Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DCFCD6DA30876D8BFC651FD630336A5E3933886A.cer
File:                     DCFCD6DA30876D8BFC651FD630336A5E3933886A.cer (raw, json)
Hash identifier:          zmKoQ+zAk2OuUrHxs1+j2TSuAW6pqBQaoumr/lcRwxk=
Subject key identifier:   DC:FC:D6:DA:30:87:6D:8B:FC:65:1F:D6:30:33:6A:5E:39:33:88:6A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4B782F823829AD45341D5C6012AB903A27C4316E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6V2xnPURfXb8rf8fC5jyxrbMU9Td2h4tWenWGdAeWdhf/0/DCFCD6DA30876D8BFC651FD630336A5E3933886A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6V2xnPURfXb8rf8fC5jyxrbMU9Td2h4tWenWGdAeWdhf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 30 Oct 2024 01:02:17 +0000
Certificate not after:    Wed 29 Oct 2025 01:07:17 +0000
Subordinate resources:    AS: 270548
                          IP: 190.115.68.0/22
                          IP: 2804:6dac::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:78:2f:82:38:29:ad:45:34:1d:5c:60:12:ab:90:3a:27:c4:31:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 30 01:02:17 2024 GMT
            Not After : Oct 29 01:07:17 2025 GMT
        Subject: CN=DCFCD6DA30876D8BFC651FD630336A5E3933886A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:0c:54:3b:79:b3:d8:f9:b9:c2:0b:c9:bd:2d:
                    ce:d8:69:67:a5:17:44:12:f3:84:6d:c5:92:b8:41:
                    d1:a7:2d:ad:3d:2e:57:2e:66:9a:3a:84:ba:d1:b6:
                    4f:ae:bb:a0:d3:72:1a:46:ee:6d:78:ab:51:df:21:
                    3c:23:5e:52:c9:9c:7b:12:a4:3c:ec:d7:a2:69:71:
                    05:1b:93:66:23:04:44:29:4f:de:a8:45:ef:f6:ae:
                    48:88:73:ff:1b:fd:b3:c6:3d:e8:58:27:9b:0c:9b:
                    8e:bc:54:1b:5f:b7:39:3d:ce:46:a4:9d:0b:c3:b7:
                    c5:3c:cc:17:a0:2e:7a:5b:c3:6b:00:de:1f:dc:21:
                    ee:ba:0b:5b:de:6d:26:38:24:9f:6e:1c:5e:6b:57:
                    ff:d9:70:12:ff:34:6d:2f:d8:cd:41:e3:3d:df:4f:
                    03:97:8c:d6:f5:c6:0a:57:84:ed:09:cf:c0:ed:10:
                    b1:fb:f5:23:fa:77:0e:d6:98:58:6c:59:be:90:c9:
                    c8:f1:4e:81:eb:bc:a3:d6:1b:17:fd:de:5b:e5:27:
                    d7:4c:64:e7:f5:47:3a:11:5f:55:2a:d2:41:a3:95:
                    31:b8:51:5a:1c:32:cc:a6:f5:2b:28:a5:c2:2b:12:
                    1e:62:3c:e3:45:b0:33:51:9e:f1:95:2c:41:8b:59:
                    7c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DC:FC:D6:DA:30:87:6D:8B:FC:65:1F:D6:30:33:6A:5E:39:33:88:6A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6V2xnPURfXb8rf8fC5jyxrbMU9Td2h4tWenWGdAeWdhf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6V2xnPURfXb8rf8fC5jyxrbMU9Td2h4tWenWGdAeWdhf/0/DCFCD6DA30876D8BFC651FD630336A5E3933886A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.68.0/22
                IPv6:
                  2804:6dac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270548

    Signature Algorithm: sha256WithRSAEncryption
         ca:b8:8b:c5:32:3a:79:ff:0c:ad:bf:ce:cd:66:9d:7b:95:07:
         13:5d:1b:8f:0f:ea:85:44:29:d4:19:88:59:66:89:df:43:c8:
         10:ea:52:fe:bf:0f:4f:88:fa:7d:eb:ed:a6:7a:5c:80:01:60:
         5f:ea:23:c9:7f:7e:21:bd:31:32:75:75:56:a3:9b:43:59:3b:
         86:78:26:d9:76:d1:75:82:e2:ab:4d:e2:7d:98:4e:d9:a8:08:
         ff:32:03:eb:f8:36:26:c5:bf:56:6e:d4:19:99:3a:f2:44:5e:
         e8:88:13:21:f9:85:84:6a:e0:6c:66:3a:ac:55:ad:18:a1:47:
         1c:5a:fa:f6:a8:6b:ae:c8:71:b5:86:f1:e4:79:87:69:10:7c:
         61:ea:f3:4c:ed:52:5b:fe:c7:6f:cf:95:84:ec:85:a3:b6:f5:
         e5:c1:92:37:31:46:cb:d2:04:48:10:ed:b1:1e:5d:bb:63:39:
         13:fe:8d:79:c2:9e:28:3b:5e:32:5d:ba:5c:ec:6d:75:93:f0:
         d2:be:2f:3a:30:49:30:86:b4:3d:43:67:cb:e2:2e:43:70:68:
         77:64:dc:0d:f0:24:8f:9b:ee:42:83:6f:5f:f9:31:8e:74:d2:
         dd:fc:91:6a:39:18:6a:90:c7:f9:8b:37:20:5f:8f:db:89:df:
         a4:f1:b5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:03:36 2024 by rpki-client on console-fra.rpki-client.org