Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/37FE0360BF70C2BB2E6AD3D34F0D942B076FAA97.cer
File:                     37FE0360BF70C2BB2E6AD3D34F0D942B076FAA97.cer (raw, json)
Hash identifier:          AHGCVXO+YIZM4YF67jCBHJJg42AewTooRIuzvY9RB1c=
Subject key identifier:   37:FE:03:60:BF:70:C2:BB:2E:6A:D3:D3:4F:0D:94:2B:07:6F:AA:97
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       140BDD21192CFEAF02A5C07D092AD9D5DEADFFA8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9uT7syL4yB6haruad5nZQDGn3an9hLTpNBhZQ8Lg8HMj/1/37FE0360BF70C2BB2E6AD3D34F0D942B076FAA97.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9uT7syL4yB6haruad5nZQDGn3an9hLTpNBhZQ8Lg8HMj/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 23:33:23 +0000
Certificate not after:    Wed 02 Apr 2025 23:38:23 +0000
Subordinate resources:    AS: 268391
                          IP: 45.160.36.0/22
                          IP: 2804:5078::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:0b:dd:21:19:2c:fe:af:02:a5:c0:7d:09:2a:d9:d5:de:ad:ff:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 23:33:23 2024 GMT
            Not After : Apr  2 23:38:23 2025 GMT
        Subject: CN=37FE0360BF70C2BB2E6AD3D34F0D942B076FAA97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6d:5b:34:cd:72:c5:54:f2:88:9a:f8:c7:ae:
                    a7:5c:f3:c6:e8:57:b3:ec:1a:7c:81:d1:73:47:cf:
                    97:e5:34:6d:3c:e4:7a:35:72:de:68:0a:0f:0a:6d:
                    ec:8c:f8:6a:2c:4d:46:9d:0b:7e:ba:75:b4:b2:d1:
                    f1:26:04:fa:03:70:d8:94:eb:fe:4c:29:3b:d2:c1:
                    19:c0:0c:01:13:7d:4d:c2:7f:29:5c:00:24:d9:09:
                    44:95:b3:80:05:53:45:e4:65:8c:a6:be:db:94:2f:
                    0c:cf:f7:5b:f3:19:e6:61:50:09:14:93:3e:4c:51:
                    d0:a5:1e:31:87:22:e7:2d:58:bb:33:89:c8:17:5c:
                    ac:f5:be:dc:ba:6b:f5:34:5a:f8:7b:9f:0e:0b:22:
                    9a:c6:ce:62:0d:1e:44:70:67:ef:6b:32:0b:25:da:
                    16:c6:f7:6d:9d:00:98:86:3c:d7:df:62:db:0d:f0:
                    a0:a6:16:bd:81:9f:97:19:e0:11:98:f2:b8:52:13:
                    e0:27:38:e1:62:6a:80:f2:bf:7f:71:24:00:02:cd:
                    5b:41:8c:2d:4b:15:04:d3:3f:94:54:9c:65:58:17:
                    79:ad:fa:3f:f9:a7:ee:da:4c:1d:a2:ef:cb:f8:17:
                    9b:ae:9a:f4:c4:59:32:de:85:07:e0:6f:6e:24:54:
                    91:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                37:FE:03:60:BF:70:C2:BB:2E:6A:D3:D3:4F:0D:94:2B:07:6F:AA:97
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9uT7syL4yB6haruad5nZQDGn3an9hLTpNBhZQ8Lg8HMj/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9uT7syL4yB6haruad5nZQDGn3an9hLTpNBhZQ8Lg8HMj/1/37FE0360BF70C2BB2E6AD3D34F0D942B076FAA97.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.36.0/22
                IPv6:
                  2804:5078::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268391

    Signature Algorithm: sha256WithRSAEncryption
         10:b1:61:13:cf:8d:e4:60:88:44:3a:fb:65:b6:f9:ee:74:65:
         ed:5b:94:77:5a:02:9d:53:e5:da:1b:0a:a3:b4:2e:a1:41:e4:
         23:f9:f4:02:db:e9:3a:20:d5:8f:ab:24:94:42:ce:c2:8b:99:
         e9:d1:ed:3b:e5:46:b4:53:f6:fd:18:0a:ef:dd:cb:5a:c6:fa:
         2a:0e:89:6a:ba:1c:62:35:29:f7:d3:28:e3:f8:53:c2:f9:d6:
         a7:64:fc:86:8e:5b:e2:3f:81:ef:39:b5:7c:46:6c:78:4e:7e:
         05:8b:71:2d:2a:01:8a:3f:1f:31:d9:c4:4a:86:bc:8f:2d:d8:
         eb:97:cd:5b:8d:a5:1e:b3:a6:e5:02:20:53:48:3c:99:c9:43:
         fa:42:ca:de:0d:ab:ad:b0:96:9a:de:58:62:b9:70:e9:61:74:
         05:a6:4f:92:49:5d:14:e4:cc:03:96:96:b0:83:33:86:b9:07:
         48:47:f3:cb:ab:91:75:31:60:dd:49:43:12:94:aa:50:57:97:
         97:04:26:2a:8b:3d:d5:a0:ee:32:09:a7:a4:3c:91:9b:ec:38:
         5b:2e:d1:b8:07:b2:fa:68:57:16:81:46:d0:48:0b:f4:e4:aa:
         8b:ba:c1:0b:c4:50:c6:80:7d:6b:68:10:a6:eb:5d:a2:f4:6e:
         1f:37:d4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:50 2024 by rpki-client on console.sobornost.net