Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer
File:                     3929491D59EC78DBDEC7423B04D06034C1A59303.cer (raw, json)
Hash identifier:          BpUB/zQ4uUwiXkpvwnTT7w24L5NJLvYXNEa3PwxgDiY=
Subject key identifier:   39:29:49:1D:59:EC:78:DB:DE:C7:42:3B:04:D0:60:34:C1:A5:93:03
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       74AD58C292A4ECFFF5207913CA514119604ACDC3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 10:48:08 +0000
Certificate not after:    Thu 03 Apr 2025 10:53:08 +0000
Subordinate resources:    AS: 52771
                          IP: 138.186.44.0/22
                          IP: 168.228.92.0/22
                          IP: 177.155.208.0/20
                          IP: 2804:2fa4::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:ad:58:c2:92:a4:ec:ff:f5:20:79:13:ca:51:41:19:60:4a:cd:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 10:48:08 2024 GMT
            Not After : Apr  3 10:53:08 2025 GMT
        Subject: CN=3929491D59EC78DBDEC7423B04D06034C1A59303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fe:9e:a5:6d:13:07:47:cc:09:2b:68:eb:dd:
                    69:2b:13:b6:2d:83:1e:17:a9:c1:82:e2:51:50:ed:
                    b6:f3:ed:5f:2f:16:a6:d4:ee:e2:1b:d7:fd:20:77:
                    e1:17:9c:cf:f8:d0:8e:f1:fc:2a:ef:33:74:cf:c5:
                    63:05:e7:90:f4:57:44:d6:0a:7c:61:8c:3f:c9:55:
                    a7:0f:d4:f4:4c:c7:47:38:38:e8:d5:68:85:f6:3b:
                    62:92:6b:e5:14:02:99:f9:2e:12:a0:ae:f7:84:1d:
                    eb:54:d0:7c:ad:3a:78:68:8f:a6:a1:0a:15:7a:2a:
                    c7:b1:f9:ed:6f:0b:30:b2:2e:ab:3e:ea:cf:3c:3c:
                    45:f9:3f:0a:fe:7b:87:17:f2:57:6f:5c:12:ac:c6:
                    60:d6:96:e8:a1:09:47:db:f9:a1:b0:59:b6:ae:2d:
                    ee:67:65:bf:fe:f4:d6:56:95:0c:99:ff:cb:f7:cf:
                    05:9f:30:b7:b7:59:53:93:85:01:d3:04:7c:ab:32:
                    99:e1:bc:95:00:bc:b9:39:32:10:55:f4:3b:59:53:
                    2a:bc:d3:49:ee:62:3d:7b:1b:4b:84:18:97:30:ce:
                    3b:62:5c:4f:0e:37:33:fc:28:46:4c:14:5b:8f:a7:
                    71:62:36:9e:ff:57:fc:cb:8e:08:08:df:ea:5f:e3:
                    d5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                39:29:49:1D:59:EC:78:DB:DE:C7:42:3B:04:D0:60:34:C1:A5:93:03
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.44.0/22
                  168.228.92.0/22
                  177.155.208.0/20
                IPv6:
                  2804:2fa4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52771

    Signature Algorithm: sha256WithRSAEncryption
         85:c9:71:06:35:2b:b2:39:3f:ba:99:2d:d1:3a:7d:a2:cd:82:
         91:bb:48:1b:c7:ca:bf:d6:6b:ea:f4:bf:4e:d7:a8:35:f8:e8:
         fd:5d:34:2e:43:6f:41:22:1b:f8:2c:86:85:ce:56:30:d2:fe:
         ac:e4:75:24:67:69:31:86:42:10:c4:d6:1c:c2:17:ca:6f:fb:
         34:b3:0b:b9:bd:78:0b:e0:12:4e:34:51:a9:5d:89:71:67:96:
         0b:bd:d5:b9:61:e8:36:3d:e6:63:af:1b:b3:b6:f1:bb:f6:69:
         d8:d3:bb:7d:58:cd:22:d0:5c:e3:f0:1f:17:00:56:7f:ce:74:
         b3:af:80:6a:cc:79:b0:dd:72:85:b1:5e:28:eb:1d:a2:94:ae:
         ff:a4:aa:9b:1c:42:7a:4f:51:a2:c8:02:b1:4a:34:25:7e:b9:
         ea:b3:2b:a0:b3:81:ae:a5:74:2a:51:4b:8f:03:b7:d7:7e:67:
         89:07:55:44:f2:2d:eb:a9:33:ca:e3:d6:c2:75:59:61:f1:cc:
         ce:01:14:e2:b2:96:87:9d:47:0b:76:72:1c:98:55:91:ae:4f:
         8a:a3:75:5b:3a:30:b5:35:f8:f5:c9:f3:c7:49:1c:06:5b:1e:
         41:56:fe:c7:c3:9c:7e:b0:00:26:b3:15:7d:89:17:9a:e6:ab:
         a9:2a:f5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:50 2024 by rpki-client on console.sobornost.net