Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/46DB12A14348618F10056325BB8A39140F8A9034.cer
File:                     46DB12A14348618F10056325BB8A39140F8A9034.cer (raw, json)
Hash identifier:          zC4dBO7n77MzVoe71kij0NQGjxMLDAcvtjvJ16PX2nE=
Subject key identifier:   46:DB:12:A1:43:48:61:8F:10:05:63:25:BB:8A:39:14:0F:8A:90:34
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6267CDF5C0136847466DF21DB7E95FD72C977A6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8vd8pbfNvUyY1m55cokpkUmr1dAdn6EGMYWBcCEbCNrV/0/46DB12A14348618F10056325BB8A39140F8A9034.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8vd8pbfNvUyY1m55cokpkUmr1dAdn6EGMYWBcCEbCNrV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 26 Aug 2024 19:58:13 +0000
Certificate not after:    Mon 25 Aug 2025 20:03:13 +0000
Subordinate resources:    AS: 53147
                          IP: 187.111.80.0/20
                          IP: 2804:f8::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:67:cd:f5:c0:13:68:47:46:6d:f2:1d:b7:e9:5f:d7:2c:97:7a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 26 19:58:13 2024 GMT
            Not After : Aug 25 20:03:13 2025 GMT
        Subject: CN=46DB12A14348618F10056325BB8A39140F8A9034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f7:f3:f6:dc:3f:92:0c:8e:71:f1:46:48:d3:
                    c1:bc:ba:0b:d9:59:1a:20:29:c8:27:41:19:bc:84:
                    ae:9c:f3:92:cd:4b:00:cd:e4:6f:9d:fa:17:73:7e:
                    d5:e5:a2:d8:f2:53:0d:92:1b:39:6f:1d:f3:2a:ea:
                    79:8d:67:02:e9:1d:a0:fa:27:04:45:bd:5c:e1:71:
                    80:cb:50:95:db:9c:ff:46:76:19:50:e2:de:cb:74:
                    92:72:38:19:5d:de:fb:07:04:3d:0a:25:e0:c2:60:
                    b0:90:04:a4:fd:3c:53:75:6c:29:c4:7a:24:36:d3:
                    04:9d:e2:ae:09:a5:48:89:7e:c3:ba:c9:6e:3a:d3:
                    04:b5:c5:0f:b6:0f:96:47:61:03:d7:d6:63:f3:e7:
                    2f:a7:14:80:35:7f:ed:7c:c3:88:7f:c0:e3:e5:64:
                    50:1d:0b:02:5f:54:95:fa:a8:a8:fc:8b:46:28:38:
                    a2:15:3c:94:04:02:28:3c:7e:7c:ef:10:4b:fc:99:
                    3f:06:6a:29:0e:f7:0c:9f:9c:a1:a9:6a:8f:02:92:
                    e5:46:95:90:6f:da:e1:36:89:d4:5f:b1:83:c5:ec:
                    28:ff:82:14:c9:37:84:2d:23:b6:aa:bb:25:db:58:
                    d3:f0:06:7c:a9:55:66:83:d0:65:e3:5f:d7:fe:55:
                    8f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                46:DB:12:A1:43:48:61:8F:10:05:63:25:BB:8A:39:14:0F:8A:90:34
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8vd8pbfNvUyY1m55cokpkUmr1dAdn6EGMYWBcCEbCNrV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8vd8pbfNvUyY1m55cokpkUmr1dAdn6EGMYWBcCEbCNrV/0/46DB12A14348618F10056325BB8A39140F8A9034.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.80.0/20
                IPv6:
                  2804:f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53147

    Signature Algorithm: sha256WithRSAEncryption
         28:a9:b0:f3:01:f9:60:31:dc:c4:4d:c6:52:c8:2f:c5:ec:d5:
         e4:b6:06:55:32:a1:f0:ea:ef:bb:d2:a7:02:9f:d6:ff:ff:40:
         fc:8a:5c:9a:22:e1:86:bd:50:87:39:d3:9b:87:08:79:f6:e5:
         30:34:e1:87:ba:98:30:16:f4:27:f2:b4:15:b0:9b:4e:ab:8b:
         96:a6:69:fd:22:e1:ad:7b:5e:4b:8f:7a:c1:3b:4a:a1:5c:1d:
         44:49:a8:9e:fd:bf:17:d1:cd:e5:67:d0:5a:78:40:c5:19:14:
         b2:65:89:80:f0:6a:6d:8c:d8:77:20:70:9d:f4:04:c1:ae:3f:
         1b:33:f2:58:65:19:99:43:9b:18:a9:b2:5e:0b:4c:9a:ce:e2:
         33:f4:70:e8:43:86:4e:ba:c5:65:af:3d:34:26:35:23:49:29:
         b1:d2:60:1a:c0:af:58:35:70:0c:cb:e5:30:aa:cc:bc:5c:6c:
         16:3d:55:4c:6b:bc:04:51:de:8c:92:66:f8:78:5f:df:60:25:
         4e:ff:1e:33:56:e1:3b:45:1f:37:e0:2d:cc:a0:39:6b:06:da:
         e5:ae:31:01:47:43:4d:df:3d:cb:19:14:aa:d8:ac:c7:7f:83:
         25:e0:d0:13:df:b4:44:93:00:2c:d4:ff:71:3c:60:9e:39:24:
         b0:f8:c4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:53 2024 by rpki-client on console.sobornost.net