Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.cer
File:                     B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.cer (raw, json)
Hash identifier:          VuUdzpu/3RdWyPTJAvfRgju7Ukn95uSid4jDCZH/7Vs=
Subject key identifier:   B8:7C:E2:9C:7C:1D:5F:A3:C2:83:B0:AE:0A:D7:5B:53:64:55:66:18
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       22D3C7281F12BBC1F22D83749DB28D2C6D8FB04A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 19:13:31 +0000
Certificate not after:    Wed 02 Apr 2025 19:18:31 +0000
Subordinate resources:    AS: 61602
                          AS: 265950
                          IP: 164.163.108.0/22
                          IP: 177.124.156.0/22
                          IP: 2804:404c::/32
                          IP: 2804:7004::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 23:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d3:c7:28:1f:12:bb:c1:f2:2d:83:74:9d:b2:8d:2c:6d:8f:b0:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 19:13:31 2024 GMT
            Not After : Apr  2 19:18:31 2025 GMT
        Subject: CN=B87CE29C7C1D5FA3C283B0AE0AD75B5364556618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4d:b6:b6:0c:ab:18:b7:9c:8e:af:e2:89:49:
                    96:73:6f:31:97:92:0c:af:86:b6:35:71:1e:29:b6:
                    fc:5e:8f:63:b8:2c:c4:86:a7:0e:eb:cf:78:c8:5e:
                    95:5d:01:dd:90:b7:15:18:3f:2b:9b:b9:b6:41:4f:
                    43:88:65:e2:b7:6c:4b:ea:ab:be:4e:8f:59:05:45:
                    0c:6c:9e:bf:34:c5:bf:c8:af:1c:24:ff:64:8a:11:
                    27:d3:78:00:38:06:5f:36:2e:a5:67:5d:f3:a2:9a:
                    38:af:f0:c4:e3:64:cd:c6:e0:5d:a7:6b:37:6d:d9:
                    0d:9d:5f:e6:2e:25:cf:db:f7:99:81:58:aa:f3:11:
                    2b:a6:88:4b:a8:09:6a:d2:0c:59:cb:df:6c:51:9d:
                    ab:f5:1f:1a:d1:01:ab:a0:f5:e3:1c:6a:d5:cd:16:
                    33:93:37:d6:79:aa:ba:d4:d9:23:4a:a6:4b:55:af:
                    77:1f:fc:d5:8f:4c:20:72:b9:a3:4a:b1:f5:73:b3:
                    73:66:68:93:01:d6:d1:fb:ca:5d:c2:92:0c:c3:51:
                    f5:25:ba:48:54:26:b2:a2:e9:fd:95:ef:fb:15:e5:
                    5c:39:2e:33:f6:50:70:7d:28:36:5d:26:b3:88:e4:
                    3a:2d:1d:23:03:ff:7c:90:1c:af:ad:7f:ff:99:c6:
                    5a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B8:7C:E2:9C:7C:1D:5F:A3:C2:83:B0:AE:0A:D7:5B:53:64:55:66:18
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.108.0/22
                  177.124.156.0/22
                IPv6:
                  2804:404c::/32
                  2804:7004::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61602
                  265950

    Signature Algorithm: sha256WithRSAEncryption
         86:4a:87:59:cb:8a:35:99:79:a2:e9:9d:ed:24:b1:d8:76:8d:
         fb:18:a3:ca:62:2e:79:fc:5e:24:de:89:ea:19:fe:dd:3d:29:
         8f:2e:f4:9d:ee:45:72:42:ac:f2:c0:b3:73:f3:0a:81:bf:2c:
         91:c1:01:73:69:ed:dd:1d:b3:0d:80:13:8b:f2:4c:50:b7:19:
         6f:2f:71:04:d3:89:c2:dc:03:f4:e2:2f:85:18:8f:a0:de:df:
         80:1f:49:b8:02:a9:f3:40:0f:a4:76:66:d0:70:c5:fb:00:bd:
         fa:21:82:9f:e3:b2:16:7f:7d:56:6f:fc:d8:c9:69:88:30:4c:
         0a:e5:2d:8e:c7:06:04:bf:2d:70:2b:cf:66:33:9b:ad:3e:8a:
         30:e8:14:9b:99:86:d0:6e:61:d3:cc:ee:4b:20:00:e8:c6:ad:
         b5:08:33:ae:18:80:17:77:e8:c3:d0:af:b4:05:44:e9:e8:86:
         cc:9b:ee:20:da:9b:e9:4c:52:36:42:bb:c0:69:46:0a:e7:f6:
         78:98:9a:13:bc:d3:df:88:7b:06:43:24:d3:e0:28:38:2e:ef:
         1d:14:ce:a4:45:38:05:4c:b7:02:20:15:de:0d:4b:32:65:de:
         1a:8b:ff:2b:7c:97:41:d9:56:6e:f6:96:b2:54:b4:b6:33:45:
         c7:05:7e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:43:34 2024 by rpki-client on console-fra.rpki-client.org