Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
File:                     E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer (raw, json)
Hash identifier:          yZt48UaKjkNvC0K/0Q3v2TCto3NgiZQpuFJ7+ZD/6eo=
Subject key identifier:   E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       323E5D85555508727CC2404E3C0834BE66730DFC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.mft
caRepository:             rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 01:12:13 +0000
Certificate not after:    Thu 03 Apr 2025 01:17:13 +0000
Subordinate resources:    AS: 52531
                          AS: 262638
                          AS: 265911
                          IP: 131.196.144.0/22
                          IP: 138.118.132.0/22
                          IP: 170.233.12.0/22
                          IP: 177.104.208.0/20
                          IP: 179.108.16.0/21
                          IP: 186.225.216.0/21
                          IP: 186.250.192.0/20
                          IP: 190.83.32.0/22
                          IP: 201.159.152.0/22
                          IP: 2804:28::/32
                          IP: 2804:760::/32
                          IP: 2804:df4::/32
                          IP: 2804:3fbc::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 01:38:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:3e:5d:85:55:55:08:72:7c:c2:40:4e:3c:08:34:be:66:73:0d:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 01:12:13 2024 GMT
            Not After : Apr  3 01:17:13 2025 GMT
        Subject: CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7b:d8:1b:ec:e2:d8:0b:37:9f:5b:9e:ce:75:
                    20:db:c9:c2:ad:61:ac:e0:f4:7c:82:5a:a8:e5:0e:
                    d4:e5:80:1d:09:fd:e0:6e:7b:49:15:51:25:87:04:
                    a9:4b:e8:a8:50:8f:4a:83:1b:09:15:f0:f4:9b:9a:
                    55:4e:b9:35:42:66:48:c9:32:ee:c4:80:5f:1c:7a:
                    55:f0:38:49:64:f0:92:d0:00:6b:e7:3d:e0:3d:06:
                    d0:09:e1:42:ad:90:4a:25:60:6b:dd:d0:1d:5c:eb:
                    21:11:39:8c:ba:6e:6f:3d:1e:da:e4:39:24:a3:59:
                    a4:6b:55:7e:e6:8b:30:88:eb:3f:72:09:f8:bc:f1:
                    21:50:66:2c:c0:40:4b:7e:af:81:09:2a:f7:d9:64:
                    f4:74:13:22:3d:da:cd:c8:d0:01:90:28:68:8f:14:
                    f3:c8:c2:f8:0e:65:fd:38:c9:e8:22:e5:35:61:4f:
                    6b:ac:79:ad:9b:0c:e3:07:38:d5:5a:8a:b1:29:0d:
                    a4:d0:ce:f8:45:79:13:3a:81:a2:90:16:57:eb:77:
                    68:11:f9:45:4e:af:59:11:8b:b6:4d:37:7e:49:69:
                    9f:09:d7:fe:77:12:b7:67:9c:3c:72:7a:fd:67:0b:
                    fa:17:93:5b:71:23:de:51:45:f4:3c:84:48:54:e9:
                    42:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.144.0/22
                  138.118.132.0/22
                  170.233.12.0/22
                  177.104.208.0/20
                  179.108.16.0/21
                  186.225.216.0/21
                  186.250.192.0/20
                  190.83.32.0/22
                  201.159.152.0/22
                IPv6:
                  2804:28::/32
                  2804:760::/32
                  2804:df4::/32
                  2804:3fbc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52531
                  262638
                  265911

    Signature Algorithm: sha256WithRSAEncryption
         c6:fc:02:17:81:70:ea:50:ce:04:6e:43:6b:be:63:00:d3:90:
         64:33:ef:38:cc:80:f5:3d:8c:16:2e:14:10:a4:8b:32:3c:80:
         50:19:df:03:e1:2f:fa:6f:77:9e:57:2f:fe:5b:58:d1:22:78:
         0a:24:1c:0d:2a:e9:5f:e9:ca:0e:90:3e:43:8d:4b:b2:ca:69:
         5f:a5:79:e0:25:f1:b2:40:3c:24:da:ac:14:3b:44:51:8a:d4:
         b9:f5:ad:aa:92:04:f9:1d:43:db:57:d1:53:2d:77:9d:5b:64:
         67:da:7e:ea:89:e6:f5:ca:dd:03:9f:e4:6d:2b:aa:2a:8b:22:
         f5:28:b0:b7:87:1c:1a:5e:1f:45:c8:a4:68:a8:d5:92:ec:de:
         a5:ab:9b:33:8b:2a:1b:be:78:a7:94:00:c7:b4:0b:3c:9e:05:
         af:ec:20:c0:d7:43:b2:a0:06:6b:63:da:7c:13:e0:11:7f:ef:
         e1:35:bb:33:90:c1:94:3d:20:0f:b3:b2:7a:2b:85:66:22:07:
         4e:2f:2f:3f:75:ad:be:11:1e:34:a3:9b:93:31:4f:2e:80:59:
         f8:e1:44:e0:42:90:34:c4:3d:69:3d:9f:4f:bd:19:31:36:41:
         f1:e2:2b:20:e1:cd:42:14:e7:be:30:5b:6c:2a:fb:63:e6:f9:
         1c:eb:9d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:01:17 2024 by rpki-client on console-ams.rpki-client.org