Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B5568D235613C8FBA63E48026996810FAB5904D3.cer
File:                     B5568D235613C8FBA63E48026996810FAB5904D3.cer (raw, json)
Hash identifier:          nmXQWiDPwuk4Ot/IU4fiC4o/4qNXIOVPteDvql+YG8s=
Subject key identifier:   B5:56:8D:23:56:13:C8:FB:A6:3E:48:02:69:96:81:0F:AB:59:04:D3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6709E5EDF3815A01951F6E1118A447DEDB654F32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FkFoYCfqQoYLMkobSFiRpuCtETV6pKdN3AqbBhZj3Q1k/0/B5568D235613C8FBA63E48026996810FAB5904D3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FkFoYCfqQoYLMkobSFiRpuCtETV6pKdN3AqbBhZj3Q1k/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 10 Apr 2024 19:34:20 +0000
Certificate not after:    Wed 09 Apr 2025 19:39:20 +0000
Subordinate resources:    AS: 264462
                          IP: 132.255.52.0/22
                          IP: 2804:2010::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jul 2024 05:09:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:09:e5:ed:f3:81:5a:01:95:1f:6e:11:18:a4:47:de:db:65:4f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 10 19:34:20 2024 GMT
            Not After : Apr  9 19:39:20 2025 GMT
        Subject: CN=B5568D235613C8FBA63E48026996810FAB5904D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7d:a2:2e:de:86:22:01:e9:c6:95:be:b2:4f:
                    55:78:e8:1d:50:8c:43:48:31:f9:b8:8e:c9:40:a1:
                    0a:15:20:68:55:f8:cc:d3:20:6a:31:d8:d0:31:df:
                    1f:1d:30:fb:27:3c:14:da:68:6b:d8:62:6c:8b:fe:
                    00:4c:cb:aa:78:3f:31:9f:02:eb:47:5b:3b:7b:9f:
                    8a:2d:a4:b4:e5:94:88:ce:c8:cb:67:3e:5b:5a:db:
                    2d:9e:53:8e:e1:cd:26:fd:c1:f0:77:9b:5c:dc:67:
                    30:0f:d4:48:08:c8:f9:f1:cc:0b:2b:c3:97:6f:03:
                    44:7b:4a:dc:4b:1e:78:4d:6c:40:63:12:00:15:2b:
                    cc:86:44:a2:0d:31:32:30:58:32:aa:21:b3:59:0b:
                    d5:e8:e7:17:aa:58:bf:3c:ab:23:1e:d9:84:50:77:
                    ba:fa:1f:97:18:d4:73:0f:b7:6e:6d:9a:c5:8c:3f:
                    e8:47:0f:bf:9d:9b:d8:3d:7e:b1:4c:5e:f5:a8:06:
                    8c:37:9b:40:1e:56:5c:b9:d8:10:4f:f6:d4:ac:e2:
                    8a:f5:8a:c9:0d:f3:56:1e:c3:7d:d8:11:08:e9:09:
                    1c:6f:0e:00:9a:0a:d6:72:36:45:76:f8:1b:48:35:
                    1f:d0:5a:ae:d3:ef:6b:a2:ed:87:c0:97:89:7a:b9:
                    3a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B5:56:8D:23:56:13:C8:FB:A6:3E:48:02:69:96:81:0F:AB:59:04:D3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FkFoYCfqQoYLMkobSFiRpuCtETV6pKdN3AqbBhZj3Q1k/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FkFoYCfqQoYLMkobSFiRpuCtETV6pKdN3AqbBhZj3Q1k/0/B5568D235613C8FBA63E48026996810FAB5904D3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.52.0/22
                IPv6:
                  2804:2010::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264462

    Signature Algorithm: sha256WithRSAEncryption
         ae:f1:b2:df:55:87:9c:d1:98:a7:26:a5:b2:65:e6:66:35:2d:
         b2:20:58:c6:30:b8:4d:4a:6e:5a:3e:b3:2e:9c:a6:01:77:8f:
         0b:34:c2:ca:29:88:21:8b:7a:a3:ec:62:af:29:76:f7:dc:92:
         11:8d:14:c6:35:dc:17:06:18:20:eb:e8:96:31:3b:aa:63:00:
         fd:3e:f2:03:50:af:82:3d:b7:ed:cb:a5:10:f4:0f:02:06:61:
         1a:a8:dd:b3:9e:89:16:a0:95:dc:d8:f2:01:4e:5a:ae:62:c0:
         65:da:03:bd:b8:93:da:07:0b:ea:6b:87:ff:4e:bc:19:34:24:
         60:8d:92:49:19:6f:cb:90:04:45:55:58:cd:a2:35:3f:0b:86:
         09:87:c6:0b:69:7b:b9:c6:b9:78:16:9e:d1:94:0f:f5:be:69:
         ce:80:70:83:e2:53:06:18:dc:a2:cf:1e:97:fa:32:e7:77:b3:
         05:21:27:64:6d:8b:c3:61:0c:5f:fa:40:af:4a:c3:8d:4b:42:
         ff:fb:32:d5:0b:73:e2:e7:bb:d2:89:3e:9d:ce:35:65:e9:f3:
         57:6c:14:fa:8e:18:6e:f8:dd:70:1d:0a:8b:ce:01:41:b5:d0:
         77:ef:2a:66:7f:7e:42:f5:3e:aa:1a:26:a1:b7:96:81:fa:a9:
         dc:27:e1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 02:59:37 2024 by rpki-client on console-fra.rpki-client.org