Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.cer
File:                     FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.cer (raw, json)
Hash identifier:          0Jg9Z+DPHRQ6o+fuE08zB0qqpJ7iMCyXiaOnKndPkbo=
Subject key identifier:   FB:27:EA:38:8A:79:41:1B:BB:22:F3:2F:5F:CD:5A:EA:08:44:BF:AF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       46F0BC8831D5FB00DAF681830697027FB4AD0E9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 20:20:40 +0000
Certificate not after:    Thu 03 Apr 2025 20:25:40 +0000
Subordinate resources:    AS: 267614
                          IP: 45.71.108.0/22
                          IP: 2804:43fc::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f0:bc:88:31:d5:fb:00:da:f6:81:83:06:97:02:7f:b4:ad:0e:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 20:20:40 2024 GMT
            Not After : Apr  3 20:25:40 2025 GMT
        Subject: CN=FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:97:11:cd:da:69:02:4d:ef:d0:29:6b:dc:69:
                    c6:04:da:43:9d:94:ea:b5:67:27:ac:6c:54:85:95:
                    4c:00:0b:63:ab:ac:b1:bb:12:f4:4a:06:1c:54:1c:
                    05:58:d8:d3:6b:4c:49:e0:d0:6e:73:ac:a3:10:0b:
                    4d:4c:98:14:40:62:b5:38:33:30:f4:81:77:55:fb:
                    28:23:40:ca:7d:cb:25:77:76:2d:9c:79:6c:7a:81:
                    ba:c4:a5:b5:6f:54:da:9b:77:71:8f:27:2f:71:cf:
                    a1:22:80:25:ae:0b:15:1e:ca:28:e9:41:23:f0:b7:
                    4d:8a:7f:be:d0:4c:35:57:f5:e8:12:1b:c4:1f:87:
                    a8:a2:25:52:58:98:ad:2c:1b:73:dc:6a:1a:a5:96:
                    3f:9e:31:01:e2:2e:b0:bc:89:a6:7b:0f:bd:86:f7:
                    c7:e7:c1:da:90:2d:11:a5:ba:56:9a:4a:3b:18:b7:
                    14:ea:84:e1:b7:fc:fc:84:26:42:d0:af:f4:d6:36:
                    db:c8:ae:59:5a:58:7c:12:36:7a:a9:cf:fc:21:17:
                    1b:b0:0e:82:99:ed:1d:ef:e6:9a:71:7b:32:fa:e0:
                    40:9e:b6:2a:16:5d:73:9c:3c:6d:94:db:6c:0c:a2:
                    78:2c:e4:a7:90:83:da:03:00:79:42:82:65:83:f1:
                    99:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FB:27:EA:38:8A:79:41:1B:BB:22:F3:2F:5F:CD:5A:EA:08:44:BF:AF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.108.0/22
                IPv6:
                  2804:43fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267614

    Signature Algorithm: sha256WithRSAEncryption
         0e:0c:10:2d:76:f2:f3:31:ea:fe:29:5f:a0:9c:35:81:85:02:
         92:76:91:bd:75:5e:96:bf:0d:43:4a:09:e5:ba:8c:94:a7:4c:
         d9:be:d6:02:17:8f:26:53:e6:32:57:28:ca:17:3c:3b:f0:b9:
         08:9c:cc:ce:d6:22:b6:19:79:cc:04:7d:f7:b3:de:2b:a8:8a:
         3c:9e:ad:02:61:35:df:11:0a:73:f3:9f:92:af:e5:f6:bf:40:
         c1:33:30:13:aa:af:22:67:a5:55:d6:36:d9:2d:bc:a0:a2:55:
         31:c8:7e:29:54:e6:f4:00:7a:75:70:bd:6e:8a:5d:b1:b6:4d:
         c0:59:b4:cd:3f:45:b1:a6:cc:af:89:2d:8a:8f:09:74:58:58:
         db:dc:87:18:e5:9e:9d:75:ca:79:2d:a3:5e:59:58:3d:7b:cb:
         69:d7:73:3f:d0:1d:62:a5:dd:fc:98:98:25:26:47:ca:5c:04:
         81:26:78:08:72:7b:8b:b1:94:16:20:1e:5b:94:d6:e3:8f:93:
         ac:d5:73:5c:ec:97:f7:f0:1b:ad:b6:0f:56:68:63:d4:73:03:
         5f:0c:71:7c:d4:6d:4b:22:59:6e:cb:ea:34:57:15:c4:31:98:
         91:28:6a:c0:af:64:95:24:1a:66:08:b1:10:74:f2:26:9e:0c:
         b0:0c:88:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:12 2024 by rpki-client on console-fra.rpki-client.org