Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DF1195DA2AA3835ACEB6C0314248212FD90A0F83.cer
File:                     DF1195DA2AA3835ACEB6C0314248212FD90A0F83.cer (raw, json)
Hash identifier:          Yq07L5HmD8sICEBaxaMP92vAdMBKV56H1w+0c+aaJ+8=
Subject key identifier:   DF:11:95:DA:2A:A3:83:5A:CE:B6:C0:31:42:48:21:2F:D9:0A:0F:83
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       119DC2F947ADC77AAD08316BA683B87B988F10E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/2/DF1195DA2AA3835ACEB6C0314248212FD90A0F83.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 01:35:40 +0000
Certificate not after:    Thu 03 Apr 2025 01:40:40 +0000
Subordinate resources:    AS: 61823
                          IP: 201.222.24.0/22
                          IP: 2804:19dc::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:9d:c2:f9:47:ad:c7:7a:ad:08:31:6b:a6:83:b8:7b:98:8f:10:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 01:35:40 2024 GMT
            Not After : Apr  3 01:40:40 2025 GMT
        Subject: CN=DF1195DA2AA3835ACEB6C0314248212FD90A0F83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4e:07:53:b7:01:8d:49:f7:ad:ed:d4:0d:46:
                    7c:a8:e4:65:0d:83:da:fa:3a:21:5c:42:c9:92:1f:
                    41:0d:8d:79:cf:d3:8c:26:44:82:fb:bd:34:76:7c:
                    f2:0e:f0:73:7c:20:2c:73:c2:81:10:38:11:56:6b:
                    b9:60:50:5a:7f:cd:d9:aa:a8:39:6f:54:36:1d:5c:
                    88:e5:25:8d:2f:13:1c:f5:f6:57:a4:92:ea:81:0c:
                    b4:b8:a0:79:53:06:4b:65:41:80:ff:7e:1b:26:07:
                    6a:ad:a9:29:9c:51:1a:a2:65:8c:5d:fb:93:89:85:
                    eb:f9:56:24:14:5a:0d:d7:8b:e7:c3:45:b9:83:45:
                    dc:1a:84:17:7b:3f:ac:cc:7b:8f:a0:f9:28:3b:ce:
                    c8:89:48:f0:12:31:2a:de:70:14:2c:e0:5d:05:8a:
                    0c:da:5f:cb:f8:0f:67:61:34:8f:ba:70:3d:e1:fd:
                    f6:f9:eb:43:5e:98:85:f3:5d:4b:7f:39:22:92:00:
                    96:62:f6:92:54:60:f1:71:59:9e:e0:90:4f:7a:03:
                    3f:de:54:96:1a:b3:d4:4f:2b:7b:40:f1:26:41:19:
                    3d:94:39:ee:f8:ef:8c:b1:f3:31:1e:b9:f0:32:f9:
                    23:8b:fd:45:4b:03:4b:d7:9f:41:6b:a4:e8:9e:3a:
                    f7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DF:11:95:DA:2A:A3:83:5A:CE:B6:C0:31:42:48:21:2F:D9:0A:0F:83
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/2/DF1195DA2AA3835ACEB6C0314248212FD90A0F83.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.222.24.0/22
                IPv6:
                  2804:19dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61823

    Signature Algorithm: sha256WithRSAEncryption
         25:b0:50:b7:44:2e:7e:ad:54:b4:4c:ee:45:99:b9:5a:68:75:
         93:2f:71:da:ad:39:c4:5c:e2:76:fe:a8:0b:c2:0d:44:ae:79:
         e3:4c:00:2f:eb:d7:f4:86:b7:ac:d3:58:f7:d8:42:fa:d3:93:
         16:4f:cf:43:75:41:89:be:1a:3f:4a:04:22:ac:51:2e:32:74:
         c8:4c:87:99:7c:45:28:12:ec:c4:01:2a:d8:43:dd:ea:5a:be:
         59:5f:fe:79:f0:bb:ed:b3:38:07:12:9d:23:79:c7:b5:f6:91:
         a1:28:aa:eb:f7:33:6a:df:1c:4b:7d:7d:1a:a1:30:74:19:19:
         66:61:db:4f:f5:1b:51:c7:4d:d8:66:b5:9e:f5:8f:7e:d6:15:
         5e:af:8c:26:55:de:84:59:c1:91:27:2b:c5:37:0f:59:53:b8:
         5c:20:ba:7a:ae:ff:29:df:90:5f:10:3f:db:e7:12:19:fd:b6:
         12:69:02:3b:0b:93:ab:19:ef:77:4c:60:1d:07:a0:f9:a2:f7:
         b6:6a:4e:d1:c4:12:1c:4b:54:bd:1c:18:54:64:8c:b2:1f:7a:
         e8:d7:8d:cb:3e:f9:3f:14:8a:db:e7:87:0b:3f:18:d7:74:f3:
         ec:da:a6:24:1a:92:fa:a6:44:26:3b:d7:76:76:fa:57:14:cf:
         15:bc:e6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:31:00 2024 by rpki-client on console-fra.rpki-client.org