Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.cer
File:                     CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.cer (raw, json)
Hash identifier:          fXIpHtgCQcp8Kf0RL4FYCnlg5sdQNf+1CxJZdO5BcAo=
Subject key identifier:   CB:59:E2:41:FF:AA:C5:9F:A0:BA:1D:08:D9:8F:B8:1A:87:C5:D1:7E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       50808E7BD88EA9FB25E14D333F29C24936B0734F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:27:42 +0000
Certificate not after:    Wed 02 Apr 2025 18:32:42 +0000
Subordinate resources:    AS: 263265
                          IP: 179.107.8.0/21
                          IP: 2804:1610::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:80:8e:7b:d8:8e:a9:fb:25:e1:4d:33:3f:29:c2:49:36:b0:73:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:27:42 2024 GMT
            Not After : Apr  2 18:32:42 2025 GMT
        Subject: CN=CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e6:04:2f:b3:a2:fd:c6:3e:80:7b:28:7b:00:
                    c6:7a:dd:c7:da:f8:69:70:51:04:1f:8b:09:bf:9a:
                    09:52:c0:8d:c3:cd:e4:60:65:85:db:af:7f:ac:6e:
                    f7:bb:ba:42:80:c1:cf:3c:d9:54:b8:22:a8:46:76:
                    85:8b:7a:84:1e:be:4c:ed:c3:27:bd:e8:ed:98:98:
                    b9:21:96:84:cb:da:c2:6e:7e:6e:9c:25:9e:8f:37:
                    0a:26:b3:d7:73:81:3d:c8:07:c5:da:c0:d4:aa:6e:
                    bf:81:51:ea:d4:72:55:ae:ec:1f:5a:86:4c:ad:50:
                    b8:6d:0e:71:1f:58:ba:c8:49:8c:06:f1:e3:9d:be:
                    b0:e6:ee:26:b4:6f:9e:01:b6:86:20:b5:7c:9b:35:
                    33:0d:6b:aa:cf:32:41:f3:93:e6:90:36:19:a9:af:
                    d4:24:bd:ef:33:a1:c6:be:3a:fc:5c:72:d9:9a:df:
                    be:54:52:5e:5e:e6:6a:05:c8:dc:42:59:0c:2b:ee:
                    57:40:88:19:58:99:94:63:32:a5:67:be:93:8b:59:
                    77:56:6a:1a:0c:29:94:36:7c:24:45:dd:c8:b8:98:
                    f8:7d:9b:f1:15:bd:1a:6c:92:6c:b7:b3:f6:a1:2a:
                    32:60:4c:8a:82:22:27:b2:6f:b0:ea:9f:88:b9:79:
                    5e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CB:59:E2:41:FF:AA:C5:9F:A0:BA:1D:08:D9:8F:B8:1A:87:C5:D1:7E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.8.0/21
                IPv6:
                  2804:1610::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263265

    Signature Algorithm: sha256WithRSAEncryption
         90:b9:3f:04:15:f9:e9:95:06:3e:be:37:02:76:4a:3f:03:cf:
         f5:c2:82:f3:cf:f0:d5:18:f1:64:4c:a4:91:86:96:25:69:ac:
         46:a2:b6:15:37:71:5a:2a:5a:f0:9b:d0:d6:fa:37:4f:ee:46:
         eb:2f:f9:c2:4e:7d:60:0d:89:fc:c9:27:21:cc:95:2e:f2:8f:
         30:c8:3c:59:bc:95:e5:eb:ca:11:a4:2e:f4:f4:da:fe:63:66:
         5f:74:52:5c:f0:7e:92:20:b6:7f:1c:26:a7:ba:7b:4c:da:8f:
         e3:2f:c9:2e:fe:47:ba:1e:5c:23:aa:60:1e:5d:ae:1a:15:ef:
         c8:22:f6:ec:f4:0b:1f:b0:cf:db:ac:45:6d:60:7f:de:a9:c2:
         e2:60:61:31:8b:40:34:54:fa:9e:35:01:d8:09:2d:94:8f:cc:
         fc:f5:b8:69:13:84:4d:5d:60:07:29:9f:4a:1b:01:eb:ca:c2:
         d2:74:1c:97:8f:23:bb:bc:82:df:78:7a:3d:f9:f9:cc:c1:ef:
         17:13:cd:f8:6d:cf:2d:28:7b:be:0f:cf:54:cc:9d:3b:8f:04:
         b2:4f:c6:12:75:b2:10:86:65:84:d0:26:58:07:4e:51:5d:ca:
         c9:d8:d7:f4:de:e8:a6:2e:c9:18:07:73:bb:4a:4d:8a:fc:94:
         ed:b6:c0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:55 2024 by rpki-client on console-fra.rpki-client.org