Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BDFDA8D24F7FE492E3B1FC3D2D5CC4969765C26F.cer
File:                     BDFDA8D24F7FE492E3B1FC3D2D5CC4969765C26F.cer (raw, json)
Hash identifier:          SrrkCeJlH4II3XAYEzYU4PJq47xAsqMNml4nsQGLDBo=
Subject key identifier:   BD:FD:A8:D2:4F:7F:E4:92:E3:B1:FC:3D:2D:5C:C4:96:97:65:C2:6F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       72C4C06BF307FB57247EA7A29E1BC7F42057DA5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/1/BDFDA8D24F7FE492E3B1FC3D2D5CC4969765C26F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Apr 2024 04:09:08 +0000
Certificate not after:    Fri 04 Apr 2025 04:14:08 +0000
Subordinate resources:    AS: 269276
                          IP: 45.182.88.0/22
                          IP: 2804:621c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Jun 2024 12:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c4:c0:6b:f3:07:fb:57:24:7e:a7:a2:9e:1b:c7:f4:20:57:da:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  5 04:09:08 2024 GMT
            Not After : Apr  4 04:14:08 2025 GMT
        Subject: CN=BDFDA8D24F7FE492E3B1FC3D2D5CC4969765C26F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ec:7c:02:0c:ff:7b:31:74:2d:68:46:99:6a:
                    53:1f:b9:42:ab:4c:de:ad:18:05:fa:20:e1:cf:30:
                    c6:cd:2c:b2:01:21:cd:14:eb:f0:6f:55:5d:30:11:
                    d2:b6:1b:c3:35:94:b4:d5:69:7f:bc:79:91:1c:8e:
                    4c:92:71:9b:c8:ed:6c:68:73:3c:85:7b:4c:40:7b:
                    89:55:2c:3a:78:a5:03:fe:34:d7:62:f9:cf:f2:d9:
                    26:c9:27:83:e4:fa:82:04:14:1a:97:d7:91:51:86:
                    1c:cf:c4:9c:23:50:b2:57:91:c6:a0:40:02:86:2f:
                    c1:50:e3:8a:79:17:86:51:9f:21:c4:aa:97:45:11:
                    9f:c8:af:18:98:f0:db:2b:19:0b:b4:2d:f3:55:a8:
                    6c:fe:dd:f0:29:68:5b:4e:07:a7:6d:42:16:e7:c4:
                    19:cf:77:e9:b3:6c:af:a0:2f:c8:a7:e3:bb:d8:28:
                    24:46:94:c0:54:72:45:7c:5a:37:82:f4:03:9b:c0:
                    fa:3f:d5:b6:c9:6c:7e:af:68:7f:00:b2:f1:ca:d2:
                    c4:ae:e5:ab:ac:9e:95:08:c1:23:ca:5d:53:c7:7e:
                    42:0c:ba:a6:7d:10:9c:3f:33:b7:66:e7:7d:e9:16:
                    29:15:98:ab:b7:f0:99:76:9d:9b:1e:64:90:5b:a5:
                    cc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BD:FD:A8:D2:4F:7F:E4:92:E3:B1:FC:3D:2D:5C:C4:96:97:65:C2:6F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/1/BDFDA8D24F7FE492E3B1FC3D2D5CC4969765C26F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.88.0/22
                IPv6:
                  2804:621c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269276

    Signature Algorithm: sha256WithRSAEncryption
         08:ce:24:1c:17:30:18:ea:af:96:b9:bf:a2:13:e8:0a:e0:b4:
         d0:44:32:22:9b:15:48:25:a7:7f:1e:01:48:6b:c3:7f:0e:5b:
         a5:28:9c:e8:16:68:77:9a:ac:02:1c:75:6c:2f:c4:84:8c:fa:
         96:0c:91:d5:e8:a2:1d:85:fc:5e:12:81:e7:1c:62:d9:fa:a5:
         66:71:66:c8:ab:7a:e4:25:62:31:4c:05:49:e7:2d:6d:2a:be:
         84:0f:d3:2e:12:8f:bf:61:58:fd:64:ec:e4:6b:0c:67:9f:18:
         fc:49:d3:56:5b:68:ac:5a:42:72:1f:eb:88:c7:46:eb:c7:1b:
         69:bb:20:e2:f8:f4:85:75:3e:0b:53:95:dc:11:62:27:60:7a:
         4e:d1:17:91:75:15:e3:60:8b:ef:00:82:85:67:57:d0:d0:4d:
         b7:23:45:86:a3:c5:dc:08:19:d6:e9:b6:9e:29:ac:14:04:62:
         47:89:d9:11:20:41:2f:b9:4a:34:1f:a2:5c:87:62:eb:0c:9a:
         ed:20:51:96:dc:f9:11:b6:ea:44:4f:cf:2d:7f:df:57:4f:67:
         c9:a1:6e:5f:d4:ca:70:d2:0c:70:09:e6:12:f3:ca:70:eb:f8:
         a8:76:a4:cb:da:9a:69:7a:b3:59:ed:a8:8d:6a:cc:0c:31:1b:
         95:c5:25:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 14:51:51 2024 by rpki-client on console-ams.rpki-client.org