Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4ABC2853483C8D55A291610B3C655D5FD053740E.cer
File:                     4ABC2853483C8D55A291610B3C655D5FD053740E.cer (raw, json)
Hash identifier:          OjshG6RvvUupmaDRqRYgaD+v5Xs6EqC0I1bNe4+MqjY=
Subject key identifier:   4A:BC:28:53:48:3C:8D:55:A2:91:61:0B:3C:65:5D:5F:D0:53:74:0E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       02C3B2B60F7E25277F8FB53B3E91FF1B28C1EDC1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/1/4ABC2853483C8D55A291610B3C655D5FD053740E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 22:51:18 +0000
Certificate not after:    Wed 02 Apr 2025 22:56:18 +0000
Subordinate resources:    AS: 271477
                          IP: 177.152.124.0/22
                          IP: 2804:7c20::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:c3:b2:b6:0f:7e:25:27:7f:8f:b5:3b:3e:91:ff:1b:28:c1:ed:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 22:51:18 2024 GMT
            Not After : Apr  2 22:56:18 2025 GMT
        Subject: CN=4ABC2853483C8D55A291610B3C655D5FD053740E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:cd:9c:36:21:97:8f:d0:bd:9d:29:36:c2:8f:
                    17:c6:85:66:7e:d2:99:32:07:3a:1d:a5:d9:d8:ed:
                    4f:5b:86:d8:72:2e:de:a4:41:b6:cc:8d:f5:b8:27:
                    5c:21:89:15:20:35:65:34:cd:43:65:ff:b8:e6:09:
                    d0:09:0e:5e:b9:7d:fc:18:65:a6:d0:3f:2c:2d:ec:
                    20:2a:7e:3d:46:ee:0d:ac:91:52:e2:8a:32:e7:16:
                    d6:ad:a8:a5:d4:19:52:e7:91:59:95:97:26:5f:d0:
                    73:28:60:e0:f4:f6:6b:19:c8:c6:5a:7a:50:1f:85:
                    44:08:cd:d9:99:ea:14:bd:e8:28:4d:e3:c4:ef:e0:
                    08:0b:2f:30:3a:2d:cb:52:28:4f:8f:d3:dd:0f:d3:
                    3b:d9:fb:82:4f:68:76:c4:5e:8d:6e:75:ea:c1:59:
                    fa:b1:05:4d:d9:a3:7c:db:c6:5b:f8:47:90:74:65:
                    0d:79:b7:bb:0a:62:f7:bd:28:59:0a:8a:20:e3:74:
                    48:66:5d:91:e2:82:48:d3:38:e6:ce:3f:f1:7e:7d:
                    85:a6:8e:cb:fc:9b:c5:87:71:11:b9:85:5c:b7:7c:
                    e0:2c:37:6a:a4:42:13:d5:5e:8f:84:94:fd:06:e8:
                    6b:c4:54:bc:3e:65:02:db:39:31:02:c0:97:0d:a1:
                    0a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4A:BC:28:53:48:3C:8D:55:A2:91:61:0B:3C:65:5D:5F:D0:53:74:0E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/1/4ABC2853483C8D55A291610B3C655D5FD053740E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.124.0/22
                IPv6:
                  2804:7c20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271477

    Signature Algorithm: sha256WithRSAEncryption
         d9:24:11:a3:a2:90:83:54:16:e1:ab:dc:f2:a2:57:fd:c9:a9:
         79:b5:be:68:98:ca:61:39:2a:ae:b3:8b:40:f2:2e:e7:13:b8:
         57:c7:42:7f:99:e5:66:e7:3b:76:c9:c7:5c:95:34:bf:65:c8:
         be:c7:17:3d:e7:d6:1d:3b:e3:55:df:ce:05:83:80:c7:3a:ff:
         11:ad:1c:dd:fb:6f:07:cd:c9:e8:26:1f:c6:66:39:77:82:7c:
         51:52:a4:dd:5a:b9:22:d2:69:58:98:ba:4e:41:28:34:f0:e9:
         d1:fd:7c:07:9b:68:19:bd:7c:8d:74:6a:81:5f:a4:f2:c4:6b:
         58:10:b5:12:81:b1:b3:28:f7:83:f6:40:df:6e:de:92:a1:23:
         e5:e3:76:08:c6:90:5d:86:5a:17:29:19:43:47:a5:94:03:f1:
         b3:25:56:40:fc:f7:c1:ea:ce:ac:b9:e2:d3:2c:19:9a:aa:bc:
         6c:01:08:f5:c1:84:1d:9c:84:fb:b5:55:88:67:72:4e:f6:db:
         c9:89:32:0c:63:09:55:21:55:bb:ba:0b:0e:97:c9:cb:ce:13:
         de:48:1b:83:77:c9:af:5f:1c:91:55:60:d6:61:ea:18:91:3b:
         96:33:9c:f5:19:79:75:b8:af:dc:fd:50:55:cf:7f:ea:61:a0:
         37:5a:5b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:53 2024 by rpki-client on console.sobornost.net