Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B4072D8FE8FD8E8EA5D4A26B772DA8F8C26DE97A.cer
File:                     B4072D8FE8FD8E8EA5D4A26B772DA8F8C26DE97A.cer (raw, json)
Hash identifier:          ZSu5/zNYzABeA/JJdrb9l9tQ9XPjo0t8mX+QH74L/Po=
Subject key identifier:   B4:07:2D:8F:E8:FD:8E:8E:A5:D4:A2:6B:77:2D:A8:F8:C2:6D:E9:7A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       07210106E71A48B5FCC51D7FA1B3C5117C59F278
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/1/B4072D8FE8FD8E8EA5D4A26B772DA8F8C26DE97A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 01:31:25 +0000
Certificate not after:    Thu 03 Apr 2025 01:36:25 +0000
Subordinate resources:    AS: 266608
                          IP: 45.7.196.0/22
                          IP: 2804:3e98::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jul 2024 05:09:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:21:01:06:e7:1a:48:b5:fc:c5:1d:7f:a1:b3:c5:11:7c:59:f2:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 01:31:25 2024 GMT
            Not After : Apr  3 01:36:25 2025 GMT
        Subject: CN=B4072D8FE8FD8E8EA5D4A26B772DA8F8C26DE97A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a9:1a:e2:cb:df:34:4e:8d:fd:ab:f4:81:c2:
                    fd:a5:44:53:19:78:a9:46:ae:14:5f:98:97:b1:25:
                    fe:57:8e:46:df:4c:1e:d8:ab:e4:11:90:fa:08:51:
                    a0:23:53:b2:4e:34:0c:ef:a5:d2:37:2a:16:92:94:
                    a4:b4:35:1d:9f:85:e2:39:5a:07:13:84:5e:a8:85:
                    3d:a0:e0:01:e8:a9:ec:ef:8e:b9:1e:29:af:be:16:
                    f3:66:86:1f:81:44:b4:ba:7e:48:54:a7:44:d4:e8:
                    f8:73:c8:d0:6f:c5:ab:29:46:de:2d:ec:ae:c0:d3:
                    9f:10:9a:06:69:09:04:cf:a6:bc:6e:69:a3:5d:41:
                    e4:86:3c:2a:aa:74:bf:c9:a2:3b:85:b6:5b:d8:64:
                    7b:f4:ac:9d:8e:d4:d0:57:1e:20:3a:7c:51:31:29:
                    ae:e8:16:e1:b9:bb:31:54:9a:83:5c:a5:d9:c6:dd:
                    1d:f4:26:15:d6:86:f1:4c:98:44:e1:16:7b:2f:16:
                    cc:ea:26:d9:f9:5a:72:1d:c9:c2:92:57:0d:73:f3:
                    d1:1a:5a:b6:e0:71:1b:46:44:80:79:3c:c2:6a:9b:
                    42:9d:e9:92:9f:49:7c:43:0a:06:86:e0:ea:31:de:
                    b2:47:70:e2:b6:0d:66:dc:22:25:4c:e2:e6:68:17:
                    51:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:07:2D:8F:E8:FD:8E:8E:A5:D4:A2:6B:77:2D:A8:F8:C2:6D:E9:7A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/1/B4072D8FE8FD8E8EA5D4A26B772DA8F8C26DE97A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.196.0/22
                IPv6:
                  2804:3e98::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266608

    Signature Algorithm: sha256WithRSAEncryption
         79:c6:d7:d4:7d:4d:07:d5:43:e9:50:36:84:50:39:58:db:3f:
         a5:f9:1b:8c:24:4c:88:e7:13:f5:d0:22:69:e4:fc:1e:5a:3a:
         8c:86:40:cc:f3:0c:be:43:e2:b0:c9:28:ad:9a:7e:3a:dd:83:
         4f:13:6b:de:dc:86:f5:36:21:62:87:e0:26:77:e3:2d:ce:69:
         33:bf:48:4b:bf:5e:52:26:8e:86:75:2e:e9:b1:73:9b:f9:bc:
         53:53:1b:d0:72:be:15:22:80:5b:b6:c9:4a:1b:a0:02:48:18:
         44:0b:9c:67:14:2e:ff:91:5e:b4:93:0f:6e:ac:e7:fc:b6:25:
         ad:bc:93:8d:85:2e:b6:1b:cc:96:41:a8:03:08:a9:e5:e8:8e:
         dc:8b:9c:2e:5b:79:9f:c6:dc:0f:00:7c:ae:93:58:7c:ea:bc:
         5f:82:c9:1d:6e:e4:4a:ef:41:4f:cc:6f:bd:79:9f:22:f3:99:
         19:e4:aa:0f:7d:7a:e2:da:db:59:1c:9a:af:a9:ae:4a:a3:17:
         f3:99:3b:a8:55:c7:ea:0b:67:60:cf:a5:b9:41:0f:4e:b5:a2:
         ea:d1:59:f2:ce:96:de:8f:63:67:61:6a:01:13:bf:76:ea:4d:
         4a:7e:0b:6d:7c:ca:02:a6:66:62:b1:96:f7:1a:90:93:f4:0c:
         57:2f:68:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 02:59:37 2024 by rpki-client on console-fra.rpki-client.org