Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.cer
File:                     EC08655821585A0A5B7D6A0E52FC74EF51F90E73.cer (raw, json)
Hash identifier:          DccSnoQ/etlFTSXJcIgJFF3h46vBJuF/BbidVWpbdrQ=
Subject key identifier:   EC:08:65:58:21:58:5A:0A:5B:7D:6A:0E:52:FC:74:EF:51:F9:0E:73
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       78B9A68CCB679FA33BDF3CE00615CBDAEF39F643
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:25:29 +0000
Certificate not after:    Wed 02 Apr 2025 18:30:29 +0000
Subordinate resources:    AS: 52635
                          IP: 177.125.20.0/22
                          IP: 2804:d80::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 23:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:b9:a6:8c:cb:67:9f:a3:3b:df:3c:e0:06:15:cb:da:ef:39:f6:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:25:29 2024 GMT
            Not After : Apr  2 18:30:29 2025 GMT
        Subject: CN=EC08655821585A0A5B7D6A0E52FC74EF51F90E73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:34:c9:c1:62:4b:c1:b5:a7:9f:8f:f3:56:ed:
                    d3:27:2d:21:cc:94:b3:e8:07:f0:f8:3d:c7:33:74:
                    a2:9d:35:c5:c3:68:2e:d9:a8:bc:ea:d8:b0:f5:b0:
                    a0:c8:44:da:dd:77:4c:15:73:c7:0c:48:8a:45:e6:
                    fb:78:d5:3f:f2:4b:44:2b:de:53:76:2d:57:91:74:
                    cf:d6:24:5b:df:77:4b:f6:cd:32:8f:fd:7a:f8:8d:
                    e2:30:62:41:dd:67:12:72:2a:82:8e:2a:55:ae:b2:
                    ac:87:3a:e0:ea:ae:70:2f:fe:69:eb:63:a0:42:78:
                    a7:01:76:ec:5f:39:49:51:bb:80:c9:34:7c:92:6a:
                    6a:af:f1:6c:74:00:db:59:f4:e1:59:55:66:94:04:
                    9a:5a:f9:e9:34:47:88:56:3b:9c:0d:dc:34:0a:6b:
                    9d:23:3c:cc:30:80:2d:f8:ee:6c:57:6e:16:22:17:
                    70:b1:93:3d:04:2a:2e:a1:c0:0f:6f:ec:df:1e:19:
                    e9:80:ce:09:0e:c3:82:2a:13:14:ae:d5:7b:ab:29:
                    af:88:a9:0c:f6:76:bc:5b:29:2b:6e:85:5a:f7:52:
                    64:c1:84:d0:71:bf:54:e1:7e:ad:47:76:46:8a:f5:
                    3f:83:11:1f:09:fc:9f:70:f2:de:c9:ec:91:9f:fe:
                    f3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EC:08:65:58:21:58:5A:0A:5B:7D:6A:0E:52:FC:74:EF:51:F9:0E:73
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.20.0/22
                IPv6:
                  2804:d80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52635

    Signature Algorithm: sha256WithRSAEncryption
         22:c7:ff:2b:eb:cb:e8:db:4b:8a:c3:76:37:ff:ce:4e:f8:bb:
         c1:e8:68:d0:36:bf:45:90:89:df:32:44:b9:29:97:ff:48:93:
         e7:1d:0d:ab:df:d4:53:77:a3:9c:85:d8:9c:4d:22:87:b4:f8:
         bd:ab:9e:52:a0:b5:db:7d:02:0d:88:8a:47:86:52:27:ee:1c:
         9a:75:a0:2d:1a:4d:77:9a:0d:d4:4a:41:3e:e2:ff:bd:ae:a1:
         92:e3:01:e8:d9:e3:43:eb:f4:a2:2e:64:24:4a:0e:29:7a:3e:
         2a:e7:5b:83:15:ff:69:13:80:e9:8d:b8:e6:7e:06:f7:70:54:
         30:28:31:7e:c9:50:4f:3e:79:bf:b5:ac:c9:73:4c:be:58:ba:
         13:fc:0d:d4:b0:9c:5f:aa:ab:ab:b0:24:21:ca:e8:60:35:39:
         3e:f1:d3:46:ff:8f:6f:40:23:a5:1c:da:5c:bf:54:d6:3b:2c:
         9d:03:a2:c5:d0:c8:8e:da:03:a5:2a:de:a8:0e:bd:34:eb:61:
         8a:47:be:17:16:97:65:c7:e6:33:e1:cd:09:8f:cd:1a:ca:47:
         fa:ba:72:06:ac:9b:27:3e:31:74:42:aa:09:f9:83:b2:e9:03:
         21:03:34:c6:37:dd:00:9b:3f:ad:94:32:93:03:7e:95:74:e0:
         1a:ca:e8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 00:29:27 2024 by rpki-client on console-ams.rpki-client.org