Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1EFFCE8480188138CE6428270E5D1F413360AD3C.cer
File:                     1EFFCE8480188138CE6428270E5D1F413360AD3C.cer (raw, json)
Hash identifier:          5857lmNzj7HGGFRKOiApTXjq6Ct2Pr5txnTGG+n/bUA=
Subject key identifier:   1E:FF:CE:84:80:18:81:38:CE:64:28:27:0E:5D:1F:41:33:60:AD:3C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       47A1E6CDF99D0F6C8F57F2224AD6C9CD2138021F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/0/1EFFCE8480188138CE6428270E5D1F413360AD3C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 09 Oct 2024 23:57:11 +0000
Certificate not after:    Thu 09 Oct 2025 00:02:11 +0000
Subordinate resources:    AS: 269681
                          IP: 45.191.120.0/22
                          IP: 2804:6844::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:a1:e6:cd:f9:9d:0f:6c:8f:57:f2:22:4a:d6:c9:cd:21:38:02:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  9 23:57:11 2024 GMT
            Not After : Oct  9 00:02:11 2025 GMT
        Subject: CN=1EFFCE8480188138CE6428270E5D1F413360AD3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f2:d7:16:62:2d:76:31:bd:cc:ef:75:5a:9d:
                    4e:f1:2f:8a:77:96:c4:55:e8:42:52:eb:f6:ba:25:
                    b6:66:af:04:d8:22:bb:04:36:e4:01:66:c8:f6:b7:
                    b1:15:a6:95:2c:74:56:91:d3:51:87:a8:2b:bf:4f:
                    44:5c:01:69:59:c9:1a:a9:13:89:1d:f1:78:f2:31:
                    46:39:f4:57:b5:10:c3:70:9a:06:92:0d:52:95:b2:
                    3b:ea:b4:f9:e5:5a:a7:d2:46:2d:42:eb:b7:a1:f7:
                    c1:fd:8f:5a:a6:bb:0f:02:30:09:d1:9c:86:3d:90:
                    1c:f0:b4:9b:5a:14:74:8f:29:9a:72:80:94:63:0b:
                    71:af:7d:bc:3a:df:3a:04:3a:05:84:4b:b6:d2:17:
                    20:59:9a:f1:7d:d5:29:e7:81:0f:3f:3e:a4:46:c7:
                    e7:86:8a:ab:f4:7d:34:de:e9:a4:5b:cc:a2:a0:a4:
                    b8:ac:3b:e5:12:14:ea:c7:21:31:60:6c:22:c0:04:
                    fe:f4:59:4e:3a:bd:86:c4:63:e0:ef:8f:ad:e4:79:
                    9c:72:15:aa:df:80:a6:66:c2:a6:7b:16:15:56:a6:
                    bd:c5:c4:41:eb:4e:97:b0:03:60:1f:8e:d0:6d:d3:
                    ff:78:2d:0f:b5:ee:03:36:92:6d:d1:a1:a3:52:77:
                    30:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1E:FF:CE:84:80:18:81:38:CE:64:28:27:0E:5D:1F:41:33:60:AD:3C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/0/1EFFCE8480188138CE6428270E5D1F413360AD3C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.120.0/22
                IPv6:
                  2804:6844::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269681

    Signature Algorithm: sha256WithRSAEncryption
         39:07:f8:b4:41:11:6e:6e:c6:93:33:7a:0f:47:77:d1:ff:b6:
         0b:dd:41:f6:e1:fa:4e:d1:90:22:7b:31:7f:13:e0:ec:ed:f1:
         00:bc:ee:34:18:8a:22:d1:ea:30:6c:7b:13:51:aa:e1:e3:a1:
         5e:3c:82:09:79:dd:48:1d:ed:5e:01:b0:e4:c6:e8:05:a6:15:
         6c:bf:e7:9e:e0:92:7a:1c:62:cb:6e:63:62:71:8a:c1:7c:12:
         60:9c:d9:6f:f9:60:d7:06:2e:59:3d:43:e7:92:1c:63:2f:6e:
         2f:6a:ce:53:c6:8b:67:76:d7:4a:69:2d:bc:4b:2e:59:da:fd:
         3e:cf:24:76:06:9c:0e:f1:f3:88:47:38:00:b4:f6:5c:59:2c:
         66:86:c1:c4:fb:44:6e:18:99:dc:28:f1:75:da:09:17:75:3e:
         98:94:b0:b9:d3:0a:47:b1:f9:94:e6:02:46:3d:4f:48:e3:1d:
         ff:30:b5:7b:37:67:72:bc:3a:fe:06:1b:6c:6a:b7:90:72:8d:
         ff:39:5f:e4:5e:ce:96:29:a4:32:e8:9e:ed:97:1d:87:8f:33:
         45:f9:28:80:6f:c7:86:39:f8:a0:71:73:4e:f7:45:82:a9:df:
         4b:32:79:37:a3:79:7b:be:a1:09:86:e3:07:06:3f:3e:f3:1c:
         88:cd:b9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:46 2024 by rpki-client on console.sobornost.net