bb:23:d8:ae:c9:68:b2:c2:4e:bf:
                    cc:98:54:e5:e7:1d:a6:cf:e1:fa:a2:50:25:1e:eb:
                    78:ac:ae:62:1a:41:48:c8:88:49:cb:fc:0e:2d:9f:
                    06:f2:51:34:1d:79:c4:88:9a:14:e0:bf:e4:ce:cf:
                    e6:55:49:ee:cb:6f:e9:91:80:30:a3:3c:19:f0:14:
                    57:ca:b6:11:10:79:50:ec:d0:5c:47:7f:d7:a3:5f:
                    b5:98:d2:2d:fb:5c:f7:75:eb:7a:6c:3a:9c:7e:d5:
                    35:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.176.0/20
                IPv6:
                  2804:998::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28589

    Signature Algorithm: sha256WithRSAEncryption
         76:67:80:f9:5c:b4:99:63:93:77:c7:28:a2:21:ef:39:81:06:
         46:59:19:4d:e2:aa:93:97:4c:8f:dd:7d:1a:35:8a:b6:80:3e:
         0a:9f:76:56:83:a9:12:ac:ba:6e:40:8a:87:75:55:a0:92:ce:
         0d:98:a7:0e:77:58:7a:a9:0a:8c:59:eb:01:5a:3c:91:6b:96:
         0e:d9:ce:76:44:d5:c7:87:df:ba:8a:39:af:da:80:0d:dc:c1:
         5f:b2:fe:e2:26:9f:fa:57:bf:14:8c:f4:bd:46:fe:d4:6f:5c:
         d4:f2:c8:23:a8:89:b0:6c:21:02:83:19:61:22:d9:af:dc:39:
         d6:6f:70:33:5c:7a:40:60:6b:03:a8:8d:63:b8:53:62:bd:27:
         93:64:10:2e:87:30:5c:43:f2:fd:7e:3c:63:dc:eb:2b:47:e4:
         b7:c0:e4:26:69:c3:a0:4d:44:e8:48:b2:b1:6e:e4:88:d9:ac:
         18:e7:9c:08:d3:a5:dd:fc:71:93:54:51:68:0a:63:a2:03:3a:
         0b:1f:83:c4:f3:d1:3c:4f:fe:63:d1:67:e9:28:67:73:13:52:
         95:a3:d2:37:d6:ec:01:09:19:97:d0:b6:9d:49:92:c9:ae:b7:
         51:79:20:5a:2e:21:bf:f6:4f:63:37:30:c5:dc:ec:37:21:f3:
         a1:21:fd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:00:20 2024 by rpki-client on console-ams.rpki-client.org