Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5E14615AF9BB8C45FA824EF311E6AE526A7C5B32.cer
File:                     5E14615AF9BB8C45FA824EF311E6AE526A7C5B32.cer (raw, json)
Hash identifier:          TGdTJUGjZY8E491NWoh5Bffgub0nuJ3y3Okdl1LREcs=
Subject key identifier:   5E:14:61:5A:F9:BB:8C:45:FA:82:4E:F3:11:E6:AE:52:6A:7C:5B:32
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1834E27DB481BE8182A65AB58F237B715D927E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/5E14615AF9BB8C45FA824EF311E6AE526A7C5B32.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 Jul 2024 18:52:30 +0000
Certificate not after:    Tue 22 Jul 2025 18:57:30 +0000
Subordinate resources:    AS: 265432
                          IP: 45.173.180.0/24
                          IP: 45.180.115.0/24
                          IP: 143.202.56.0/22
                          IP: 168.195.208.0/23
                          IP: 168.195.211.0/24
                          IP: 200.9.144.0/24
                          IP: 2804:3408::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:34:e2:7d:b4:81:be:81:82:a6:5a:b5:8f:23:7b:71:5d:92:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 23 18:52:30 2024 GMT
            Not After : Jul 22 18:57:30 2025 GMT
        Subject: CN=5E14615AF9BB8C45FA824EF311E6AE526A7C5B32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ee:b8:ce:24:ab:5e:61:4b:0b:33:f3:93:6f:
                    74:1f:13:29:83:c9:5b:ff:e9:39:e0:cb:1f:2c:98:
                    21:47:f2:ad:c9:10:5f:36:6c:6e:c7:41:1b:c6:f3:
                    00:85:cd:8a:15:b3:57:7e:2e:f4:30:65:1c:ae:3d:
                    bf:ec:ec:0c:96:67:43:5b:88:87:91:a4:09:62:a0:
                    22:de:d9:05:d9:bf:b0:01:f1:40:67:05:db:36:86:
                    cb:5e:82:b4:38:8a:3d:37:73:e0:e7:3c:89:79:05:
                    d8:3f:8d:23:64:f4:0f:4b:02:32:49:bc:cf:e7:01:
                    6b:14:97:f7:3c:15:87:dc:91:7a:36:2c:14:b5:ba:
                    9f:37:54:1a:a4:a5:51:46:d3:1b:33:8f:09:86:fb:
                    d2:3c:d6:a9:15:c5:86:c8:04:ac:b9:c1:5c:91:c5:
                    24:da:a7:42:58:15:3f:f3:ea:5d:ab:35:47:20:ee:
                    0e:34:e3:6f:19:75:32:73:de:71:61:5d:0a:29:e6:
                    ae:15:b9:f6:b5:60:13:38:c4:89:26:14:fb:ff:2c:
                    c9:d3:ba:80:53:03:2b:16:74:62:1f:57:9c:27:8d:
                    33:b1:c6:f5:f9:a7:95:f6:0c:b3:17:90:6d:5d:6a:
                    5d:a4:f5:33:12:3d:92:85:41:9e:e1:9a:bb:ef:86:
                    7e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5E:14:61:5A:F9:BB:8C:45:FA:82:4E:F3:11:E6:AE:52:6A:7C:5B:32
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/5E14615AF9BB8C45FA824EF311E6AE526A7C5B32.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.180.0/24
                  45.180.115.0/24
                  143.202.56.0/22
                  168.195.208.0/23
                  168.195.211.0/24
                  200.9.144.0/24
                IPv6:
                  2804:3408::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265432

    Signature Algorithm: sha256WithRSAEncryption
         57:a2:87:09:05:dd:7c:68:4f:a2:bf:00:fe:1c:54:6c:61:d4:
         79:4e:f1:44:be:cf:63:2d:2f:4e:3e:6a:db:40:06:e4:1c:b8:
         c4:4e:57:54:45:6c:7a:46:ce:19:a4:32:af:7b:84:16:f4:ce:
         77:cc:26:16:75:22:db:03:9d:67:70:96:d3:37:14:fa:a4:cd:
         13:6b:bb:0e:11:b0:4a:7c:25:2a:fb:e6:a0:8b:f4:cb:15:b4:
         65:7b:02:88:1f:b9:17:14:32:79:19:19:fc:d1:4d:6c:68:7a:
         4a:cc:61:5b:37:c3:f0:9f:23:0d:fc:88:d1:aa:4e:c3:f6:10:
         86:16:50:8c:e3:62:3a:42:65:64:16:9c:44:d4:42:4e:b9:d4:
         8f:ab:bd:cf:48:48:2d:09:17:bd:64:20:78:75:0f:51:a6:4f:
         a9:f7:46:b3:17:aa:ca:eb:4a:54:2a:52:ce:1c:9d:cc:3d:b1:
         d0:33:11:16:2d:62:e8:ae:9b:4b:63:63:a9:77:9d:e9:cd:35:
         10:5b:ff:f1:d5:79:22:14:28:f0:ec:95:c5:a9:25:41:3d:e7:
         f5:69:66:ec:9e:2f:9c:a6:72:dc:47:4b:84:29:d8:f6:22:11:
         a3:9a:3f:75:d0:a1:12:bb:ba:45:99:9d:b7:4b:a7:19:b5:d2:
         5d:70:ef:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:56 2024 by rpki-client on console.sobornost.net