Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
File:                     B883529218840F471E398CF8F585B71D007A2B35.cer (raw, json)
Hash identifier:          TPNUqm/4zySJlJeUPD/NNSb+aCpAAu1Nyyi13CnrMAY=
Subject key identifier:   B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0ACBBD6CFD4201B73531430A81DC26C9195BAA10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 07 Aug 2024 13:07:27 +0000
Certificate not after:    Wed 06 Aug 2025 13:12:27 +0000
Subordinate resources:    AS: 262444
                          IP: 45.160.0.0/22
                          IP: 177.52.104.0/21
                          IP: 177.86.232.0/22
                          IP: 177.87.72.0/21
                          IP: 177.128.8.0/21
                          IP: 187.63.80.0/20
                          IP: 200.79.184.0/21
                          IP: 2804:d78::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:cb:bd:6c:fd:42:01:b7:35:31:43:0a:81:dc:26:c9:19:5b:aa:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  7 13:07:27 2024 GMT
            Not After : Aug  6 13:12:27 2025 GMT
        Subject: CN=B883529218840F471E398CF8F585B71D007A2B35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:06:89:16:af:5f:6a:17:56:33:be:c4:28:76:
                    f7:f5:7f:9d:75:ae:d3:56:75:34:ad:e6:37:5b:22:
                    ec:ee:d1:9c:53:51:1b:79:28:15:6b:70:7d:4b:5c:
                    27:48:46:1e:e2:c9:29:fd:39:f4:e1:bd:9d:1c:04:
                    8e:f1:aa:4f:62:cf:8f:29:00:58:f9:ef:78:a0:f5:
                    25:77:e7:c5:a4:bc:67:db:bf:a9:8e:4e:25:ed:a3:
                    6b:6d:43:57:fc:1e:79:47:bf:8d:d7:c2:32:60:48:
                    fb:6a:29:8d:1f:7f:9f:82:7c:f1:a2:19:a6:0e:60:
                    21:0f:9a:7d:0e:f0:ee:ab:c2:1c:d4:c8:95:03:c7:
                    44:a2:7a:ee:40:c0:7c:5b:f6:39:8c:44:09:52:35:
                    a7:ce:d3:32:30:d2:f1:c6:80:11:ac:c2:bc:e4:83:
                    db:c4:18:84:73:44:7c:3a:4d:49:d3:c6:d1:a3:ff:
                    da:42:7f:1a:eb:f2:08:28:57:25:ff:5e:bc:1c:e4:
                    8a:d8:64:9b:8b:f3:d7:1a:83:5b:b8:96:82:1e:1b:
                    27:d9:fa:73:2f:5a:8f:7f:37:c3:f8:a2:58:7d:83:
                    4f:e3:5f:85:2f:6e:66:5a:36:7f:43:ba:58:dd:e9:
                    99:58:8e:3f:33:3d:fc:ae:f5:9d:e6:eb:ed:0e:fe:
                    46:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.0.0/22
                  177.52.104.0/21
                  177.86.232.0/22
                  177.87.72.0/21
                  177.128.8.0/21
                  187.63.80.0/20
                  200.79.184.0/21
                IPv6:
                  2804:d78::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262444

    Signature Algorithm: sha256WithRSAEncryption
         24:c8:16:e5:a8:a6:65:26:c0:4d:5f:bf:2d:a7:f3:62:eb:fe:
         08:5d:4b:46:af:5e:3e:5b:0d:b7:a4:81:e6:f4:af:9b:46:1b:
         79:35:fe:eb:c7:0a:01:ad:ab:28:94:3f:93:8d:62:5a:eb:6d:
         1b:ad:13:80:d3:d2:bd:e0:6c:dc:a3:ad:8c:1f:91:fd:22:f2:
         ed:c7:2c:0d:6c:ad:f3:fd:8d:2c:cf:c4:f2:0f:c0:8f:1a:5e:
         63:60:9c:6b:72:ec:73:bb:24:f2:62:b8:4e:39:cd:12:f7:16:
         10:10:68:09:70:ea:6f:12:01:4a:66:71:ea:cc:39:70:f8:40:
         82:93:bb:0d:9d:30:84:82:05:d3:56:d7:f0:d1:99:3c:43:f0:
         1a:fc:7b:00:b6:72:7e:60:b9:df:b5:3b:ce:74:8a:c2:b9:d8:
         e8:e6:c0:96:10:48:5b:44:20:de:c0:36:be:36:4c:65:18:10:
         53:38:59:a9:a8:98:00:75:b8:3e:d3:2a:30:92:7f:a7:c2:16:
         4d:b7:4e:09:00:f7:47:c5:ff:92:47:4a:fd:3e:69:29:c7:27:
         6a:76:f9:a3:02:0a:fd:23:b5:9b:52:2e:a6:ab:ea:9b:18:e1:
         f4:d9:c8:b3:13:0e:bf:8f:5f:5c:a5:86:68:e2:cb:4a:54:89:
         78:71:4b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:44:22 2024 by rpki-client on console-ams.rpki-client.org