Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D17A39CEAB2C6C76438EFCB39808BBC31EEF4750.cer
File:                     D17A39CEAB2C6C76438EFCB39808BBC31EEF4750.cer (raw, json)
Hash identifier:          IEsdiXgy0kJj/RUfmX7IWM9GlnYJcY9WdOrejADaLcs=
Subject key identifier:   D1:7A:39:CE:AB:2C:6C:76:43:8E:FC:B3:98:08:BB:C3:1E:EF:47:50
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       075ADA2014247510695C5018B5EB381462F5E221
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6yV4iJKDzNTvkwTMm9CKaY646wLN2NbtGt7boUUxvV62/1/D17A39CEAB2C6C76438EFCB39808BBC31EEF4750.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6yV4iJKDzNTvkwTMm9CKaY646wLN2NbtGt7boUUxvV62/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 05:51:29 +0000
Certificate not after:    Thu 03 Apr 2025 05:56:29 +0000
Subordinate resources:    AS: 268679
                          IP: 45.165.68.0/22
                          IP: 2804:54f0::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 04:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:5a:da:20:14:24:75:10:69:5c:50:18:b5:eb:38:14:62:f5:e2:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 05:51:29 2024 GMT
            Not After : Apr  3 05:56:29 2025 GMT
        Subject: CN=D17A39CEAB2C6C76438EFCB39808BBC31EEF4750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4e:01:6d:83:ff:17:c2:dc:77:c9:2e:d3:01:
                    8f:4b:5e:af:4a:fd:4d:40:52:90:45:1a:76:ea:b3:
                    48:88:ad:bb:a4:8a:b2:e6:64:64:d1:6f:09:c6:3e:
                    c2:9e:71:8d:6c:55:8d:7a:cb:81:d2:3e:29:bc:cb:
                    27:f3:59:31:76:fe:18:0a:4f:52:1e:51:dc:d6:be:
                    f4:87:d5:4d:c6:00:02:01:e2:ce:2f:f9:6e:33:3a:
                    4f:20:c0:9c:47:a9:05:57:90:e4:98:f5:62:db:07:
                    a8:3a:a2:ee:b3:77:db:45:79:46:18:15:85:02:8f:
                    b5:04:06:79:43:31:66:38:60:23:fe:b3:09:83:37:
                    22:c9:2f:81:32:61:6b:b0:8a:72:32:26:23:16:3c:
                    f9:79:b9:b4:18:29:0a:6a:f9:fa:2d:fd:07:fe:61:
                    df:eb:29:bd:13:b6:ed:73:ec:f7:78:5d:67:0a:14:
                    51:8f:47:1a:52:f5:2e:f4:86:82:8a:37:6a:05:d7:
                    5f:85:82:74:6a:66:e6:66:ac:33:54:3e:79:8b:fa:
                    f0:d8:b9:e6:88:e3:ac:25:74:bc:a4:31:2b:cc:7e:
                    77:37:ac:f3:a3:5a:f6:f0:07:0f:b5:f7:32:80:31:
                    c9:47:40:c4:c4:16:a0:67:fe:e5:f9:97:33:ad:77:
                    60:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D1:7A:39:CE:AB:2C:6C:76:43:8E:FC:B3:98:08:BB:C3:1E:EF:47:50
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6yV4iJKDzNTvkwTMm9CKaY646wLN2NbtGt7boUUxvV62/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6yV4iJKDzNTvkwTMm9CKaY646wLN2NbtGt7boUUxvV62/1/D17A39CEAB2C6C76438EFCB39808BBC31EEF4750.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.68.0/22
                IPv6:
                  2804:54f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268679

    Signature Algorithm: sha256WithRSAEncryption
         32:73:b4:aa:5c:ff:e4:4e:75:ee:35:aa:23:fc:29:79:c2:5d:
         49:6c:97:3a:f6:f0:56:4a:77:1a:7c:7f:30:10:39:e0:a8:06:
         90:42:1f:78:81:67:1e:98:42:24:dc:c0:8c:af:5c:86:cc:7a:
         31:ff:a3:db:5f:9f:d5:42:cd:fa:b5:87:63:b0:b1:30:0b:cb:
         a1:6e:a9:c0:06:16:71:35:48:9c:3e:83:01:ce:ad:00:94:1a:
         86:5e:29:7d:ac:f9:15:f0:92:7b:b8:c9:61:6f:60:d0:a6:58:
         79:22:f4:6e:77:ff:06:0b:3a:bb:82:a5:7f:58:66:b3:8c:5e:
         95:59:67:b8:10:20:54:6a:84:d2:09:d5:5c:65:54:d2:dc:c2:
         18:cd:c8:0a:d9:f1:5a:c6:08:f0:f8:9c:a2:a9:69:b3:d1:c9:
         27:1d:a6:91:e1:a9:d5:57:b2:d4:c3:59:ed:1c:54:ea:95:63:
         10:11:c8:78:3f:5f:a3:9f:53:18:81:eb:16:d6:30:25:87:28:
         ad:a9:f8:93:fb:a7:c5:de:96:da:9a:9f:0c:38:ab:23:6b:41:
         a7:1a:1b:d3:a9:86:4d:7d:dd:4d:84:f1:eb:53:1f:d3:d7:c0:
         e3:11:c9:73:7c:72:8a:ce:f6:74:26:01:88:0f:d9:ef:3c:18:
         72:97:54:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:36:51 2024 by rpki-client on console-ams.rpki-client.org