Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D04A2BA80F368597BB2029B3E31276E45382A900.cer
File:                     D04A2BA80F368597BB2029B3E31276E45382A900.cer (raw, json)
Hash identifier:          wSZta+z5GKeMGhcQQ3ml6N52pKEmmBRpgGPH9yOuhC4=
Subject key identifier:   D0:4A:2B:A8:0F:36:85:97:BB:20:29:B3:E3:12:76:E4:53:82:A9:00
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       589082E07DC0FAA6C0DD9A7BD0028B3D25080642
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/D04A2BA80F368597BB2029B3E31276E45382A900.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 13 May 2024 22:13:13 +0000
Certificate not after:    Mon 12 May 2025 22:18:13 +0000
Subordinate resources:    AS: 263362
                          IP: 191.37.152.0/21
                          IP: 2804:14f8::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:90:82:e0:7d:c0:fa:a6:c0:dd:9a:7b:d0:02:8b:3d:25:08:06:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 13 22:13:13 2024 GMT
            Not After : May 12 22:18:13 2025 GMT
        Subject: CN=D04A2BA80F368597BB2029B3E31276E45382A900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a1:92:15:55:46:b0:17:cd:11:90:29:96:8a:
                    c7:2f:6e:f6:14:28:89:5c:25:ce:d9:ae:30:53:56:
                    e9:08:d9:e7:d0:ab:48:50:d8:23:35:79:d8:68:ae:
                    4e:ee:dd:19:75:2d:81:2d:98:a8:9d:e6:ba:c2:ed:
                    5a:ce:dc:33:ec:3f:15:1d:08:83:84:a3:0d:2e:4e:
                    9d:bf:e8:ed:e9:b2:96:6e:cf:c6:8e:76:8b:6e:5d:
                    41:18:4c:c0:f7:87:60:9e:0d:19:4c:f3:a7:13:9f:
                    9f:12:0b:7e:24:31:62:99:4d:d9:b6:8f:1b:5c:21:
                    bd:71:c7:3b:2c:82:63:41:03:77:c3:44:50:59:39:
                    e9:9d:2f:0c:74:3b:a1:28:a2:12:e8:67:fa:9d:4f:
                    1a:3b:8d:36:c5:3c:2b:e9:d9:1e:95:33:67:a3:dd:
                    73:5c:44:a8:bb:50:d0:e9:95:45:fd:1e:1d:e8:0e:
                    40:7b:bd:e8:ff:ea:8f:9f:6d:fb:fd:75:7c:41:9c:
                    59:b7:f8:eb:7e:29:6b:b5:45:31:6e:3e:c5:6d:b2:
                    4b:9c:f9:c4:b8:2d:6b:38:0e:7f:e3:21:d8:7c:1f:
                    56:0e:df:04:47:03:0e:de:24:f4:fb:79:31:0c:4b:
                    b9:4a:20:ad:67:b8:31:8f:a8:24:fc:34:92:b4:bf:
                    97:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D0:4A:2B:A8:0F:36:85:97:BB:20:29:B3:E3:12:76:E4:53:82:A9:00
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/D04A2BA80F368597BB2029B3E31276E45382A900.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.152.0/21
                IPv6:
                  2804:14f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263362

    Signature Algorithm: sha256WithRSAEncryption
         76:69:19:46:e4:fb:7c:21:6e:b5:56:fe:fb:12:61:20:7b:dd:
         f7:69:99:15:5c:dd:ac:b5:95:8b:e7:f5:04:4a:df:37:92:59:
         bf:4f:3f:dd:fb:57:1e:63:84:2c:9a:60:5e:ac:12:85:61:80:
         ce:de:0a:83:03:47:fc:77:03:9a:5a:94:b3:1f:45:68:73:0c:
         bb:10:f1:ee:5d:da:c0:c7:b2:eb:85:04:15:cd:0e:fa:ee:e7:
         91:8e:22:89:12:76:bf:8d:ec:9d:75:bc:8b:d9:6d:96:18:00:
         ab:19:78:fa:48:45:4f:c2:38:f5:56:0e:0f:d1:1f:34:b3:9f:
         f0:ce:56:b2:13:b8:eb:03:74:9c:76:5f:02:97:2e:06:ab:80:
         16:4d:e4:e4:03:9e:22:ca:55:25:c0:da:8f:a9:f7:15:e3:3a:
         2e:72:86:be:93:0c:1b:7d:58:a9:35:8c:46:18:3d:28:b3:01:
         ac:88:2c:8f:d0:7a:4d:a0:97:9a:48:76:3f:15:b0:70:d8:93:
         17:ce:77:0f:07:d2:64:f1:38:f1:63:9e:34:6b:d7:13:41:74:
         47:2b:35:38:96:44:cb:d1:ab:50:bd:ca:db:e6:97:f1:ba:d2:
         96:e2:21:0a:f6:41:12:b3:5e:95:9c:b9:37:06:cf:c4:8b:07:
         04:5a:6d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:45:30 2024 by rpki-client on console-ams.rpki-client.org