Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/39ADE53D58805E5FE43277F03B00463702D1142A.cer
File:                     39ADE53D58805E5FE43277F03B00463702D1142A.cer (raw, json)
Hash identifier:          l1NvwCxlwV990k8rBUjl6h7k2Dv+wxnWgXA0t4Qw4MI=
Subject key identifier:   39:AD:E5:3D:58:80:5E:5F:E4:32:77:F0:3B:00:46:37:02:D1:14:2A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       57D8B752DF2A3DD988F9CCA3566512CFD80DA738
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/39ADE53D58805E5FE43277F03B00463702D1142A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 15 Jul 2024 19:31:45 +0000
Certificate not after:    Mon 14 Jul 2025 19:36:45 +0000
Subordinate resources:    AS: 269656
                          IP: 45.190.248.0/22
                          IP: 2804:67e0::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:d8:b7:52:df:2a:3d:d9:88:f9:cc:a3:56:65:12:cf:d8:0d:a7:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 15 19:31:45 2024 GMT
            Not After : Jul 14 19:36:45 2025 GMT
        Subject: CN=39ADE53D58805E5FE43277F03B00463702D1142A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:02:27:e5:42:03:f9:c8:b6:a8:72:96:46:8b:
                    02:a6:56:44:2f:eb:4b:82:9e:af:c3:5c:04:d8:97:
                    ba:58:8f:63:b7:ed:f6:2f:2b:02:38:b1:ec:50:ae:
                    67:c2:5e:14:70:99:c7:c5:ed:5b:61:f0:2d:c5:68:
                    5d:f4:4f:04:ab:5e:1d:17:7a:dd:70:99:51:72:ee:
                    35:ab:32:d5:f6:9a:2a:0e:8a:50:6a:12:97:dd:22:
                    70:e0:19:8f:92:ca:c8:a4:6b:bb:b7:87:e1:45:e6:
                    3d:c6:5c:71:16:d4:e0:4b:cc:5d:09:b0:49:5a:b4:
                    2d:6a:a7:99:39:7c:ba:a3:89:33:82:69:1d:66:bc:
                    73:39:f5:38:bf:70:71:78:94:d5:eb:d3:b0:9d:6e:
                    e5:f6:cf:3f:f8:19:55:9c:79:1b:11:1a:e1:d3:6e:
                    f6:da:78:6d:f3:d4:e5:04:76:19:9e:d8:ee:bd:18:
                    1b:72:90:8d:21:ab:7a:8d:59:b7:a3:ff:4e:ac:85:
                    30:84:df:88:dd:ae:0f:97:fa:38:1d:be:a0:ec:9f:
                    30:69:70:d0:d0:e9:66:3d:55:41:cb:71:68:02:51:
                    8d:3b:79:73:01:79:31:73:7c:28:4e:8f:f0:aa:9e:
                    c9:de:ee:9c:1c:c9:c7:f3:ee:56:ba:7a:b1:c3:5f:
                    31:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                39:AD:E5:3D:58:80:5E:5F:E4:32:77:F0:3B:00:46:37:02:D1:14:2A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/39ADE53D58805E5FE43277F03B00463702D1142A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.248.0/22
                IPv6:
                  2804:67e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269656

    Signature Algorithm: sha256WithRSAEncryption
         c4:2d:98:bf:2f:57:dc:9e:f3:38:ab:95:0e:f7:05:d2:6a:5f:
         a5:82:36:b7:e0:1e:43:8d:cb:c8:79:20:09:00:a8:9d:c7:1c:
         83:3b:9d:51:21:d8:d4:51:0b:d0:f7:86:1f:9c:f8:99:1f:c1:
         ff:04:07:e6:af:89:fa:84:bc:3d:d6:0c:55:a6:08:47:61:31:
         4e:e4:ab:69:e6:03:e3:b2:16:82:41:23:83:32:83:11:c8:00:
         c1:b4:55:50:7d:42:5d:59:16:67:55:7e:69:2f:f7:98:cb:bc:
         df:0d:ba:5c:a6:f4:a6:a7:e7:97:13:c7:e9:08:14:42:5b:d5:
         ca:62:b6:ce:b9:98:7b:e3:57:e0:ac:de:9a:7c:7b:04:fb:8d:
         40:8d:0b:33:ea:1d:4a:95:36:2c:3c:67:e2:cf:fe:e1:cc:6e:
         00:78:68:99:2e:53:79:48:bf:eb:11:54:ba:41:5e:ad:97:e1:
         db:ba:3e:62:83:f8:9a:81:56:39:0a:9f:fd:80:d2:e8:ad:83:
         e4:fa:0a:c3:42:ec:1b:23:15:f1:c5:32:21:9e:ea:e5:03:07:
         5e:9a:27:98:fc:31:4f:27:9c:da:73:ca:44:69:c6:16:56:7a:
         7d:b9:ed:f1:ef:21:1f:43:b9:2a:0b:e6:84:67:01:d6:d4:ff:
         94:3a:02:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:50 2024 by rpki-client on console.sobornost.net