Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DE888425B89835354B62227D843F72DA4DC0E2E4.cer
File:                     DE888425B89835354B62227D843F72DA4DC0E2E4.cer (raw, json)
Hash identifier:          OJpZTEKv059sozLb14Gm+O4ekeUuQkRFcDRfoCn8cio=
Subject key identifier:   DE:88:84:25:B8:98:35:35:4B:62:22:7D:84:3F:72:DA:4D:C0:E2:E4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7247E16B686D4D6D9239BA645155F360F83A790C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/1/DE888425B89835354B62227D843F72DA4DC0E2E4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 07:03:52 +0000
Certificate not after:    Thu 03 Apr 2025 07:08:52 +0000
Subordinate resources:    AS: 263142
                          IP: 177.93.80.0/21
                          IP: 2804:1760::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:47:e1:6b:68:6d:4d:6d:92:39:ba:64:51:55:f3:60:f8:3a:79:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 07:03:52 2024 GMT
            Not After : Apr  3 07:08:52 2025 GMT
        Subject: CN=DE888425B89835354B62227D843F72DA4DC0E2E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:55:83:55:f8:19:b4:90:06:dd:d1:cd:9d:0f:
                    c2:1a:fb:8f:95:a8:1d:34:04:fc:c5:33:25:a3:06:
                    b4:69:47:d7:1f:ce:2f:2c:64:ce:a1:7e:2b:41:aa:
                    a5:8c:f1:74:a3:c8:78:0f:79:2c:05:a2:74:d3:2f:
                    b8:d7:d9:1c:25:d7:48:c5:a9:45:6a:83:4b:cd:b5:
                    16:c5:bd:9c:6f:50:32:47:26:2c:23:7f:b9:51:4f:
                    b8:14:5c:7d:8a:1a:2f:6d:0f:72:b9:67:31:f7:4f:
                    e3:b1:fa:91:d8:b1:a4:b0:ab:43:78:63:76:4c:b2:
                    da:98:76:90:16:c6:4d:ec:92:a0:10:5c:a4:3e:07:
                    ac:7d:fe:a8:dd:ef:3f:a1:2f:5b:6f:ff:14:dc:56:
                    86:3d:9c:da:50:82:c8:c8:ba:41:c3:74:f5:91:a9:
                    eb:37:53:de:5c:68:45:d1:d3:9f:41:3d:32:0d:f8:
                    20:80:eb:b2:e0:db:6f:d8:9d:24:a5:ee:a2:d1:6b:
                    3f:cf:88:b7:56:a7:41:19:f4:95:a8:19:16:7c:c8:
                    df:66:dc:db:4f:d5:d1:e8:e8:1c:a6:56:b1:4b:9b:
                    a3:3d:74:a4:4d:6c:4a:a9:31:76:4d:22:18:d0:73:
                    71:6b:57:56:0a:10:dd:9d:64:24:79:da:8f:ab:ec:
                    70:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DE:88:84:25:B8:98:35:35:4B:62:22:7D:84:3F:72:DA:4D:C0:E2:E4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/1/DE888425B89835354B62227D843F72DA4DC0E2E4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.80.0/21
                IPv6:
                  2804:1760::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263142

    Signature Algorithm: sha256WithRSAEncryption
         11:be:cb:93:95:8d:8b:31:b1:ee:aa:24:d8:8d:57:1f:aa:c6:
         30:af:d6:b6:75:a1:ab:e6:9b:3f:03:53:f5:0d:fc:49:d3:b0:
         3a:3b:e3:02:0f:a7:87:75:db:bb:2d:b1:af:7e:a0:3f:66:14:
         0b:02:ad:9c:07:cc:6f:e1:bc:9b:be:22:27:23:ae:e7:ce:a7:
         61:43:47:ba:e6:5c:44:d1:51:fe:e7:12:23:12:81:5c:1d:05:
         f5:6f:4e:6b:72:79:14:66:f7:18:ff:93:36:d6:86:e7:0c:6a:
         64:4f:a8:d0:c3:55:11:c2:b6:01:00:37:1e:53:bf:5a:e1:07:
         1c:6b:59:2e:e3:de:f5:2b:8f:3f:d0:2e:de:5d:64:47:7c:1a:
         48:f7:96:49:fc:e9:b4:7d:2c:21:a4:39:3c:dc:dc:4e:c2:d6:
         2f:81:12:6f:6d:e0:0c:46:9e:92:6b:73:71:59:3a:23:39:7a:
         1e:68:aa:de:7f:6b:73:7d:6e:d7:80:82:e6:7c:37:86:f7:cb:
         5d:ba:59:8f:a5:8d:c3:93:4b:3b:51:73:e9:46:80:f4:d3:bd:
         a1:8b:91:7f:34:0f:98:31:6e:f6:5b:7a:e0:60:f5:4b:8f:45:
         44:5f:e1:45:ff:72:35:5b:b9:19:54:70:bf:84:39:e7:94:8b:
         1a:73:d9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:05 2024 by rpki-client on console-fra.rpki-client.org