Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer
File:                     B6DD0286E17B756E91475332E495995F85C36F08.cer (raw, json)
Hash identifier:          FBgq2ksPJgqwtFJSktOq7fd7k7WketgzcnFgxPfLksU=
Subject key identifier:   B6:DD:02:86:E1:7B:75:6E:91:47:53:32:E4:95:99:5F:85:C3:6F:08
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       23451E93C01D4BAC9106CFE70779EEC9685EBBA4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Apr 2024 01:30:13 +0000
Certificate not after:    Fri 04 Apr 2025 01:35:13 +0000
Subordinate resources:    AS: 22689
                          IP: 138.59.88.0/22
                          IP: 186.236.128.0/18
                          IP: 187.0.64.0/18
                          IP: 187.18.64.0/18
                          IP: 187.62.0.0/18
                          IP: 187.121.128.0/20
                          IP: 189.14.0.0/18
                          IP: 189.76.0.0/18
                          IP: 200.155.32.0/19
                          IP: 200.233.96.0/19
                          IP: 201.23.128.0/19
                          IP: 201.54.64.0/18
                          IP: 201.94.192.0/18
                          IP: 2804:22c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 23:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:45:1e:93:c0:1d:4b:ac:91:06:cf:e7:07:79:ee:c9:68:5e:bb:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  5 01:30:13 2024 GMT
            Not After : Apr  4 01:35:13 2025 GMT
        Subject: CN=B6DD0286E17B756E91475332E495995F85C36F08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fe:3e:39:c3:b8:8f:e0:5f:76:53:58:0f:7e:
                    85:7f:ac:72:a0:61:18:cb:8c:aa:b8:88:96:ef:87:
                    82:7e:13:1b:6c:1d:27:d2:8e:2a:58:41:2f:34:e3:
                    05:98:fb:82:52:74:e3:60:11:b3:ab:6b:11:87:d4:
                    34:7f:89:25:91:b2:3f:c6:9a:2d:ec:05:da:b5:e8:
                    c3:26:e3:cc:b9:3b:5c:74:13:64:d1:1d:35:03:6f:
                    d4:cf:dd:87:fc:52:1e:8a:ad:cd:36:9f:56:98:8e:
                    18:c4:27:4a:de:e3:e3:e1:17:55:d2:d4:52:5f:7d:
                    db:06:b0:3a:c5:7c:01:a5:93:52:7c:72:5d:bd:db:
                    c6:36:11:4f:c3:36:b6:2e:f8:c1:53:b6:a7:c8:f1:
                    e0:31:c8:9e:6d:e3:ed:86:35:87:b0:b7:1c:02:7c:
                    7e:e7:63:cf:d3:a9:74:56:31:07:9d:26:9d:a3:fa:
                    be:cd:7e:11:2d:82:26:93:a7:66:e8:04:9c:b4:51:
                    c1:c9:22:96:f5:4c:4a:3d:1e:66:9d:50:cb:16:e1:
                    56:2f:0b:ba:a4:af:28:bf:41:9d:b2:75:db:46:37:
                    90:29:85:c4:d1:bd:c9:99:4e:2a:40:ff:9c:1b:50:
                    51:12:65:11:34:50:51:38:6b:4c:ba:97:ec:75:16:
                    ad:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B6:DD:02:86:E1:7B:75:6E:91:47:53:32:E4:95:99:5F:85:C3:6F:08
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.88.0/22
                  186.236.128.0/18
                  187.0.64.0/18
                  187.18.64.0/18
                  187.62.0.0/18
                  187.121.128.0/20
                  189.14.0.0/18
                  189.76.0.0/18
                  200.155.32.0/19
                  200.233.96.0/19
                  201.23.128.0/19
                  201.54.64.0/18
                  201.94.192.0/18
                IPv6:
                  2804:22c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22689

    Signature Algorithm: sha256WithRSAEncryption
         c0:10:f7:97:95:2e:31:d0:42:b8:49:90:82:be:83:6e:26:80:
         ed:2b:e8:6b:07:ec:c2:92:38:b9:34:29:43:4c:8f:cf:58:c3:
         2f:a9:02:d3:59:5b:f3:97:d0:f9:ce:db:2d:5a:86:40:8f:d7:
         d4:94:e3:3e:67:d5:5f:42:8f:5c:d4:4b:31:25:b2:d0:f2:ed:
         68:80:bd:4c:5b:cb:52:e9:7d:89:4d:5b:f5:29:b4:42:62:7c:
         af:f4:37:9a:01:7a:c4:6c:2f:83:7b:b6:42:7e:8d:02:e5:a9:
         9c:f2:aa:20:98:92:76:ec:6a:46:15:f8:ff:f3:e4:9b:51:1f:
         3f:33:be:aa:62:8e:3e:63:f5:7f:be:58:40:74:a2:8a:35:6e:
         e7:d3:b3:47:19:27:8a:11:7b:f4:ea:aa:fb:5d:dc:4f:e1:80:
         7f:ba:74:d4:b2:71:52:e0:03:49:c4:b2:19:db:b8:97:38:cb:
         47:42:0e:eb:91:04:56:6c:5b:c5:20:99:2e:c4:78:f3:eb:64:
         25:a2:c1:0f:1f:a6:d7:46:d5:a8:1a:47:36:f0:87:0a:34:ab:
         35:7a:f8:f7:c7:26:64:45:a2:01:ad:07:29:8e:e0:87:98:9a:
         56:ef:9e:62:e4:76:34:b9:73:85:f8:a8:2c:6b:db:d1:79:50:
         0c:19:b0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:43:34 2024 by rpki-client on console-fra.rpki-client.org