Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E1470F370CA043FEC72078800782F80E03725DD0.cer
File:                     E1470F370CA043FEC72078800782F80E03725DD0.cer (raw, json)
Hash identifier:          dseAnem2Lwjk5lei01SDOhx3SmYFQ7xMm1+bdBht+pU=
Subject key identifier:   E1:47:0F:37:0C:A0:43:FE:C7:20:78:80:07:82:F8:0E:03:72:5D:D0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       68D41A31EE218A23F1B23936F531C820D2A91A16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/1/E1470F370CA043FEC72078800782F80E03725DD0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 02:56:16 +0000
Certificate not after:    Thu 03 Apr 2025 03:01:16 +0000
Subordinate resources:    AS: 52643
                          IP: 177.128.72.0/21
                          IP: 2804:3f00::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d4:1a:31:ee:21:8a:23:f1:b2:39:36:f5:31:c8:20:d2:a9:1a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 02:56:16 2024 GMT
            Not After : Apr  3 03:01:16 2025 GMT
        Subject: CN=E1470F370CA043FEC72078800782F80E03725DD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0d:17:ca:e9:25:65:6d:ac:35:1c:a8:de:96:
                    e3:54:98:ef:72:a4:9b:df:17:97:8f:7b:d4:df:4a:
                    86:c7:98:00:15:12:c2:48:c3:60:04:cb:2b:49:84:
                    c0:54:5f:1e:b6:88:bc:3e:79:1c:d1:84:61:e1:09:
                    0a:4e:73:9b:d5:d5:65:3e:4b:86:ca:f2:d4:94:6e:
                    ec:52:0c:f1:1a:3e:ce:7c:26:9e:8e:69:32:a4:5c:
                    34:89:2c:72:13:fe:69:65:32:5d:85:96:50:92:f7:
                    84:2a:3a:c0:75:a9:f2:48:86:bf:19:d6:6b:7c:d0:
                    7d:11:14:bd:6f:23:7d:a1:e9:b6:61:db:15:f2:ea:
                    68:d9:6a:33:66:c6:c0:49:3b:4d:d5:ff:ef:cb:99:
                    3c:c8:c0:ae:55:9c:da:74:68:7b:9e:2b:cf:25:ba:
                    16:df:01:08:81:df:d3:e7:9b:61:2a:ce:1b:66:55:
                    55:0d:d1:ea:2b:64:e4:2a:6b:97:51:fc:d2:af:2f:
                    2a:c4:e2:b0:ec:78:a4:60:7e:a1:56:ad:c2:d7:fe:
                    94:51:e1:11:01:d9:b6:69:73:cd:b4:84:6a:09:d6:
                    82:f4:18:f3:ce:b3:23:8d:02:65:b8:2e:24:45:0b:
                    c1:ad:73:e5:3b:ea:e4:b5:17:b2:ec:5c:d8:13:1d:
                    f3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E1:47:0F:37:0C:A0:43:FE:C7:20:78:80:07:82:F8:0E:03:72:5D:D0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/1/E1470F370CA043FEC72078800782F80E03725DD0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.72.0/21
                IPv6:
                  2804:3f00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52643

    Signature Algorithm: sha256WithRSAEncryption
         b4:ed:2d:81:b0:a2:03:e2:b3:63:7a:50:a4:d8:48:8f:47:0e:
         33:f2:04:a1:de:5e:fe:7c:ae:31:94:7e:9d:61:90:aa:3c:c3:
         eb:ed:7c:c2:cf:86:cc:89:4a:93:9a:5c:fc:38:ea:06:40:0c:
         c3:8f:f0:e1:1f:91:82:e0:55:10:f7:b6:72:c7:bd:22:94:01:
         70:ca:21:06:3a:94:dc:ab:b7:b7:3b:b4:bc:8a:05:e8:08:1a:
         c5:b4:8a:39:35:b0:d5:ba:4e:2a:45:45:13:79:05:e6:e3:ad:
         7a:51:45:6f:8c:63:18:54:31:d7:3f:29:d9:fb:23:39:17:6c:
         71:f3:d5:d7:69:cf:fe:d1:4e:10:8e:72:31:28:47:d8:97:a0:
         9c:3d:62:87:f3:cb:cc:3f:bb:d2:ba:da:0e:10:99:b0:de:b5:
         54:50:a6:ae:87:a0:4e:53:d0:02:df:16:05:6e:2c:be:8b:bc:
         05:d1:c7:87:b2:52:a0:a6:c0:83:be:3c:5f:84:9f:06:dd:02:
         54:9a:06:61:4a:af:ab:6a:65:1c:0a:6a:03:b8:33:4a:60:9a:
         40:f7:18:f6:bf:9b:06:2c:6d:78:bc:5e:f7:1a:0e:96:0f:b0:
         d7:d1:13:71:d6:b9:ea:f4:33:ed:a6:62:db:64:5f:5c:81:33:
         ea:6a:c8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:14 2024 by rpki-client on console-fra.rpki-client.org