Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
File:                     BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer (raw, json)
Hash identifier:          vgEBzbXsGMem5ghBHrdyOW1nYSb6UsNwxeIkDGsVM3A=
Subject key identifier:   BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1EBE9E594D52FADC5ADD245EB7761D0D8596BF7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 May 2024 19:08:58 +0000
Certificate not after:    Tue 06 May 2025 19:13:58 +0000
Subordinate resources:    AS: 263022
                          IP: 186.249.16.0/21
                          IP: 2804:a18::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:be:9e:59:4d:52:fa:dc:5a:dd:24:5e:b7:76:1d:0d:85:96:bf:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  7 19:08:58 2024 GMT
            Not After : May  6 19:13:58 2025 GMT
        Subject: CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ca:2d:14:36:ec:dc:af:6d:dd:05:1a:0e:08:
                    da:c0:3c:d6:32:bd:98:ec:3b:5c:8d:36:92:d8:0c:
                    72:88:cd:10:f7:75:4c:46:57:f3:1e:a3:1e:3e:15:
                    4a:b8:ef:4c:4f:91:9c:b8:29:a7:be:37:e0:dd:4c:
                    d4:78:41:7f:7e:f6:f2:db:dd:99:b8:9b:08:b2:f0:
                    73:ff:01:28:54:b5:f4:3d:bd:28:a8:77:20:a6:ba:
                    06:7b:4e:70:1f:f7:2d:82:5a:68:82:11:f9:d5:02:
                    59:1b:48:78:c3:15:93:1e:32:31:52:2a:2b:13:42:
                    b9:7f:27:8c:47:2f:6a:df:18:9e:15:a0:c5:cd:ee:
                    a7:6f:4a:7a:ae:89:7e:11:23:25:cc:f9:48:71:c6:
                    9c:67:cc:e9:ef:bd:fa:13:9f:10:dd:d7:df:4c:7a:
                    8a:7c:c0:fc:fc:27:db:3e:d1:92:a0:e1:0a:de:e8:
                    c2:4d:c8:87:68:7e:97:bf:63:96:f3:4d:3f:5a:bc:
                    cd:fe:c2:a8:3c:60:e2:da:d4:ca:74:40:23:bb:97:
                    87:4c:f3:9d:4d:7d:3f:ed:32:1b:98:41:87:f5:ca:
                    9c:e3:07:3e:b9:38:fa:98:14:7e:97:55:60:96:3a:
                    d1:f2:0a:63:a9:f9:c0:92:47:af:17:61:bf:4d:06:
                    df:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.16.0/21
                IPv6:
                  2804:a18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263022

    Signature Algorithm: sha256WithRSAEncryption
         54:87:63:47:91:7c:15:fe:0c:61:50:88:3a:1b:6c:d5:8c:26:
         5a:32:1a:47:9e:5e:94:f3:7d:8d:ed:f2:04:4b:98:80:04:32:
         a0:96:50:93:0e:b8:36:23:20:15:84:9a:bc:f0:4e:8d:4d:8f:
         2e:d3:95:54:d6:d0:b6:2a:fa:42:88:2b:b4:60:3b:c3:49:2e:
         d2:37:f1:2b:8a:1d:a2:00:1f:ad:69:93:49:c2:c7:47:54:5a:
         8f:82:c5:cc:1b:24:66:38:40:b1:1a:fc:67:01:78:f4:ef:ef:
         8f:6a:96:d3:eb:b0:05:eb:77:60:53:68:ff:d0:b4:0b:78:48:
         ea:f2:2f:cb:a5:cc:ba:6a:fc:99:63:77:5b:ac:a5:96:6d:8c:
         c5:fc:5b:7a:9f:29:b1:90:6e:be:ba:ea:32:b6:7c:f8:d4:06:
         44:d5:c4:2d:55:f9:d3:c6:78:3a:b9:4d:de:84:3f:26:fd:32:
         1a:ea:09:0d:1c:d8:0a:d1:14:cc:e1:3a:94:54:11:31:3c:90:
         c2:06:73:cd:a3:07:5d:12:76:32:ca:61:93:cf:f0:5b:9a:1d:
         88:eb:5f:9e:e9:e0:18:3c:cc:f6:87:98:f3:55:07:44:64:1f:
         ed:9d:9e:26:d6:c1:c3:6f:ff:73:5d:1c:c8:8f:8d:a0:7a:ce:
         2b:32:27:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:44:24 2024 by rpki-client on console-ams.rpki-client.org