Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E.cer
File:                     FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E.cer (raw, json)
Hash identifier:          fDPiVZIJsx/8r00elIcX08d1wqsaYGvvjMg/8a+aE68=
Subject key identifier:   FB:BE:40:BD:3F:7A:6B:58:9C:65:2E:CA:E9:F7:DC:C1:C0:64:E1:8E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       A7BBA1B3A07FDCBDCC93A1BBC3D8D2557AA2AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BwU4DDHLNcqper4v9yxamLtnw2Tq9NXCaNitJXCA42Y9/1/FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BwU4DDHLNcqper4v9yxamLtnw2Tq9NXCaNitJXCA42Y9/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 22:37:16 +0000
Certificate not after:    Wed 02 Apr 2025 22:42:16 +0000
Subordinate resources:    AS: 28215
                          IP: 189.113.144.0/20
                          IP: 2801:80:550::/48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 05:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a7:bb:a1:b3:a0:7f:dc:bd:cc:93:a1:bb:c3:d8:d2:55:7a:a2:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 22:37:16 2024 GMT
            Not After : Apr  2 22:42:16 2025 GMT
        Subject: CN=FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f6:7d:49:b5:f3:91:22:dc:65:ad:ed:1b:eb:
                    53:2c:38:48:21:44:2c:4d:48:76:90:b9:43:ad:38:
                    ee:3f:e3:41:19:4e:cf:54:34:b2:0a:a8:b7:78:26:
                    65:f4:02:28:f2:d8:f5:26:45:a4:af:41:bc:9d:0c:
                    03:c0:f8:81:be:02:d2:6a:82:e5:c5:0e:a6:44:35:
                    dc:00:9c:53:89:92:31:60:6d:07:26:02:61:c8:16:
                    82:f0:8a:9e:96:7d:c5:27:1d:c7:05:14:48:0e:6e:
                    e8:57:49:54:20:5e:e0:a1:7b:14:10:d4:2b:30:c3:
                    ce:ae:f0:ab:92:78:c9:c0:b7:bf:32:09:27:ec:a0:
                    c9:30:40:68:de:ca:7c:f3:43:bb:5f:ab:44:17:fb:
                    e2:70:72:8b:7e:f1:bf:c2:47:b7:7f:76:57:e9:21:
                    ec:f9:71:e2:7c:57:ac:b1:c2:c3:01:13:13:aa:66:
                    3d:5d:0b:24:37:08:fd:37:c7:f4:87:65:fd:04:4e:
                    1a:a4:44:c2:2e:c8:cf:4f:a3:67:69:9a:36:be:24:
                    63:7a:a0:e9:b8:83:93:36:84:d8:a0:14:8f:9e:30:
                    c0:6e:1f:02:08:4e:d9:5e:4c:39:28:71:af:ef:32:
                    5f:e0:b6:f9:13:d1:e4:67:61:e7:08:40:a2:f2:fc:
                    7d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FB:BE:40:BD:3F:7A:6B:58:9C:65:2E:CA:E9:F7:DC:C1:C0:64:E1:8E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BwU4DDHLNcqper4v9yxamLtnw2Tq9NXCaNitJXCA42Y9/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BwU4DDHLNcqper4v9yxamLtnw2Tq9NXCaNitJXCA42Y9/1/FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.144.0/20
                IPv6:
                  2801:80:550::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28215

    Signature Algorithm: sha256WithRSAEncryption
         b9:83:2b:3b:38:e6:ed:21:b6:ac:f0:ec:4e:2d:49:9a:99:a3:
         c6:98:1a:2f:42:88:3f:09:d3:b7:71:c3:80:56:7a:81:4b:b4:
         89:7f:14:61:05:15:0a:17:0d:a3:c6:3c:a2:99:97:e4:c1:90:
         57:06:2f:90:7b:2e:55:ce:09:a1:4b:a9:98:d5:df:b5:c3:15:
         15:06:4b:4c:bc:1f:46:08:47:1d:3a:ec:9d:68:a0:2e:21:b6:
         ab:1c:94:49:40:dc:e2:c6:c2:31:5a:ce:b5:3f:c7:19:b3:6a:
         6e:46:a7:ef:64:88:ef:02:55:56:c8:7a:7f:2f:3b:e9:c1:be:
         6a:6d:77:6f:bf:f4:14:d3:b8:82:3d:c0:fd:f8:46:e8:1a:97:
         79:3c:88:a9:5f:ac:2b:b9:26:7b:19:fb:62:c4:45:59:97:7e:
         6d:a5:1d:e4:10:3e:cd:85:4f:9f:d8:b4:34:95:b5:a4:c0:a4:
         ff:f2:3f:89:68:37:80:b1:ad:fe:b9:8e:31:79:e2:dc:c3:04:
         9f:37:94:4e:a2:9e:08:a9:5a:6a:f5:25:cb:69:08:38:82:f2:
         2d:08:ca:40:31:83:65:81:30:3d:8f:d1:c1:ab:24:30:a3:24:
         bf:c9:07:be:14:f0:7d:5c:a9:62:f1:5b:82:a2:53:74:56:4f:
         a8:2f:05:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 06:20:21 2024 by rpki-client on console-fra.rpki-client.org