Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C7E332D167CC9D7A81FF5F5A7143D46B80BD148F.cer
File:                     C7E332D167CC9D7A81FF5F5A7143D46B80BD148F.cer (raw, json)
Hash identifier:          fhn+64NKDoXUQ1fiWudrU7vGMS2WaXwSHk6sowA5BFw=
Subject key identifier:   C7:E3:32:D1:67:CC:9D:7A:81:FF:5F:5A:71:43:D4:6B:80:BD:14:8F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       181A0C1A65DAB9F227208AA3218177EA723E6B65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HRHwtzbSi2K4paUBdnopgi7iuKpdZcNHLfRqfbDtDaBZ/0/C7E332D167CC9D7A81FF5F5A7143D46B80BD148F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HRHwtzbSi2K4paUBdnopgi7iuKpdZcNHLfRqfbDtDaBZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 11 Jul 2024 21:49:08 +0000
Certificate not after:    Thu 10 Jul 2025 21:54:08 +0000
Subordinate resources:    AS: 267117
                          IP: 45.228.196.0/22
                          IP: 2804:4860::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:1a:0c:1a:65:da:b9:f2:27:20:8a:a3:21:81:77:ea:72:3e:6b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 11 21:49:08 2024 GMT
            Not After : Jul 10 21:54:08 2025 GMT
        Subject: CN=C7E332D167CC9D7A81FF5F5A7143D46B80BD148F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:4b:68:9a:3c:2f:25:87:b0:4d:82:3f:d3:fc:
                    c9:f6:af:67:b6:3f:33:a9:55:8b:1b:83:bb:01:2b:
                    0f:6e:28:c9:f4:cb:45:2b:ba:74:dc:60:33:4d:40:
                    51:e8:20:bc:69:ae:b3:ea:bc:9b:1d:b1:f2:df:8a:
                    26:70:51:37:70:af:e7:14:9d:aa:de:7b:05:e4:47:
                    b4:43:e1:b9:c2:3a:1e:64:cf:86:02:83:84:68:6b:
                    49:e8:51:7a:3b:9a:22:5f:04:e3:73:65:14:a1:e9:
                    43:35:86:2a:4c:e7:8b:dd:6b:83:b8:a8:8a:4e:82:
                    11:f8:57:b5:51:95:83:88:a5:37:27:66:d1:de:93:
                    fc:d6:28:99:39:f9:a2:bf:c5:75:96:0c:e8:84:b2:
                    cf:1e:bd:eb:2d:f6:87:81:13:e4:f7:8e:4c:6c:6d:
                    ce:3c:0f:76:e1:c6:8f:87:e3:cf:db:32:49:3c:a7:
                    a4:f3:e6:bf:c2:84:44:e2:56:77:75:fc:de:c6:22:
                    46:82:de:ea:ea:6f:a7:a0:ed:f9:aa:3b:c1:8c:01:
                    38:eb:02:72:96:1a:fd:f0:ee:32:a2:e7:90:ed:a0:
                    15:6a:3e:3c:c2:20:62:dc:39:ed:c1:86:37:8e:85:
                    70:b0:60:c4:8e:aa:dd:1f:af:48:22:57:6a:9e:29:
                    9a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C7:E3:32:D1:67:CC:9D:7A:81:FF:5F:5A:71:43:D4:6B:80:BD:14:8F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HRHwtzbSi2K4paUBdnopgi7iuKpdZcNHLfRqfbDtDaBZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HRHwtzbSi2K4paUBdnopgi7iuKpdZcNHLfRqfbDtDaBZ/0/C7E332D167CC9D7A81FF5F5A7143D46B80BD148F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.196.0/22
                IPv6:
                  2804:4860::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267117

    Signature Algorithm: sha256WithRSAEncryption
         cb:8e:73:40:80:02:6a:4d:42:92:48:b2:9b:a6:64:a5:a7:b7:
         a5:e1:3b:62:4b:55:bc:80:9a:f6:91:b0:b5:6c:cc:87:14:c8:
         78:95:42:03:9e:c2:2c:e6:3d:42:69:bc:27:0a:43:ae:47:5c:
         fb:d5:a1:85:8a:e4:32:3d:c8:7f:c2:02:ec:9e:9d:b0:2e:bf:
         5a:a8:52:c4:fe:6b:80:9a:27:03:c0:36:de:e3:ae:de:64:4c:
         01:79:01:da:b6:f8:e6:4d:8f:c7:83:3c:c5:51:58:c8:51:fd:
         1a:2d:28:b4:d9:01:f7:23:d6:54:71:6b:91:df:ba:7a:4e:28:
         fe:8d:d7:63:8f:67:98:63:68:7f:91:56:8e:7c:f6:1d:ed:5e:
         79:95:51:14:42:a9:db:73:af:65:6c:4f:5f:9c:f3:ad:4e:02:
         9e:64:4f:71:5c:a8:42:6e:ed:9c:02:0a:54:6c:d7:01:59:db:
         00:44:46:cb:f0:1b:38:e1:c8:95:c8:d4:5f:e0:00:92:22:6c:
         73:b9:91:51:5d:43:52:c8:ef:e6:e3:5e:e2:2f:0d:ce:0d:aa:
         2d:31:90:ad:76:11:89:ed:51:5f:91:be:e3:1b:c2:07:ae:3c:
         06:f2:cb:e8:be:d5:d8:4b:55:2a:0d:75:93:68:ac:29:42:bc:
         a6:3d:03:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:22:00 2024 by rpki-client on console-fra.rpki-client.org