Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C01DF174C12528273BF338B916174C8FBDA2AEB3.cer
File:                     C01DF174C12528273BF338B916174C8FBDA2AEB3.cer (raw, json)
Hash identifier:          T4v/fDbeOyGCvujFGeMMyzT7IAtglAti+TgCacEd8WE=
Subject key identifier:   C0:1D:F1:74:C1:25:28:27:3B:F3:38:B9:16:17:4C:8F:BD:A2:AE:B3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3A2AFDBC32DB39BC0729D5DC43E0B1EC97E663C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/1/C01DF174C12528273BF338B916174C8FBDA2AEB3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 00:00:03 +0000
Certificate not after:    Thu 03 Apr 2025 00:05:03 +0000
Subordinate resources:    AS: 271209
                          IP: 177.223.140.0/22
                          IP: 2804:77f0::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 01:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:2a:fd:bc:32:db:39:bc:07:29:d5:dc:43:e0:b1:ec:97:e6:63:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 00:00:03 2024 GMT
            Not After : Apr  3 00:05:03 2025 GMT
        Subject: CN=C01DF174C12528273BF338B916174C8FBDA2AEB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:25:55:af:6d:06:f0:16:1e:bd:5c:80:70:8c:
                    66:f8:d7:3b:38:d4:03:53:3b:db:db:ff:02:b8:a5:
                    ee:fc:3d:b1:5c:7b:05:bc:68:c4:4b:56:ea:28:96:
                    0d:25:f3:66:e7:27:05:b3:0d:73:62:26:a7:46:62:
                    63:59:82:72:5d:48:89:f0:3f:50:f6:2d:29:37:a9:
                    fa:c5:c7:c2:e9:13:5a:6a:53:7d:75:26:00:ca:fd:
                    16:39:e5:5a:ea:f3:8d:06:74:d2:16:35:02:65:43:
                    09:e5:bd:0a:52:be:44:dc:33:16:89:28:60:68:ef:
                    09:67:f9:8a:5f:79:9a:83:5c:e0:1e:f5:f7:99:8e:
                    16:b3:31:e4:6e:91:4a:6f:b3:a1:51:36:2d:cb:93:
                    d6:b6:39:13:3e:50:be:82:1b:d9:1c:6b:18:0a:31:
                    82:da:63:cb:e9:b0:ab:d0:6c:47:ee:e3:bf:3f:50:
                    5c:8f:8d:80:9f:47:29:13:33:5f:10:3f:52:b9:17:
                    a2:5b:cc:fc:1b:75:22:60:c8:70:e5:2c:15:3b:d6:
                    8a:6e:5f:70:6d:2e:04:46:fb:1e:a7:6d:b3:c2:41:
                    10:a3:3a:4e:53:f9:9f:e3:73:4b:64:c8:08:66:7d:
                    5b:48:88:64:7e:b0:ca:ea:0d:e5:32:89:23:1d:05:
                    88:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C0:1D:F1:74:C1:25:28:27:3B:F3:38:B9:16:17:4C:8F:BD:A2:AE:B3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/1/C01DF174C12528273BF338B916174C8FBDA2AEB3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.140.0/22
                IPv6:
                  2804:77f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271209

    Signature Algorithm: sha256WithRSAEncryption
         3d:6b:c8:fb:ab:05:c8:69:63:9e:5f:1f:b0:e4:64:35:97:cc:
         7a:80:f7:c3:62:26:41:86:2b:66:21:ba:20:ba:5f:53:c1:19:
         fd:9d:c1:4a:5d:7e:34:e5:1c:75:75:36:b2:fa:ca:b4:33:0c:
         6c:cb:d8:45:c7:6f:2f:0c:21:dd:20:99:87:ff:05:ab:1c:ab:
         e6:81:f1:2f:d8:1a:bc:34:64:15:69:d0:1b:a4:cb:a3:7e:2d:
         1a:2d:fc:45:e0:fe:f3:62:62:08:64:d1:e6:f8:37:2c:cb:8e:
         b8:bd:24:48:87:d9:27:22:2c:c3:7b:4c:a6:12:e1:c9:8b:14:
         0a:9f:40:28:69:fa:18:c9:90:6f:94:57:f7:cd:0b:f9:d6:5b:
         9c:11:5b:1c:d5:f7:a5:98:9b:aa:e2:dd:29:fc:df:e9:42:f1:
         01:06:d1:ba:9e:e0:46:09:3d:64:66:74:b3:ea:02:d9:90:ba:
         9a:c3:a6:22:6e:66:17:54:6f:12:3e:15:8a:c0:fe:35:a2:5a:
         28:2c:fd:f0:b8:29:6f:7f:19:7e:9a:4f:81:d3:f7:72:fb:cd:
         3c:44:6c:31:e5:3c:b8:9e:a2:1e:d1:37:8b:64:3d:98:10:11:
         54:40:98:dd:d4:e0:33:6b:09:88:39:0f:1a:a1:66:23:40:0c:
         10:40:25:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 00:55:09 2024 by rpki-client on console-fra.rpki-client.org