Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AC1072CCDEF9467DA0A709A02C47E32C059CFEC5.cer
File:                     AC1072CCDEF9467DA0A709A02C47E32C059CFEC5.cer (raw, json)
Hash identifier:          3ebrTP4vDmyWB2OcmlVI2g2MxHL/p0zrgLULD5Pc+xo=
Subject key identifier:   AC:10:72:CC:DE:F9:46:7D:A0:A7:09:A0:2C:47:E3:2C:05:9C:FE:C5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1CF44AE9664B9806DA259E33F2456C05F2E2B0CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/1/AC1072CCDEF9467DA0A709A02C47E32C059CFEC5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:25:37 +0000
Certificate not after:    Wed 02 Apr 2025 18:30:37 +0000
Subordinate resources:    AS: 268791
                          IP: 45.172.64.0/22
                          IP: 2804:5ab8::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 01:38:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:f4:4a:e9:66:4b:98:06:da:25:9e:33:f2:45:6c:05:f2:e2:b0:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:25:37 2024 GMT
            Not After : Apr  2 18:30:37 2025 GMT
        Subject: CN=AC1072CCDEF9467DA0A709A02C47E32C059CFEC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8e:c2:de:91:de:76:ca:b6:13:42:9c:2d:e5:
                    fc:2b:bc:0f:a8:4b:ad:1f:c7:51:e6:4b:48:7e:b9:
                    92:c2:91:ad:3d:67:07:78:8d:05:e0:33:f0:bf:c5:
                    e3:c4:52:77:bc:f3:e6:46:73:5f:46:31:e9:c5:f4:
                    9c:56:38:66:4d:e4:77:d4:e0:8a:69:aa:61:6b:21:
                    82:a5:32:4f:88:a8:99:f9:e1:b8:a0:1d:bd:c9:1e:
                    ac:39:75:6c:ea:f3:fd:b3:4c:23:49:1e:77:2e:3b:
                    5b:bd:87:b3:62:7b:85:f3:8b:8a:da:ac:60:20:28:
                    a1:5a:75:e4:e7:03:a2:f1:d6:ac:5c:ea:c2:f3:ce:
                    dc:c3:87:dd:cb:f7:83:f6:99:73:b5:fe:b2:05:ea:
                    29:94:d7:27:8c:4d:8e:f2:6e:d3:8d:f5:41:71:cb:
                    73:c8:a8:62:22:08:5a:11:14:22:98:a2:23:90:c4:
                    32:2f:d7:05:c5:b9:27:0d:66:fc:bf:76:9f:b8:98:
                    91:ff:0a:e8:78:ea:b4:bf:0c:6a:86:11:c8:19:a8:
                    ef:f8:8e:aa:df:a0:2b:67:d7:c3:a7:a1:02:2f:db:
                    16:00:de:8b:49:65:d5:ae:d3:04:8c:2d:62:ee:d4:
                    9c:24:c2:7a:ba:2d:eb:71:8e:ed:08:74:2d:d5:29:
                    5b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AC:10:72:CC:DE:F9:46:7D:A0:A7:09:A0:2C:47:E3:2C:05:9C:FE:C5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/1/AC1072CCDEF9467DA0A709A02C47E32C059CFEC5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.64.0/22
                IPv6:
                  2804:5ab8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268791

    Signature Algorithm: sha256WithRSAEncryption
         b1:c7:53:18:99:db:8d:9b:d2:5a:a7:01:2f:da:c6:e7:b6:b2:
         8c:90:64:52:a9:bc:85:2e:d2:ae:78:ba:c3:4b:5e:ed:8e:e5:
         b9:1c:5f:bf:38:8f:c7:59:da:e5:e8:93:5b:91:de:4f:e7:09:
         4a:a6:a7:c3:65:f2:0d:76:97:26:b0:fd:39:e0:e0:54:26:4a:
         ad:b6:3e:8d:67:a2:05:81:1c:8a:28:39:2b:9c:f2:bb:af:b2:
         81:a6:aa:92:08:e0:d2:13:74:ee:18:2c:b5:a4:d4:ef:04:c5:
         33:d5:d4:ec:0e:c2:68:c7:31:90:f4:e5:a4:45:ce:4e:c3:72:
         ff:a2:bf:ce:2f:43:c6:95:5c:fb:52:3c:40:6f:16:91:02:ff:
         c4:bf:5f:84:56:a4:33:b8:85:d8:b2:93:42:b4:d0:79:20:f1:
         14:95:78:90:8c:1f:8a:50:c7:d3:dd:36:1c:5e:73:0c:bd:3a:
         50:e9:ad:d1:1c:7d:91:d3:6f:99:9d:36:f5:77:ef:1f:84:f7:
         1d:f4:08:94:54:8a:e6:9d:c9:8e:6e:7f:a3:0c:98:66:72:7b:
         84:d3:64:79:78:dc:6b:54:f3:d7:77:7e:45:ff:bc:c4:ed:9f:
         1b:11:10:7b:4e:0e:69:ab:c0:a7:5b:19:0f:a2:49:4d:cb:39:
         d9:2d:4e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:01:11 2024 by rpki-client on console-ams.rpki-client.org