Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3EF633923A51B56E1376665FA9A269A157B419AF.cer
File:                     3EF633923A51B56E1376665FA9A269A157B419AF.cer (raw, json)
Hash identifier:          SOh+W6prwFLQo+izhymRPaJUQxQlMJG7wy2fUf+fHn8=
Subject key identifier:   3E:F6:33:92:3A:51:B5:6E:13:76:66:5F:A9:A2:69:A1:57:B4:19:AF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7C8C9989958343C1C1402F5CFD235DA7192A53E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FjFWCFPQw4b1jQS9rEA2ztaaLL9Q54rnMzXNneSNHddT/0/3EF633923A51B56E1376665FA9A269A157B419AF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FjFWCFPQw4b1jQS9rEA2ztaaLL9Q54rnMzXNneSNHddT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 26 Sep 2024 00:46:37 +0000
Certificate not after:    Thu 25 Sep 2025 00:51:37 +0000
Subordinate resources:    AS: 271103
                          IP: 179.42.0.0/22
                          IP: 2804:7650::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:8c:99:89:95:83:43:c1:c1:40:2f:5c:fd:23:5d:a7:19:2a:53:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 26 00:46:37 2024 GMT
            Not After : Sep 25 00:51:37 2025 GMT
        Subject: CN=3EF633923A51B56E1376665FA9A269A157B419AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cd:7a:aa:9f:1c:d5:d0:b5:f6:e7:a7:c9:d0:
                    c7:80:45:0d:f6:89:90:d2:54:18:e7:19:da:a4:19:
                    13:f7:ac:76:b1:82:d1:0a:16:f8:1d:bf:6d:35:39:
                    e4:ae:13:b7:41:bb:62:2b:6b:ab:73:4f:68:c9:22:
                    55:81:d7:dc:49:ad:4f:e1:11:d7:02:d6:3b:81:26:
                    a0:b3:0e:b4:16:4f:3a:b8:7a:93:13:84:be:cd:7e:
                    80:b4:f1:05:eb:e0:c0:6a:18:69:8b:f7:dd:13:8e:
                    87:02:99:2a:50:eb:92:5f:86:ee:f1:97:1c:03:ed:
                    18:ff:89:d6:98:8f:9e:ec:54:50:31:8f:7f:15:87:
                    01:2a:85:67:63:ef:15:34:4a:04:ff:ce:c9:ae:9d:
                    91:d4:34:4d:ab:e1:86:a6:32:77:d5:67:d9:7e:ee:
                    ef:23:9c:91:57:1d:55:d7:5b:a4:1a:b0:03:5a:c5:
                    95:65:59:d0:c7:fd:55:06:a4:70:5c:e8:ba:32:0d:
                    2b:5e:43:ff:96:db:c6:d6:11:77:7a:11:ae:b5:c0:
                    79:0c:d5:ca:ce:e1:c7:6a:f1:13:02:45:89:49:59:
                    6a:95:2b:d1:bb:56:8d:f3:c0:60:d3:f7:c7:9d:88:
                    6a:bd:88:24:a9:9e:09:13:bf:2f:56:de:01:20:07:
                    5b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3E:F6:33:92:3A:51:B5:6E:13:76:66:5F:A9:A2:69:A1:57:B4:19:AF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FjFWCFPQw4b1jQS9rEA2ztaaLL9Q54rnMzXNneSNHddT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FjFWCFPQw4b1jQS9rEA2ztaaLL9Q54rnMzXNneSNHddT/0/3EF633923A51B56E1376665FA9A269A157B419AF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.0.0/22
                IPv6:
                  2804:7650::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271103

    Signature Algorithm: sha256WithRSAEncryption
         89:e1:22:45:bb:e8:93:03:4c:05:ff:88:98:af:6a:b1:b9:83:
         13:e1:9c:4b:52:02:07:97:04:3e:1a:92:c2:87:38:c1:04:0c:
         7e:d9:d5:e7:f2:ea:02:bd:98:4d:53:2c:02:93:6b:21:9f:10:
         7d:c1:5f:6a:c7:d0:97:d8:19:43:3d:92:d9:c4:c1:d9:e1:b1:
         42:a1:67:c8:36:80:b4:85:48:82:4d:e1:26:53:34:61:b4:7f:
         fa:6e:1d:46:69:4b:51:91:b6:4c:f7:8d:45:65:1b:3a:dc:f4:
         91:26:ad:b6:e6:a0:93:12:b6:af:31:a2:72:f1:23:27:f2:52:
         bb:a2:ab:83:a1:72:1c:c3:fd:10:47:a4:6a:0a:ce:bc:3a:cd:
         4b:a1:8b:26:0b:36:94:54:f5:b2:66:32:b4:5e:dc:5f:1a:06:
         ac:3a:4c:18:42:3c:b3:35:b7:6a:15:72:44:18:75:b0:57:d6:
         6c:85:fc:0e:53:bf:7b:75:ab:f3:b2:5f:8e:d9:9d:0f:0f:23:
         d6:e3:91:af:ca:0f:65:71:88:b2:ab:bb:b6:1b:99:5a:3c:72:
         66:18:e5:b1:b0:e6:5c:7c:e8:f2:3a:25:06:53:c1:9c:5d:b7:
         65:a2:4c:df:01:6e:f2:84:b8:2a:90:c5:52:84:1f:b6:ae:5b:
         81:69:7a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:51 2024 by rpki-client on console.sobornost.net