Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4E335352EA63CE855FDA3B777EA08D10359B7B71.cer
File:                     4E335352EA63CE855FDA3B777EA08D10359B7B71.cer (raw, json)
Hash identifier:          7NwCx9TUhnwjfUAC7CBG0YHmDL69oKcmY9oGtI1yw8Y=
Subject key identifier:   4E:33:53:52:EA:63:CE:85:5F:DA:3B:77:7E:A0:8D:10:35:9B:7B:71
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0753C00BB4F2D707CDD64DED727FF57189552419
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/1/4E335352EA63CE855FDA3B777EA08D10359B7B71.mft
caRepository:             rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 13 Aug 2024 21:00:11 +0000
Certificate not after:    Tue 12 Aug 2025 21:05:11 +0000
Subordinate resources:    AS: 263047
                          IP: 45.174.140.0/22
                          IP: 45.188.224.0/22
                          IP: 177.129.208.0/21
                          IP: 186.237.24.0/22
                          IP: 187.61.112.0/21
                          IP: 191.243.144.0/20
                          IP: 2804:908::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:53:c0:0b:b4:f2:d7:07:cd:d6:4d:ed:72:7f:f5:71:89:55:24:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 13 21:00:11 2024 GMT
            Not After : Aug 12 21:05:11 2025 GMT
        Subject: CN=4E335352EA63CE855FDA3B777EA08D10359B7B71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4e:ce:be:3f:40:7f:d3:9a:25:04:de:be:b0:
                    47:79:34:12:84:62:d4:6d:2d:e5:e8:ff:57:9a:2c:
                    28:3d:eb:51:22:39:a5:f1:6e:43:49:ed:df:76:1b:
                    dd:d4:0d:ad:c2:08:51:ee:8f:36:df:a1:f9:14:ae:
                    74:a5:2e:86:dc:7c:c0:bb:83:69:c2:6c:f7:c2:d2:
                    12:8d:07:3c:2d:4f:e7:9e:da:bc:4b:00:82:67:0d:
                    ce:3e:c4:a1:42:ee:7d:ec:b8:8f:61:56:3d:08:11:
                    33:b4:12:5b:ce:29:1f:32:6f:e6:4d:36:1b:6f:17:
                    a7:3e:6e:b0:89:17:34:56:5d:91:89:48:aa:87:54:
                    6b:b1:6e:be:56:bb:3a:1f:5d:da:03:e6:d4:2e:48:
                    af:bf:d2:24:b8:94:55:85:a6:de:ea:d6:e4:7a:76:
                    a0:e9:c0:3a:c9:47:a0:f8:50:7f:76:5a:fa:b6:27:
                    8c:de:2c:85:47:ba:ff:60:27:7a:8c:93:07:64:9d:
                    6c:d2:88:12:f3:b3:3f:d0:46:10:00:bb:2c:fe:4c:
                    26:31:cc:1c:4f:e8:ed:e3:1a:08:dd:21:55:41:6a:
                    f5:8c:20:bb:41:7d:8d:5c:a8:2f:d6:fa:7d:40:66:
                    aa:1f:ca:1e:31:d1:95:35:c7:a6:cd:10:3d:5d:11:
                    3b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4E:33:53:52:EA:63:CE:85:5F:DA:3B:77:7E:A0:8D:10:35:9B:7B:71
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/1/4E335352EA63CE855FDA3B777EA08D10359B7B71.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.140.0/22
                  45.188.224.0/22
                  177.129.208.0/21
                  186.237.24.0/22
                  187.61.112.0/21
                  191.243.144.0/20
                IPv6:
                  2804:908::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263047

    Signature Algorithm: sha256WithRSAEncryption
         6c:77:59:7c:c4:e7:dd:f9:b3:d6:a9:e8:23:48:63:0a:e1:3b:
         a4:6a:84:3d:bc:57:52:bd:e4:a6:8b:e0:9c:71:8f:49:6f:f7:
         8a:06:d3:27:8d:0a:3f:64:aa:ec:9b:11:a2:60:9b:ba:de:27:
         79:a0:6a:72:f1:2f:56:c6:19:d4:ef:93:0d:38:15:50:c6:54:
         80:dc:d1:6c:cf:42:83:b2:2f:32:06:73:0d:00:90:2e:bc:07:
         ba:1c:2c:7d:5a:db:de:0b:e5:57:38:0f:7f:6d:a2:95:74:96:
         02:b3:7f:c1:55:f5:41:d4:c5:e9:1b:84:fc:34:61:47:4d:3e:
         05:99:99:8f:69:23:5d:f0:73:19:a4:c1:84:09:1c:ae:c7:d8:
         da:01:34:3e:03:a0:23:f8:31:d9:d7:54:9d:5a:55:b8:d6:19:
         ee:e5:3f:3d:2a:c5:31:12:0c:fd:5b:c8:8b:9a:9d:ce:29:39:
         b6:55:02:e7:3c:53:b1:66:55:dd:47:2a:db:31:c6:38:b7:fb:
         80:a6:4c:0d:3f:30:77:59:72:96:61:38:d8:6b:80:e7:57:4e:
         db:5d:61:bf:5a:34:5d:36:d6:64:04:50:20:3a:d7:c0:23:fa:
         1c:68:12:d9:38:70:6a:b4:1f:71:75:69:99:92:d7:ed:97:6c:
         6e:b3:22:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:54 2024 by rpki-client on console.sobornost.net