Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DF9F0E9D70A2EBC37F949FBDB3E7097997581127.cer
File:                     DF9F0E9D70A2EBC37F949FBDB3E7097997581127.cer (raw, json)
Hash identifier:          ur+hqBlpRn3bIXYgTX1RTKahAf/6ithGJh7SA+uctBI=
Subject key identifier:   DF:9F:0E:9D:70:A2:EB:C3:7F:94:9F:BD:B3:E7:09:79:97:58:11:27
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       182929C19021BDBF73100B9EAFF03567A4642FEE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/1/DF9F0E9D70A2EBC37F949FBDB3E7097997581127.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Apr 2024 03:05:47 +0000
Certificate not after:    Fri 04 Apr 2025 03:10:47 +0000
Subordinate resources:    AS: 266545
                          IP: 45.6.192.0/22
                          IP: 2804:3da8::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 01:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:29:29:c1:90:21:bd:bf:73:10:0b:9e:af:f0:35:67:a4:64:2f:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  5 03:05:47 2024 GMT
            Not After : Apr  4 03:10:47 2025 GMT
        Subject: CN=DF9F0E9D70A2EBC37F949FBDB3E7097997581127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9c:10:ca:3e:7a:7d:be:ae:d8:6d:91:72:a7:
                    7d:ba:88:ac:ed:00:e4:3c:ab:cf:69:a9:86:1c:3f:
                    43:c4:2a:5a:48:74:62:b9:ac:39:a6:dc:8a:b1:b0:
                    64:6e:7f:fa:5f:3a:3a:56:dc:bd:86:3e:e2:ca:ad:
                    ad:34:59:a9:44:68:21:11:a4:4e:bc:8d:16:16:40:
                    32:2a:13:a7:45:e0:47:38:5e:6b:30:e9:ff:c0:66:
                    37:d7:5a:f5:64:d8:ca:41:94:23:b2:63:5b:71:90:
                    c9:75:db:d8:c0:56:26:37:a9:c4:3b:f4:da:d0:94:
                    89:a8:e5:32:b5:fc:22:50:aa:f1:92:39:d9:f6:a8:
                    24:1d:d0:d9:23:68:fc:ae:98:fa:0e:18:62:79:f4:
                    43:ac:ac:76:89:11:87:7e:a0:ec:ce:a2:85:98:39:
                    f1:30:b2:57:91:8c:2c:34:d5:b1:07:66:54:3f:9e:
                    46:fe:4f:9d:ec:47:0c:a2:dc:ae:7a:c1:90:58:6a:
                    59:61:7e:a9:90:db:12:a0:8a:db:12:6f:42:7b:68:
                    bf:72:58:0d:73:9b:1e:5b:72:41:38:c3:ff:b5:cf:
                    1d:e3:69:d1:a5:c9:59:14:82:ef:fe:9f:b8:e4:c0:
                    a5:7f:02:b5:48:ad:00:3e:48:34:1c:9f:00:d5:bc:
                    57:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DF:9F:0E:9D:70:A2:EB:C3:7F:94:9F:BD:B3:E7:09:79:97:58:11:27
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/1/DF9F0E9D70A2EBC37F949FBDB3E7097997581127.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.192.0/22
                IPv6:
                  2804:3da8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266545

    Signature Algorithm: sha256WithRSAEncryption
         c0:35:48:d0:f7:a2:8b:5b:48:76:af:f7:a0:8f:7f:2c:18:f2:
         13:88:18:40:b1:72:1e:9a:29:85:0b:75:27:21:5f:cc:1e:82:
         00:a2:48:57:67:f0:61:9c:7e:44:cb:32:0b:64:6b:9e:57:5c:
         b6:da:12:ed:a4:d7:d8:95:97:a7:78:43:66:8b:ff:dc:07:df:
         a7:dc:63:9f:dd:31:49:27:12:bf:6c:78:9a:eb:c0:47:04:75:
         d0:2c:b6:f5:a8:12:d2:c0:63:df:ec:10:3b:52:01:98:fd:0e:
         cc:5b:30:e7:91:ac:9d:f9:9b:b8:3b:32:96:bd:56:a4:91:93:
         35:7c:f4:eb:75:b1:90:eb:74:15:9f:49:5f:97:ad:8a:ff:f4:
         e6:44:03:cc:1f:40:70:51:e6:23:9f:fa:ef:52:7e:42:ad:39:
         41:67:bf:82:9b:1b:e4:e4:f3:63:dd:4d:31:84:c0:80:39:f8:
         5c:07:e2:aa:ab:4d:69:01:16:a2:f2:4d:fb:6e:b7:d9:fd:b6:
         f6:3b:8d:d4:d8:66:a7:c4:1d:7f:f2:b6:33:0a:8e:f5:a7:0e:
         19:c0:ec:3f:5b:c5:b1:b2:1e:9d:28:f1:ad:85:b7:a2:7c:b1:
         07:f2:1b:23:67:f8:3a:14:69:a0:63:30:b4:10:3c:db:4a:22:
         d1:0c:b0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 00:55:11 2024 by rpki-client on console-fra.rpki-client.org