Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.cer
File:                     63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.cer (raw, json)
Hash identifier:          d6lJIU8xN9lt+sOvLIwpeEVM6/mYkACTZVU8oi2wFSE=
Subject key identifier:   63:BA:71:C4:9B:8F:75:EE:06:09:18:10:73:EF:8E:8C:D5:E9:9A:D6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       10F38AB9144DD95A9186B27D94DE2D061FAB1924
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:26:19 +0000
Certificate not after:    Wed 02 Apr 2025 18:31:19 +0000
Subordinate resources:    AS: 269319
                          IP: 45.183.48.0/22
                          IP: 2804:62cc::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f3:8a:b9:14:4d:d9:5a:91:86:b2:7d:94:de:2d:06:1f:ab:19:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:26:19 2024 GMT
            Not After : Apr  2 18:31:19 2025 GMT
        Subject: CN=63BA71C49B8F75EE0609181073EF8E8CD5E99AD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:11:c5:0d:85:03:5f:3a:e6:70:4c:ec:59:95:
                    cc:77:60:90:df:47:61:24:85:95:1d:a3:5d:e3:5d:
                    05:08:6f:4b:e6:69:e7:0b:3a:e2:26:f4:b9:ee:ab:
                    fb:e1:4c:65:e9:16:7c:92:7e:f9:5a:4f:99:c1:51:
                    59:c9:5e:c8:e0:b9:4a:b4:91:d4:b9:f1:3a:61:3f:
                    e0:07:96:8f:95:f8:fd:2e:b4:4d:e4:22:8b:3f:11:
                    5a:da:35:ef:24:57:dc:06:f7:d5:4f:b4:88:d7:6b:
                    76:5d:dd:61:b3:53:ed:a8:ab:5e:3e:b2:ea:b9:cb:
                    3b:c4:3d:ed:0e:a9:26:bd:e3:7b:75:06:57:47:10:
                    3c:12:f1:ba:13:1d:64:15:84:45:79:13:52:b5:87:
                    4c:84:42:dd:42:92:f9:7d:85:b3:1c:1d:ce:b7:14:
                    c5:ed:cc:c4:72:ba:a2:71:28:d9:09:d1:2a:b7:8f:
                    01:9e:83:39:e9:c6:33:46:38:09:78:52:88:e1:ec:
                    51:f1:2a:26:ec:9a:b0:ea:e3:71:2c:0b:05:30:a3:
                    75:7a:96:e8:cf:05:9d:8c:d6:00:2a:a0:2d:3e:99:
                    78:99:a6:a9:9c:2b:0b:b3:db:f0:7a:79:71:18:5d:
                    fd:bb:94:3a:0a:cb:87:33:23:12:4b:1a:22:ac:73:
                    50:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                63:BA:71:C4:9B:8F:75:EE:06:09:18:10:73:EF:8E:8C:D5:E9:9A:D6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.48.0/22
                IPv6:
                  2804:62cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269319

    Signature Algorithm: sha256WithRSAEncryption
         ad:35:e9:cd:af:89:cf:f1:b3:18:48:88:28:1d:57:61:46:c2:
         c5:41:2a:f5:1c:d1:6e:d1:e9:bc:e9:35:52:ce:27:0f:5a:6a:
         82:d8:32:fa:6d:23:50:c9:25:37:0b:3d:79:38:a4:20:b1:01:
         45:68:6c:ca:7f:f0:37:e3:59:54:9b:2c:82:85:26:f1:d3:e9:
         28:29:cc:07:f4:01:1b:86:34:76:48:9d:52:b9:39:18:10:50:
         ef:2a:4d:12:86:44:8e:33:29:a8:cf:f8:54:8b:28:f1:0a:2f:
         a2:76:0a:e0:05:68:67:83:00:df:0f:d0:45:db:79:c5:d9:24:
         66:ba:7a:4f:4c:43:7e:18:7a:5c:46:4a:bb:34:e1:dc:4d:f1:
         1a:13:95:9d:18:7f:b5:7f:0f:a3:13:3f:d7:93:27:76:9b:0c:
         b8:d9:29:4b:27:92:27:0d:27:b4:53:32:28:f5:b3:10:a7:b8:
         d8:72:65:24:52:e6:8f:0d:04:dc:05:5a:8e:e3:b8:61:9d:57:
         32:8a:e4:02:4a:c6:31:78:c6:7e:5e:62:d3:2b:93:8c:51:12:
         b0:b0:dd:8e:df:11:fe:14:36:62:ba:55:79:1c:c2:62:00:85:
         e6:ff:b6:ed:2c:a7:2f:ae:44:e0:3d:ad:9a:5e:57:dc:93:fa:
         ee:c7:c8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:57 2024 by rpki-client on console.sobornost.net