Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
File:                     AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer (raw, json)
Hash identifier:          isLX8R7ZiC7JFL3SGhT7U3dK2ANNvklQqVpDJ2newIQ=
Subject key identifier:   AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       714E5D10323C7D2619E2E92CC0D94AF97AA800C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
caRepository:             rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 02:21:04 +0000
Certificate not after:    Thu 03 Apr 2025 02:26:04 +0000
Subordinate resources:    AS: 28368
                          AS: 53173
                          IP: 177.44.176.0 -- 177.44.190.255
                          IP: 177.184.128.0/20
                          IP: 177.200.80.0/20
                          IP: 186.225.32.0/19
                          IP: 187.60.32.0/20
                          IP: 189.84.112.0/20
                          IP: 2804:854::/32
                          IP: 2804:e4c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:4e:5d:10:32:3c:7d:26:19:e2:e9:2c:c0:d9:4a:f9:7a:a8:00:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 02:21:04 2024 GMT
            Not After : Apr  3 02:26:04 2025 GMT
        Subject: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f6:99:d2:0b:55:92:f1:60:e1:94:44:5f:15:
                    c9:95:8e:cc:9f:ef:7b:d9:7f:37:ca:7f:b8:13:cf:
                    1d:1f:33:25:fb:20:7d:d9:87:2c:b3:f2:59:63:ec:
                    b9:4e:ea:f2:e2:55:0f:dd:26:25:53:b8:85:95:bc:
                    5e:48:4b:82:26:a1:75:02:97:38:f0:bb:ea:d9:ba:
                    16:23:af:df:77:1b:14:7a:88:c4:66:2d:77:44:7e:
                    78:7c:10:2e:6f:73:33:f1:b1:2e:98:7b:65:58:19:
                    57:8e:71:b4:38:66:ee:c0:87:a0:cf:8e:d1:24:3f:
                    bc:9a:14:86:52:42:3f:02:a5:f4:26:33:db:e3:0c:
                    b5:19:86:26:30:c1:8b:ef:cb:98:30:b3:c4:88:4a:
                    4d:16:fd:ba:f9:b2:19:35:18:32:8c:1f:3d:55:04:
                    fb:0f:30:21:7f:ed:3a:57:a8:65:1c:b8:84:2e:e6:
                    29:1d:3a:b8:b7:97:6e:3a:4e:bb:cb:3e:3c:a0:35:
                    c8:15:8c:7f:f2:d2:82:31:4f:f9:a8:1a:1e:77:7f:
                    d3:77:3a:0f:57:6b:0e:d9:06:fb:db:f6:bc:79:cb:
                    43:2d:c2:ef:25:2e:f4:fa:e9:c6:49:1f:75:04:bb:
                    3c:da:98:1a:51:97:94:48:a1:f5:e8:d2:03:d3:34:
                    b8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.176.0-177.44.190.255
                  177.184.128.0/20
                  177.200.80.0/20
                  186.225.32.0/19
                  187.60.32.0/20
                  189.84.112.0/20
                IPv6:
                  2804:854::/32
                  2804:e4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28368
                  53173

    Signature Algorithm: sha256WithRSAEncryption
         2f:62:03:b0:b3:05:35:b9:53:74:8b:0d:eb:52:44:42:1c:85:
         9b:17:a2:ce:bc:12:67:4f:3f:06:0d:15:76:7a:b1:ca:dc:65:
         2f:2d:a2:ba:95:5f:17:36:53:88:8c:74:b9:8e:64:18:e7:36:
         6a:2c:dc:40:88:ee:f8:c7:f5:d2:9c:66:88:47:42:89:5b:38:
         2d:5c:a5:6a:8b:9e:0e:b2:df:b1:9b:53:b2:b1:40:81:9d:dc:
         53:4f:97:92:64:d7:4c:19:7b:33:9f:0f:bc:5f:d2:7e:07:15:
         46:b0:2c:27:ff:e4:30:d3:f4:a2:1a:1c:14:95:50:2d:dd:ec:
         97:1a:46:7b:e2:30:ca:99:b7:4c:fc:84:2e:90:94:3f:47:4c:
         b0:f4:d8:fd:b3:37:87:f4:45:de:f7:10:0b:d8:29:19:2c:f6:
         b9:19:90:d3:d1:7f:01:e3:8d:62:7b:22:73:03:a4:2e:c4:58:
         76:cd:2a:5a:58:f7:d5:32:ae:b2:de:f4:7b:88:92:50:80:c0:
         97:d9:62:ad:31:c9:eb:8d:05:28:9f:86:dd:dc:5d:10:94:3a:
         e3:bd:83:fb:8e:6c:37:55:30:cf:e2:98:1d:ff:ed:8f:61:f3:
         45:8a:e0:7f:3b:8e:0c:46:cf:8a:d4:63:f1:3d:b3:00:d6:3d:
         86:a1:96:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:48 2024 by rpki-client on console-fra.rpki-client.org