Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F79C2520AC77E73FBAC789D36D8E3E640BE39E65.cer
File:                     F79C2520AC77E73FBAC789D36D8E3E640BE39E65.cer (raw, json)
Hash identifier:          wjEX1c57FmiHoN6bAv8St47g7ReSMUod5DsKln5XYR4=
Subject key identifier:   F7:9C:25:20:AC:77:E7:3F:BA:C7:89:D3:6D:8E:3E:64:0B:E3:9E:65
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1BAECADE84F48A209EFB69ED7DAC5D67409540C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HcWQVXcsFt8an9d7ULUCQJEnbozVRtFF62vqm7mPDD9w/1/F79C2520AC77E73FBAC789D36D8E3E640BE39E65.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HcWQVXcsFt8an9d7ULUCQJEnbozVRtFF62vqm7mPDD9w/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 08:53:16 +0000
Certificate not after:    Thu 03 Apr 2025 08:58:16 +0000
Subordinate resources:    AS: 61593
                          IP: 45.237.144.0/22
                          IP: 2804:4eb4::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 05:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ae:ca:de:84:f4:8a:20:9e:fb:69:ed:7d:ac:5d:67:40:95:40:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 08:53:16 2024 GMT
            Not After : Apr  3 08:58:16 2025 GMT
        Subject: CN=F79C2520AC77E73FBAC789D36D8E3E640BE39E65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f4:7d:e5:b8:b2:b0:df:92:e8:4e:52:cf:86:
                    17:56:16:3f:a9:33:4b:56:bd:22:64:e7:84:02:8e:
                    64:b0:b1:e4:60:5e:be:e7:a2:3e:a5:ba:96:e5:c3:
                    35:bb:6d:8c:9f:da:b2:c2:25:8a:0c:0d:18:c3:ff:
                    b5:06:00:2e:f3:68:4d:0e:95:38:bf:fa:85:b6:5b:
                    8e:d9:36:d4:d2:88:64:92:23:b6:e1:81:4d:b2:d7:
                    9b:bf:af:01:a3:75:b1:65:52:52:e1:e0:c8:6b:61:
                    72:af:97:19:0c:99:42:dd:91:2b:c3:98:d8:19:77:
                    74:7a:1b:74:a9:a3:e3:1b:af:4e:6c:70:91:e5:11:
                    26:e6:b6:a9:38:13:69:6f:b0:7f:d6:2c:a7:fd:5e:
                    6e:62:c3:b8:59:46:a1:05:66:ac:11:93:20:c4:fb:
                    49:48:8a:bc:d3:a7:2f:b6:18:45:2d:e6:d8:4d:cd:
                    ae:64:22:0f:3c:99:06:54:70:df:ba:60:d9:26:34:
                    78:ea:6c:9d:27:6b:fe:c2:f5:24:d1:da:40:1b:11:
                    52:86:59:67:dd:5f:ea:75:cf:77:a9:1d:1f:19:f1:
                    14:63:83:92:c3:7b:6e:45:ec:4e:54:dc:19:b6:6b:
                    1e:08:aa:8f:da:fc:85:1d:e6:e4:94:d5:28:86:20:
                    f2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F7:9C:25:20:AC:77:E7:3F:BA:C7:89:D3:6D:8E:3E:64:0B:E3:9E:65
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HcWQVXcsFt8an9d7ULUCQJEnbozVRtFF62vqm7mPDD9w/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HcWQVXcsFt8an9d7ULUCQJEnbozVRtFF62vqm7mPDD9w/1/F79C2520AC77E73FBAC789D36D8E3E640BE39E65.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.144.0/22
                IPv6:
                  2804:4eb4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61593

    Signature Algorithm: sha256WithRSAEncryption
         ba:1b:86:5d:88:15:4e:d1:3b:5f:c6:90:ff:97:3f:ce:f3:08:
         34:02:0a:59:d5:7b:cd:f9:27:f8:a8:2b:42:91:2e:ba:1c:8f:
         f9:81:50:3b:e9:d2:90:1a:18:e3:32:03:2d:f2:3d:90:36:31:
         ef:4b:9c:4d:31:29:bd:df:c6:55:b0:02:54:6b:bb:c0:a4:71:
         ce:98:ca:ca:a9:b0:03:5a:a6:08:da:7f:08:2a:03:7c:d6:98:
         af:32:9e:5c:d9:0f:99:3c:4d:90:15:c2:2b:7f:e2:a7:c7:ad:
         3f:d9:00:c3:75:a0:08:b6:44:05:7e:ee:4e:61:70:8b:7b:82:
         2e:aa:36:60:21:c6:f4:ed:31:29:1d:fd:6b:36:bd:61:23:ba:
         0f:cb:60:15:a8:c2:8b:fe:97:01:b7:13:3e:7b:df:28:34:76:
         bd:f7:42:62:aa:4e:14:0c:b5:1b:25:42:d1:ae:95:36:cc:90:
         ca:88:22:9e:08:d7:8a:4c:b5:28:0e:1b:29:cc:5b:16:ee:0f:
         a3:0c:00:c3:1e:85:ee:2c:14:d0:3b:3c:33:f2:81:27:64:fd:
         71:50:ab:75:49:47:ec:17:26:12:59:fa:cd:d8:6c:8d:8f:3f:
         5d:22:82:f7:6b:c8:f8:9a:e1:60:bf:01:32:81:05:40:63:c7:
         63:7b:77:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 06:20:20 2024 by rpki-client on console-fra.rpki-client.org