Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D59C2B03CF0FCD4B0D3005B321204334D08669AF.cer
File:                     D59C2B03CF0FCD4B0D3005B321204334D08669AF.cer (raw, json)
Hash identifier:          tpWXim0iFGnY0+iwAhQMAKK2MbKA/dAQ+MwMfFnVKwc=
Subject key identifier:   D5:9C:2B:03:CF:0F:CD:4B:0D:30:05:B3:21:20:43:34:D0:86:69:AF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1D2A1332E3F404A3B8D31460E6D5286958AE2C92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/D59C2B03CF0FCD4B0D3005B321204334D08669AF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 28 Oct 2024 21:15:33 +0000
Certificate not after:    Mon 27 Oct 2025 21:20:33 +0000
Subordinate resources:    AS: 264230
                          IP: 190.109.88.0/22
                          IP: 2804:2490::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:2a:13:32:e3:f4:04:a3:b8:d3:14:60:e6:d5:28:69:58:ae:2c:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 28 21:15:33 2024 GMT
            Not After : Oct 27 21:20:33 2025 GMT
        Subject: CN=D59C2B03CF0FCD4B0D3005B321204334D08669AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f1:d1:63:31:d2:51:d4:f6:48:ab:1b:5c:94:
                    37:95:87:96:a4:66:6b:7a:26:a9:a5:0d:fa:b7:3f:
                    f8:32:61:bf:56:f8:ca:48:6f:be:20:3e:26:d9:b0:
                    e0:fb:f3:a1:18:33:5a:71:c7:7c:2c:9e:31:e5:d8:
                    e5:2c:9c:b6:b2:a0:f1:8a:38:f9:ee:04:e8:a1:6b:
                    4a:87:12:29:8b:32:d8:23:26:9d:36:ea:a7:77:ea:
                    ca:e2:69:d1:e1:8e:66:b4:70:b9:46:37:57:20:e0:
                    6b:3d:26:be:e1:c7:e4:79:f7:39:11:fc:40:36:d1:
                    56:88:f2:f8:63:75:1d:03:e7:1d:e0:e5:b4:1c:87:
                    df:fe:39:ac:a0:34:36:de:e5:0a:68:45:c0:91:34:
                    c9:1b:61:5b:b9:53:94:fe:ef:74:6e:2b:ca:3f:6f:
                    94:ce:9a:83:65:b2:39:5c:bd:7e:46:2d:43:f5:bb:
                    3d:92:14:fb:71:7a:92:8f:4a:d0:34:59:1d:a8:ac:
                    f2:5a:16:51:18:ec:d0:2d:8a:c0:f2:c9:d0:e7:2d:
                    16:6f:e0:ba:98:8b:e5:a9:82:da:37:c1:28:38:15:
                    b1:e6:8a:54:ad:aa:5b:7e:eb:b2:a4:11:2a:b4:07:
                    c7:f1:86:83:79:c3:61:82:84:af:09:2c:18:a8:62:
                    d8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D5:9C:2B:03:CF:0F:CD:4B:0D:30:05:B3:21:20:43:34:D0:86:69:AF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/D59C2B03CF0FCD4B0D3005B321204334D08669AF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.88.0/22
                IPv6:
                  2804:2490::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264230

    Signature Algorithm: sha256WithRSAEncryption
         7e:01:16:e1:0b:58:fd:17:76:8c:ce:e3:c5:41:72:cd:58:bc:
         34:62:23:12:fc:1c:48:ba:89:e8:ab:8d:95:93:a2:49:cc:a4:
         72:a7:0e:89:a1:ae:73:2a:90:f1:3c:bd:83:4f:15:55:bb:3d:
         18:14:72:6d:29:33:18:bd:92:1c:91:ea:59:5f:df:2f:29:d2:
         73:7f:d6:47:ea:86:d5:69:58:ee:d3:42:d2:61:a8:24:40:55:
         ed:b2:4a:06:83:9a:93:bf:94:2b:e2:0e:c4:d7:b0:63:1b:32:
         8f:ee:6d:9f:97:a9:5a:ce:ed:0e:20:43:f0:50:29:02:3a:29:
         eb:26:a2:e5:4f:1d:d0:b3:76:ef:35:03:fe:fb:24:a5:3d:44:
         ef:5a:7e:68:e0:96:4f:3d:d4:6d:ff:9d:0e:0b:a4:cd:73:0d:
         12:67:f1:d0:62:06:cc:c5:fa:d8:9d:e0:74:b5:c2:24:56:1d:
         94:fb:3d:ef:88:fd:77:75:e7:a8:ff:fb:7f:44:0f:bb:75:1a:
         73:c3:6d:62:99:20:cc:91:8a:90:d4:36:aa:a9:ca:ae:71:5a:
         6f:81:01:89:60:14:68:01:b0:f3:2a:45:f0:6f:13:ee:03:f8:
         81:0d:db:36:98:44:44:11:13:a4:80:10:d0:83:ca:f4:b0:9f:
         50:15:e0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:03:34 2024 by rpki-client on console-fra.rpki-client.org