Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B646C835E3D595CAB108A2D2ED63E639BDC130B4.cer
File:                     B646C835E3D595CAB108A2D2ED63E639BDC130B4.cer (raw, json)
Hash identifier:          q8Cx+hBpmJ4vOA23hItSxaUO/dNGkNgl4pdUh1YX75Y=
Subject key identifier:   B6:46:C8:35:E3:D5:95:CA:B1:08:A2:D2:ED:63:E6:39:BD:C1:30:B4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4591EA74C3B2C346B6F2E54ADCC5F121B74C5FBA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/1/B646C835E3D595CAB108A2D2ED63E639BDC130B4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:25:37 +0000
Certificate not after:    Wed 02 Apr 2025 18:30:37 +0000
Subordinate resources:    AS: 270288
                          IP: 200.123.232.0/22
                          IP: 2804:69bc::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 02:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:91:ea:74:c3:b2:c3:46:b6:f2:e5:4a:dc:c5:f1:21:b7:4c:5f:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:25:37 2024 GMT
            Not After : Apr  2 18:30:37 2025 GMT
        Subject: CN=B646C835E3D595CAB108A2D2ED63E639BDC130B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c1:81:10:2d:c0:3f:10:fe:9b:cd:31:d0:47:
                    9c:4c:5d:d0:c8:c2:9a:98:34:11:47:ca:78:91:fd:
                    8b:df:5b:c0:04:ef:9f:9c:4c:c5:73:7b:97:4b:47:
                    ce:0a:20:88:89:e3:a4:42:80:b0:89:52:51:d9:29:
                    be:bc:09:a8:1c:03:64:c6:ef:65:3e:49:ee:35:db:
                    9f:20:93:a5:1c:38:5e:4e:57:01:dc:d8:8d:d7:74:
                    c0:1e:e0:27:c5:9a:70:91:18:1a:fe:9f:91:f7:f4:
                    02:fd:ff:26:8e:28:74:61:e8:d7:d8:ac:f8:ee:54:
                    06:a6:f3:a6:b2:c6:03:40:ff:a5:c8:01:8a:f0:81:
                    44:39:7f:5a:bb:34:75:ce:d5:89:8e:07:fd:02:03:
                    b7:9a:21:08:85:52:57:bf:5c:7b:7b:2b:a8:6a:77:
                    b0:9a:ae:dd:b4:fc:a5:40:95:ca:79:65:03:07:09:
                    31:3a:4e:bd:7f:22:33:62:10:22:24:29:81:4f:8b:
                    7b:30:ed:82:71:6b:ac:ef:db:35:e7:7c:a2:c0:c4:
                    6f:8e:ab:04:74:09:b7:42:b5:c0:fc:d1:af:c5:34:
                    e2:26:1d:db:6f:14:a2:41:c6:af:a9:76:fc:3e:c1:
                    fc:9c:65:57:4c:75:c1:dd:52:59:e9:04:4c:4e:bd:
                    a5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B6:46:C8:35:E3:D5:95:CA:B1:08:A2:D2:ED:63:E6:39:BD:C1:30:B4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/1/B646C835E3D595CAB108A2D2ED63E639BDC130B4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.232.0/22
                IPv6:
                  2804:69bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270288

    Signature Algorithm: sha256WithRSAEncryption
         0d:48:f1:0e:05:2f:88:97:4c:b7:6f:6f:f4:bc:62:e1:07:9d:
         e8:50:c6:ff:92:9f:30:3f:21:68:ab:5c:b7:3b:7e:c2:fd:81:
         79:ee:d7:1a:8a:a4:07:db:6d:d7:95:3b:85:41:2b:31:d7:86:
         2b:cc:6f:fb:0b:c9:b1:ac:2d:ed:4f:17:10:1c:76:92:74:c5:
         72:51:66:74:b3:ff:41:3c:02:9e:ef:47:8f:2a:3c:68:67:c8:
         e5:0e:40:19:c0:b1:be:ee:8c:c5:94:01:31:97:5f:d4:2f:4b:
         e9:ae:ae:2c:6c:7e:b3:fc:94:c4:28:4a:3d:04:34:bc:e8:91:
         2d:20:89:e2:29:e1:38:d4:3e:22:ac:82:2d:dd:57:72:86:47:
         18:b4:47:aa:e8:1a:b9:8c:50:de:97:c1:22:cb:54:7d:19:db:
         6e:31:41:0d:52:91:4a:2e:a4:21:2c:52:ee:0f:93:0a:60:90:
         b0:b2:36:72:7e:2e:de:b8:83:c6:7e:f4:10:95:e7:af:2e:3f:
         f9:cc:dd:5d:72:c1:ad:c9:ca:4a:7f:3b:00:c7:d1:1e:8e:6b:
         ac:d1:a0:2f:62:42:12:f1:54:85:ba:cf:78:36:38:4f:44:69:
         80:83:29:13:c5:81:85:2a:c5:cf:9f:2d:04:ed:f1:26:64:4c:
         a6:15:e4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:06:40 2024 by rpki-client on console-fra.rpki-client.org