Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F1FC33733C237818426BB2F333733BF4467E91FD.cer
File:                     F1FC33733C237818426BB2F333733BF4467E91FD.cer (raw, json)
Hash identifier:          MmW2LCPA37WiQt88ljOJHzEoiH/563KLdUZeRM28gCs=
Subject key identifier:   F1:FC:33:73:3C:23:78:18:42:6B:B2:F3:33:73:3B:F4:46:7E:91:FD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7989EDBE62BDEDBC5548A9FEE72425E43DEB2AD6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/1/F1FC33733C237818426BB2F333733BF4467E91FD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 15:58:14 +0000
Certificate not after:    Thu 03 Apr 2025 16:03:14 +0000
Subordinate resources:    AS: 52699
                          IP: 170.244.0.0/22
                          IP: 177.23.136.0/21
                          IP: 177.223.0.0/20
                          IP: 2804:c64::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jul 2024 12:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:89:ed:be:62:bd:ed:bc:55:48:a9:fe:e7:24:25:e4:3d:eb:2a:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 15:58:14 2024 GMT
            Not After : Apr  3 16:03:14 2025 GMT
        Subject: CN=F1FC33733C237818426BB2F333733BF4467E91FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:72:47:ea:1c:c4:95:2a:20:12:e7:a5:64:77:
                    f0:7a:34:be:3b:fc:7f:46:47:8c:e7:19:cc:14:a9:
                    bc:f4:fb:6f:51:8f:12:75:68:6f:c1:41:40:3a:d5:
                    5f:e9:17:cb:9e:81:38:6f:44:16:49:81:f9:a1:4c:
                    13:ef:cb:b0:c1:cc:e1:53:41:1d:75:11:dc:cf:f6:
                    73:97:17:83:8c:4a:48:8a:2d:4b:92:39:8d:b5:58:
                    d5:39:a5:bd:81:3d:c7:e7:ca:ea:a1:cc:fd:24:4b:
                    10:f1:13:66:17:46:41:ce:20:b5:a9:4f:17:44:50:
                    90:a5:7e:36:4d:c5:31:3f:75:b9:fc:92:94:d2:35:
                    ce:da:82:16:1a:65:15:e2:f1:27:54:1f:02:27:36:
                    7b:a1:60:d3:54:47:a8:f3:a2:ce:b7:83:8d:bf:44:
                    60:b5:f2:b9:38:5f:e0:87:66:51:80:43:a4:01:98:
                    53:86:6a:7a:6f:47:98:85:c9:34:c8:2a:8b:3c:f1:
                    ac:da:b2:4c:15:a1:db:14:bb:c2:3f:47:81:61:fa:
                    90:ec:eb:a9:fe:4e:39:f2:a1:50:e6:5d:54:6e:ef:
                    fc:72:d4:ac:f8:97:d4:0a:c9:8a:3c:2d:3c:f0:bd:
                    e4:65:bf:db:49:bd:31:23:6f:d7:c4:d6:cb:b1:39:
                    ff:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F1:FC:33:73:3C:23:78:18:42:6B:B2:F3:33:73:3B:F4:46:7E:91:FD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/1/F1FC33733C237818426BB2F333733BF4467E91FD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.0.0/22
                  177.23.136.0/21
                  177.223.0.0/20
                IPv6:
                  2804:c64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52699

    Signature Algorithm: sha256WithRSAEncryption
         7b:dc:7e:c9:e5:81:33:b1:b1:af:84:80:9c:c0:48:bf:5e:d6:
         fa:26:42:35:be:e2:f7:45:eb:09:ff:1b:01:a2:5a:14:a9:45:
         ce:37:a9:4f:36:27:3a:96:94:b3:d0:06:d7:a8:91:8c:24:00:
         1a:da:97:1c:28:f5:05:b0:18:c2:55:df:2d:f6:a1:f7:59:23:
         cc:5c:7c:86:34:d2:9b:11:24:bc:76:44:5f:a1:1c:4c:e0:2a:
         0b:8c:84:0c:bd:8e:b6:1a:8a:f9:9e:76:72:33:0c:6f:3e:4a:
         a9:99:3b:a4:6a:6b:03:97:a0:b1:4b:15:6c:4b:cf:00:21:26:
         08:97:6a:b3:33:37:82:69:7d:ae:03:3d:2a:12:e7:4d:df:bf:
         65:cd:c6:e4:63:3f:ff:27:cc:8c:49:ea:fb:35:de:67:1e:e7:
         60:fb:77:35:b7:cc:dd:0d:23:13:23:22:73:c6:a0:42:3f:8e:
         ba:92:f2:da:20:be:6c:50:25:c6:35:50:42:bb:5f:02:cf:2d:
         7e:25:7d:5c:36:97:53:c6:fe:ec:ab:89:c3:ba:ad:cf:17:96:
         b7:d6:1b:55:ec:b6:df:c9:d4:5b:f4:71:d4:54:94:3d:3d:0d:
         50:a1:c9:d2:ac:ad:e8:ed:a2:57:ea:cc:d7:38:91:98:8d:5e:
         fa:51:6f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 10:27:10 2024 by rpki-client on console-ams.rpki-client.org