Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.cer
File:                     DF52CC90FCD2C3832840643A9E557DE85B0F59D3.cer (raw, json)
Hash identifier:          qANPqAGBXcFgz1msmhXgbfjwHdEaRGA8K0gCfmXYmNY=
Subject key identifier:   DF:52:CC:90:FC:D2:C3:83:28:40:64:3A:9E:55:7D:E8:5B:0F:59:D3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       650C601B73FF7BD98413AA277466B0BCC7DFF033
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 14:31:37 +0000
Certificate not after:    Thu 03 Apr 2025 14:36:37 +0000
Subordinate resources:    AS: 269197
                          IP: 45.181.196.0/22
                          IP: 2804:60e0::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:0c:60:1b:73:ff:7b:d9:84:13:aa:27:74:66:b0:bc:c7:df:f0:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 14:31:37 2024 GMT
            Not After : Apr  3 14:36:37 2025 GMT
        Subject: CN=DF52CC90FCD2C3832840643A9E557DE85B0F59D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:84:cc:d5:c7:63:d6:f7:e0:ad:61:70:bf:ef:
                    e6:2d:df:17:42:a0:9c:e2:c6:78:fc:41:9a:d9:09:
                    08:17:8e:06:e6:95:e2:78:78:6c:3a:06:b6:6a:67:
                    22:66:40:cc:10:79:3d:66:9c:89:4d:4c:ce:7f:95:
                    4c:1c:5e:98:60:f3:53:26:29:ec:87:ba:b4:db:6a:
                    3f:ee:6c:7f:08:30:4b:c8:14:5d:82:89:c6:4a:55:
                    ad:11:03:c9:c5:ad:72:cb:a2:ee:3d:c4:3b:8c:e7:
                    dd:3b:e6:62:f0:eb:32:a6:09:35:0b:66:e2:d6:2d:
                    ad:67:c3:70:b0:5a:c8:e1:dc:02:5f:7f:11:cd:25:
                    a7:2e:be:c8:cf:c7:3a:3c:65:24:57:c4:d0:f2:1f:
                    40:fe:5e:6f:76:07:6c:08:6a:66:90:5e:12:b4:7f:
                    e7:88:85:1d:15:76:e0:f1:91:97:8c:60:39:20:b8:
                    c1:18:44:7b:35:bc:f7:c8:ac:9b:fe:19:00:c4:42:
                    7e:9c:6a:5c:8d:b2:92:48:3e:5d:48:fd:46:c4:63:
                    72:e6:71:9f:bc:a7:48:bb:c7:b8:51:49:f5:47:3e:
                    38:eb:b1:a4:50:44:ea:8f:7d:6d:76:37:b2:f7:d8:
                    43:c5:86:30:ec:c4:49:a3:80:70:a6:19:6e:2a:20:
                    7a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DF:52:CC:90:FC:D2:C3:83:28:40:64:3A:9E:55:7D:E8:5B:0F:59:D3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.196.0/22
                IPv6:
                  2804:60e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269197

    Signature Algorithm: sha256WithRSAEncryption
         a3:58:fd:8e:96:c3:f2:9d:84:78:4d:0d:8d:bf:e4:58:f6:14:
         fe:a4:83:a3:07:9a:3a:02:92:a7:cc:5b:40:38:f1:d4:d0:1c:
         27:d4:55:7a:12:f9:fb:df:5e:56:76:60:c8:08:2f:c4:fc:73:
         3d:eb:41:cd:bf:d5:17:08:10:cf:8e:2f:56:3e:e6:bf:70:6a:
         c6:1c:1b:9e:84:20:85:6e:fd:60:37:95:4e:22:31:48:88:d9:
         eb:d4:05:26:dc:a7:09:8c:db:72:cf:49:20:b5:ca:cc:18:77:
         e8:14:3a:e8:69:ca:25:66:cc:f8:f3:d2:1e:93:3a:ee:1c:d4:
         65:b2:23:81:40:aa:42:5b:fb:07:64:09:84:db:c5:f4:24:6a:
         1c:53:d0:b4:b9:37:ef:58:4a:d1:08:f5:b9:d0:d1:11:f8:f5:
         a2:57:29:e2:22:0e:b6:93:98:9d:66:25:b1:67:ce:ce:e8:3d:
         64:b7:49:69:72:8d:e0:62:66:e1:d9:01:84:04:ab:e7:9d:c6:
         1a:fe:04:69:27:85:ed:84:1c:88:7d:2d:c7:be:ce:52:6a:0e:
         51:2a:5a:10:f7:8a:0f:a2:d3:70:c0:77:51:04:a7:b3:0f:90:
         38:49:15:27:b5:16:91:18:88:a7:1a:4a:d3:3c:67:43:80:af:
         cd:27:2b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:05 2024 by rpki-client on console-fra.rpki-client.org