Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.cer
File:                     DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.cer (raw, json)
Hash identifier:          8PRrUH7j1+M8cw2AGnLcY/W8FdL9Wop75S/HFvISp2g=
Subject key identifier:   DE:A4:78:CF:34:A1:1C:20:16:DD:7E:D2:6F:DC:94:21:A6:EE:29:4D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0E8A970165CB05A9FFFBB6AA77353CC41908B0A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 18:00:33 +0000
Certificate not after:    Thu 03 Apr 2025 18:05:33 +0000
Subordinate resources:    AS: 268674
                          IP: 45.165.96.0/22
                          IP: 2804:54dc::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 00:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:8a:97:01:65:cb:05:a9:ff:fb:b6:aa:77:35:3c:c4:19:08:b0:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 18:00:33 2024 GMT
            Not After : Apr  3 18:05:33 2025 GMT
        Subject: CN=DEA478CF34A11C2016DD7ED26FDC9421A6EE294D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9d:b5:16:ad:52:dd:0d:0d:34:3a:4e:99:05:
                    d5:a1:2d:5f:cc:e8:00:ba:7e:8f:2f:3a:33:23:b5:
                    0c:13:f0:88:e7:dd:4d:a8:a6:1b:9c:34:46:fc:27:
                    84:d3:67:8f:98:97:a3:a9:d2:f6:69:b6:32:cd:16:
                    a6:41:9b:f7:b5:3a:6b:5d:3a:90:0b:4f:ef:a2:c7:
                    fb:04:2c:c7:9f:22:f4:fc:fd:42:60:2c:5b:ee:57:
                    1a:35:12:5c:c2:25:89:fe:b6:69:ee:83:8c:f0:3d:
                    76:da:0f:55:f3:46:df:47:ef:ea:9d:26:a0:6a:45:
                    e0:49:b1:d2:a9:f1:38:89:3a:3c:ce:67:b4:a4:57:
                    01:bc:18:6c:e0:09:7d:e0:a5:35:83:fd:14:fa:41:
                    f1:69:44:62:a0:b7:b0:5f:62:da:77:26:f6:06:b5:
                    e3:89:e6:95:53:c5:a8:e8:17:9b:59:da:dd:9b:a3:
                    e1:29:e0:10:c9:c8:28:e7:76:c5:8f:a7:5e:36:92:
                    ee:f3:e3:94:f8:d8:6a:65:85:6e:4b:bb:d0:30:b2:
                    01:ab:1f:67:a3:37:5d:6f:3f:98:98:2a:8b:85:2c:
                    78:7c:3f:3a:fc:09:40:08:27:2e:20:32:d0:7c:f2:
                    8f:64:09:00:04:6b:bf:66:b4:db:d7:d5:55:b4:eb:
                    1c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DE:A4:78:CF:34:A1:1C:20:16:DD:7E:D2:6F:DC:94:21:A6:EE:29:4D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.96.0/22
                IPv6:
                  2804:54dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268674

    Signature Algorithm: sha256WithRSAEncryption
         90:33:8d:1d:3c:ed:5f:51:17:6f:61:e2:e7:4b:87:92:97:b2:
         93:5f:f1:90:44:60:62:61:49:36:36:2f:47:59:e1:3e:42:4c:
         8a:fd:e8:cd:2b:67:c0:40:86:3a:ed:cc:4a:fe:f3:4d:c8:78:
         59:48:11:2b:02:6c:59:0e:45:47:51:5d:39:f2:31:84:75:dc:
         84:6a:ec:8c:fd:e4:46:03:fa:2b:b8:da:57:0c:89:90:a4:55:
         f3:c0:cc:28:84:51:7a:ed:5c:92:8a:e8:db:f7:58:ca:7a:a3:
         da:d0:9e:52:ac:65:6d:44:c0:dc:fe:18:bf:91:b0:ea:59:5d:
         dd:ba:2c:5f:dc:98:5e:7a:fd:f1:e6:7a:fd:0d:db:2a:ce:53:
         b0:36:0c:73:3c:d1:8b:04:d2:82:36:76:10:b0:10:ad:95:ac:
         fc:52:81:65:da:84:81:70:19:0c:05:d6:2b:60:d9:77:c6:07:
         f0:ac:f9:5e:f1:30:7f:6e:e6:58:cc:39:13:0e:db:43:76:3a:
         51:48:fc:fa:99:05:80:e6:b8:34:65:1b:02:6a:70:f1:a9:5b:
         d6:f6:76:9a:8a:f3:1c:b4:ce:88:4b:4f:95:3e:cd:88:13:82:
         5e:b1:0f:71:a8:f0:cc:f1:34:69:ec:dc:d0:77:7d:f1:9e:64:
         47:01:49:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:17:06 2024 by rpki-client on console-fra.rpki-client.org