Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EAC5221FCF24AF9D3D00430E7824205E5F92E2BC.cer
File:                     EAC5221FCF24AF9D3D00430E7824205E5F92E2BC.cer (raw, json)
Hash identifier:          +/yUpTvR4LvuEdndlcxVRU/dAOCd9+n5cHKZue5mh08=
Subject key identifier:   EA:C5:22:1F:CF:24:AF:9D:3D:00:43:0E:78:24:20:5E:5F:92:E2:BC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       27DE35AD19530F41124F7E820AA48ED12ADB97A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/EAC5221FCF24AF9D3D00430E7824205E5F92E2BC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 04 Sep 2024 18:44:18 +0000
Certificate not after:    Wed 03 Sep 2025 18:49:18 +0000
Subordinate resources:    AS: 270248
                          IP: 200.107.116.0/22
                          IP: 2804:6918::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 00:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:de:35:ad:19:53:0f:41:12:4f:7e:82:0a:a4:8e:d1:2a:db:97:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep  4 18:44:18 2024 GMT
            Not After : Sep  3 18:49:18 2025 GMT
        Subject: CN=EAC5221FCF24AF9D3D00430E7824205E5F92E2BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:30:b9:95:70:03:ce:e3:c7:cb:cd:fb:89:0d:
                    fd:ba:61:bf:d9:c5:b2:7e:62:6b:d5:83:49:d0:ce:
                    1d:39:a6:51:b8:52:c0:60:69:73:6c:b9:52:8d:6c:
                    2b:66:68:09:89:25:ee:32:52:6a:f7:9d:41:57:23:
                    63:4e:47:01:2d:5b:12:b0:08:5b:76:46:71:4e:74:
                    8e:b1:6c:ca:4b:28:7e:09:9c:d7:e0:4f:d9:cc:63:
                    5b:10:0f:eb:50:7f:d4:1e:90:80:97:d7:72:44:dd:
                    3a:2d:1e:99:46:cf:32:23:d4:f4:be:f2:d3:74:48:
                    38:24:28:b1:0d:be:11:96:6d:fd:47:e8:eb:da:51:
                    e1:c2:6b:f9:f0:2b:7e:e6:a5:87:c0:7d:ed:48:a7:
                    fc:af:5b:d8:f5:a7:c5:8c:88:59:1c:29:7d:a6:3a:
                    be:86:b3:b2:75:3b:cf:fe:79:70:f3:6d:46:97:d1:
                    cb:15:df:b4:37:55:b8:95:98:aa:e5:80:fb:58:0e:
                    07:ed:90:65:9c:0d:b1:4a:fa:b8:3e:e7:6d:5f:7f:
                    15:08:fd:00:62:1c:0c:31:33:57:d3:58:23:04:ba:
                    6e:5f:35:d4:c5:3d:a2:04:58:8d:d1:55:55:b5:18:
                    89:e3:c9:ed:f9:1d:ac:f8:3f:05:10:66:59:60:0d:
                    4c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EA:C5:22:1F:CF:24:AF:9D:3D:00:43:0E:78:24:20:5E:5F:92:E2:BC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/EAC5221FCF24AF9D3D00430E7824205E5F92E2BC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.116.0/22
                IPv6:
                  2804:6918::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270248

    Signature Algorithm: sha256WithRSAEncryption
         69:16:d1:ad:ab:a4:78:5b:69:1b:64:a6:d7:d5:d0:df:0a:65:
         74:1e:05:6c:36:0f:81:93:f2:f2:c0:84:a8:2a:f6:4e:34:b4:
         5c:a1:99:cc:6c:31:f0:b8:aa:46:55:28:cc:e9:a3:5a:57:b1:
         cc:da:b3:6b:36:5a:24:30:58:3f:6a:fb:57:46:54:e1:21:19:
         cb:aa:79:96:2a:23:59:9b:2d:83:4a:5d:04:74:14:09:50:97:
         29:c9:ae:92:ee:a5:45:9a:a0:4a:b1:d4:42:59:46:a2:72:44:
         e7:63:d2:2b:d6:26:91:21:2c:69:ee:f6:b7:92:73:fd:7e:30:
         03:85:52:46:9f:e3:34:ae:78:af:f7:8c:e9:b8:00:05:c0:af:
         85:46:ff:07:0b:04:70:c9:e6:46:5e:5c:81:06:c4:70:51:d8:
         b1:73:d4:8b:6a:40:5a:51:99:96:6b:ca:6c:7e:1f:f0:f1:35:
         2e:f1:1e:48:3e:55:23:43:3a:4d:fb:65:2b:30:e6:8c:3a:aa:
         7c:a0:53:21:3e:fb:a7:7b:89:b7:e7:a7:d3:f9:aa:82:05:b8:
         30:2d:0d:42:03:24:19:38:c9:fb:f0:bf:b8:43:5d:b8:3c:85:
         a2:39:69:72:3b:15:35:e2:30:86:42:6f:0e:2d:e5:d2:2c:94:
         db:87:c0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:17:09 2024 by rpki-client on console-fra.rpki-client.org