Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.cer
File:                     B8274222DAE9FCA80975171337DDE4FF19CE8E24.cer (raw, json)
Hash identifier:          Go4Q3IiSe9WJT8heiRCNe2F4S6nwU6zAC5rZxF4I3bI=
Subject key identifier:   B8:27:42:22:DA:E9:FC:A8:09:75:17:13:37:DD:E4:FF:19:CE:8E:24
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       241D44513C6C065823BE2BC5E40CEC5C7A9CF528
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.mft
caRepository:             rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 19:03:46 +0000
Certificate not after:    Thu 03 Apr 2025 19:08:46 +0000
Subordinate resources:    AS: 268269
                          IP: 45.237.100.0/22
                          IP: 2804:4e90::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 23:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:1d:44:51:3c:6c:06:58:23:be:2b:c5:e4:0c:ec:5c:7a:9c:f5:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 19:03:46 2024 GMT
            Not After : Apr  3 19:08:46 2025 GMT
        Subject: CN=B8274222DAE9FCA80975171337DDE4FF19CE8E24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:26:03:21:e1:55:24:ae:db:8e:b0:d3:1c:96:
                    cf:16:48:0a:66:8a:c2:ea:2c:4e:39:e8:21:b7:94:
                    bb:78:2c:6d:f6:e0:5a:f7:ed:d1:ec:57:cb:86:70:
                    8c:19:4d:63:2d:e3:d1:3f:e7:f7:5b:a1:db:b5:00:
                    1d:71:b1:62:d2:89:4a:f0:b9:01:3e:50:4c:1c:b6:
                    26:fc:c4:56:93:9e:48:c4:20:77:84:a5:ca:0f:e5:
                    e9:d6:a3:42:bf:a6:24:84:b0:83:21:59:b2:58:8e:
                    79:71:6a:ba:0b:44:3c:8a:3b:d0:f0:0e:04:fd:74:
                    6c:83:3c:a7:5f:bb:cd:2b:37:4d:67:96:a7:89:fe:
                    35:4e:e3:4f:70:de:98:c7:b2:3d:84:de:cc:d5:91:
                    34:40:e3:c2:9d:33:5f:13:70:9a:53:f1:0e:dd:57:
                    4e:5e:ed:ac:64:ff:d5:e5:1f:26:09:9e:68:06:89:
                    ae:e6:69:1e:20:7c:41:f3:69:f5:55:14:8f:0d:3f:
                    2f:af:4f:25:c0:d1:0f:b0:a5:a1:78:d0:0b:76:16:
                    fe:f6:fe:bd:3e:e2:ec:4c:7a:12:e5:07:1b:e7:41:
                    df:75:f4:b8:a8:57:e8:da:3b:22:a9:82:f4:f0:66:
                    08:59:90:94:e1:e8:5f:b3:7b:f5:c7:05:ae:74:b3:
                    ab:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B8:27:42:22:DA:E9:FC:A8:09:75:17:13:37:DD:E4:FF:19:CE:8E:24
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.100.0/22
                IPv6:
                  2804:4e90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268269

    Signature Algorithm: sha256WithRSAEncryption
         56:c7:fb:d9:db:09:3a:12:70:7d:33:43:f2:0f:15:aa:3c:aa:
         7b:ca:70:8d:97:ea:e5:25:1a:c8:bb:73:a4:9b:fe:32:5b:e6:
         0a:1d:7c:a1:88:f9:6c:8f:82:51:b4:f2:ce:af:48:28:cd:1f:
         89:31:0d:d1:de:cc:04:aa:39:e1:ad:a3:14:66:40:98:78:89:
         fa:e7:a5:2a:8b:7a:cf:e4:3b:ae:8d:b0:da:4e:15:6e:e7:bc:
         d6:bf:c1:14:68:59:b2:c6:14:c5:dd:d2:ee:e8:58:b8:2b:0d:
         f1:a4:be:92:63:83:96:5a:40:a9:c5:10:e6:7d:93:ef:f3:ed:
         54:21:dc:bf:24:7c:e4:63:76:c4:a4:ee:7b:87:24:89:50:44:
         0c:c0:92:93:8e:74:d3:cf:3b:b5:ea:0e:9a:ae:33:d3:c0:0f:
         12:92:61:65:e2:a1:eb:be:5c:f5:14:14:a4:85:54:41:79:8c:
         fe:cd:bf:02:c5:c9:aa:cb:33:ee:6c:3f:f4:ca:7e:e5:ab:93:
         0e:1a:b3:69:95:8c:15:24:00:df:be:3f:db:06:5c:2d:f9:3b:
         5f:6c:2a:91:a6:92:0c:11:3c:a4:5a:91:74:15:83:94:5c:4d:
         b0:c4:95:30:c6:bf:d6:13:e7:cf:ac:81:4b:71:e1:68:bd:f1:
         2f:e5:99:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 00:29:21 2024 by rpki-client on console-ams.rpki-client.org