Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.cer
File:                     5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.cer (raw, json)
Hash identifier:          bXYHosBsLY7qj2aYkYiejCkGzNsGTvYsAcB/3d4s5sg=
Subject key identifier:   5B:D3:91:11:37:57:5E:B9:3C:E8:36:5D:8A:4C:D0:55:1A:4D:9B:E6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       74D51051A3A2B2F0D3DF25559339C736AE1B9E37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 Jul 2024 17:35:52 +0000
Certificate not after:    Tue 29 Jul 2025 17:40:52 +0000
Subordinate resources:    AS: 264500
                          IP: 131.255.228.0/22
                          IP: 2804:2098::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d5:10:51:a3:a2:b2:f0:d3:df:25:55:93:39:c7:36:ae:1b:9e:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 30 17:35:52 2024 GMT
            Not After : Jul 29 17:40:52 2025 GMT
        Subject: CN=5BD3911137575EB93CE8365D8A4CD0551A4D9BE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b5:d8:c9:ac:5b:67:7d:0b:ae:6d:a0:94:c6:
                    93:a0:31:e5:ef:0f:7a:ff:7c:44:58:5c:5e:c1:12:
                    f7:0c:91:01:84:2c:52:3c:eb:ed:30:43:ab:da:a8:
                    93:71:64:ef:7c:d6:66:7f:24:c6:d7:89:63:2c:6d:
                    83:c1:63:dc:99:45:e2:da:04:63:9d:54:f6:fe:d8:
                    08:b8:f4:3e:c3:76:6d:6a:77:17:da:81:7e:e9:56:
                    94:ba:59:1f:f5:bd:16:9a:2d:10:37:cb:2d:75:5d:
                    7f:dc:1b:2b:47:0b:e2:69:ab:9d:fa:5b:6e:f8:8c:
                    84:23:6a:c8:b2:2c:d1:81:0a:fa:ec:65:0f:87:ec:
                    8c:ac:b7:17:e2:59:d8:e4:83:40:71:a4:fd:20:16:
                    b1:8d:05:91:64:61:e0:f3:66:fa:ad:11:77:86:4c:
                    2c:60:f8:8d:65:6e:f8:fd:b2:e4:7f:77:54:1c:5c:
                    f3:fd:80:e9:36:30:bd:62:91:8c:47:40:5d:56:52:
                    29:df:26:ee:fb:a7:aa:81:e8:e0:ce:82:c8:71:6d:
                    b9:af:72:d2:36:50:e1:b1:a9:be:ae:02:c3:56:4a:
                    66:d8:ae:68:4f:9b:a1:c1:dd:e3:ca:fa:a7:dc:cc:
                    ed:f3:44:52:2d:dd:3e:65:65:e5:9a:6d:b9:8d:1d:
                    e2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5B:D3:91:11:37:57:5E:B9:3C:E8:36:5D:8A:4C:D0:55:1A:4D:9B:E6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.228.0/22
                IPv6:
                  2804:2098::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264500

    Signature Algorithm: sha256WithRSAEncryption
         ab:ad:5d:46:13:77:c3:65:3f:da:64:3b:2e:d1:c2:3b:19:b1:
         35:85:d9:f4:ce:e7:11:7b:5c:00:1d:e4:97:5d:3f:fc:7b:40:
         8e:f3:c6:6d:cb:b1:fb:ed:b1:db:51:34:64:fa:e0:f4:2e:5d:
         3c:62:1c:04:e8:56:5e:d9:5c:98:88:f7:ac:f9:9b:6d:5a:41:
         64:e0:65:78:85:16:b8:e2:45:f0:4d:98:cd:3a:d7:75:b8:1a:
         b8:be:19:a2:af:77:53:db:1e:df:f8:8b:83:9f:30:82:2e:67:
         fd:93:88:17:ed:0a:ae:98:4e:55:a6:ee:da:8d:d3:7a:a2:5a:
         a6:4d:19:0c:4f:0c:1a:69:5d:ef:0a:bb:6a:53:e4:d4:35:99:
         15:3f:46:5c:72:81:c8:75:c5:48:df:6b:b9:ee:a9:83:55:e2:
         82:81:db:5e:76:5e:f9:05:5a:b1:45:06:7e:c9:35:b5:55:7e:
         e7:c3:e1:5b:f3:9d:a1:92:a5:0b:f2:6c:8b:2a:89:f0:cc:4b:
         a3:77:8c:16:eb:c5:6c:a5:f3:f9:19:19:e6:5c:ba:da:7a:f1:
         31:b5:0a:ae:f7:96:e6:95:2c:a7:89:bb:c2:70:c9:a6:c0:2a:
         c1:0f:b9:46:84:b9:94:4f:c2:1e:79:66:88:50:2e:4b:ac:a3:
         29:d7:e3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:56 2024 by rpki-client on console.sobornost.net