Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0F0B8A867772B2436759E0F012765DC77C12ACB5.cer
File:                     0F0B8A867772B2436759E0F012765DC77C12ACB5.cer (raw, json)
Hash identifier:          HoVJH5TpWORvpqKlXUK5GKg4gUnxSojMHD3m2H2gO0o=
Subject key identifier:   0F:0B:8A:86:77:72:B2:43:67:59:E0:F0:12:76:5D:C7:7C:12:AC:B5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       19C67E57822C5B3F01C84DC9D9F36BBFCD17C59E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/0F0B8A867772B2436759E0F012765DC77C12ACB5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 18 Apr 2024 19:31:19 +0000
Certificate not after:    Thu 17 Apr 2025 19:36:19 +0000
Subordinate resources:    AS: 264414
                          IP: 131.221.60.0/22
                          IP: 2804:1e34::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:c6:7e:57:82:2c:5b:3f:01:c8:4d:c9:d9:f3:6b:bf:cd:17:c5:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 18 19:31:19 2024 GMT
            Not After : Apr 17 19:36:19 2025 GMT
        Subject: CN=0F0B8A867772B2436759E0F012765DC77C12ACB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:98:92:fa:43:8b:b7:90:7e:d5:2f:e6:14:77:
                    a7:5e:78:cf:d6:f6:0b:39:4f:a1:49:71:be:1a:2f:
                    54:8e:c6:88:90:4e:59:1d:db:ac:56:4a:75:79:17:
                    13:90:ef:2f:7a:7e:46:e7:3f:9c:07:8f:a8:2b:3f:
                    b0:a7:9c:3c:4c:be:7d:a7:a7:ca:eb:a4:e3:d4:90:
                    46:90:42:9d:40:25:f3:5a:30:b1:79:ce:0b:6e:11:
                    00:1a:9b:ca:ea:8c:59:a3:00:74:41:d4:04:c8:eb:
                    94:6f:36:5a:ed:e5:b0:17:d5:12:d0:31:ab:ed:0c:
                    78:b7:eb:f4:4c:27:a7:24:d0:47:58:12:fe:50:40:
                    a7:de:3a:23:2f:bd:4e:13:64:ad:a5:8a:6d:db:8a:
                    b2:a2:ca:2f:7c:34:3e:ab:76:f4:3f:92:21:2a:5a:
                    94:cc:3c:54:ba:c0:cc:00:71:97:f5:16:31:5e:eb:
                    2e:61:df:d2:b8:df:b0:57:4b:b6:93:f3:2f:d7:af:
                    40:f6:3b:24:14:6c:7b:7e:42:27:b0:7a:ad:84:17:
                    33:39:74:17:c5:8b:47:22:cd:a9:35:33:cc:2a:a0:
                    3b:72:c4:f0:08:12:af:2d:dd:fc:92:11:68:48:94:
                    ad:a3:11:2d:0b:8f:2a:d9:8c:7d:d4:6b:d0:08:ec:
                    be:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0F:0B:8A:86:77:72:B2:43:67:59:E0:F0:12:76:5D:C7:7C:12:AC:B5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/0F0B8A867772B2436759E0F012765DC77C12ACB5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.60.0/22
                IPv6:
                  2804:1e34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264414

    Signature Algorithm: sha256WithRSAEncryption
         5d:30:c3:ea:36:32:54:95:57:b5:a3:47:57:78:d7:b2:4b:50:
         29:43:7b:d1:8d:e5:95:39:62:42:0f:32:f0:99:3a:d3:cd:27:
         0e:0d:09:15:b5:42:1b:a9:58:5c:1f:37:9a:21:5b:87:fd:a9:
         92:0c:87:a4:c7:08:86:6e:7b:d6:0f:cd:8c:16:34:46:01:98:
         72:0e:c0:c1:1a:06:b1:00:0c:23:c7:c8:0c:09:3b:3d:c5:4e:
         a0:2e:50:57:f4:37:54:9f:e9:f6:eb:64:a2:25:70:e9:58:e0:
         97:1e:ce:be:11:1c:cf:6d:7d:a3:63:a1:b8:6b:63:59:e8:16:
         d7:83:5a:bb:45:b0:a2:95:2a:13:ba:1c:93:a0:a7:77:1f:c9:
         21:62:91:02:f9:07:72:b9:19:c4:b7:50:c4:54:3e:95:ab:1c:
         39:49:28:74:e2:39:09:03:af:3a:2e:60:73:49:4c:d9:8c:22:
         a7:89:3b:d9:3f:b6:4e:4c:b3:5a:eb:ed:bf:c6:0f:38:c6:78:
         74:6e:df:49:18:57:e4:01:58:6f:37:f2:ab:b6:65:a7:27:65:
         33:4a:b4:79:08:de:0b:f4:47:ff:0a:8e:56:2a:b9:61:46:9c:
         e1:26:34:60:ee:77:28:08:b6:f6:82:76:1f:82:94:10:e2:ae:
         4e:04:10:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:43 2024 by rpki-client on console.sobornost.net