Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6AA0D50C320D533B784D03818C756A9E5E447085.cer
File:                     6AA0D50C320D533B784D03818C756A9E5E447085.cer (raw, json)
Hash identifier:          2EMjsc+WU8FJk66jkoThy/1X9GcHKjAuIW4j20qumxk=
Subject key identifier:   6A:A0:D5:0C:32:0D:53:3B:78:4D:03:81:8C:75:6A:9E:5E:44:70:85
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6E4132EAFCA61B006DCDE3F4CF358AABC6E9E065
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/1/6AA0D50C320D533B784D03818C756A9E5E447085.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 21:51:16 +0000
Certificate not after:    Wed 02 Apr 2025 21:56:16 +0000
Subordinate resources:    AS: 265271
                          IP: 168.90.16.0/22
                          IP: 2804:2d48::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:41:32:ea:fc:a6:1b:00:6d:cd:e3:f4:cf:35:8a:ab:c6:e9:e0:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 21:51:16 2024 GMT
            Not After : Apr  2 21:56:16 2025 GMT
        Subject: CN=6AA0D50C320D533B784D03818C756A9E5E447085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ab:e2:77:d9:56:cd:b8:66:38:e4:c0:58:43:
                    3d:7d:14:7b:39:bf:d8:56:59:06:ca:44:92:71:1b:
                    78:fd:31:86:0b:41:23:db:08:a1:39:d4:fc:77:62:
                    96:2b:eb:44:4f:e1:23:83:3c:15:f0:15:e0:93:b6:
                    ad:48:9f:d3:ba:3d:f9:26:e8:8f:dd:8a:06:4e:68:
                    30:de:ff:2c:7d:1a:e1:bf:b6:07:64:0a:37:4f:a2:
                    4b:bc:5d:52:30:1f:a6:5a:7c:a3:b6:f8:2c:06:89:
                    7e:f5:1d:63:5b:a8:66:4a:72:30:10:f1:62:47:71:
                    b0:2b:7e:d4:03:af:05:b3:92:46:0b:48:2b:7e:fa:
                    52:be:ef:bb:f6:97:8a:b6:7b:cb:48:7d:35:cd:b0:
                    27:8a:9c:d3:da:79:e3:c9:a7:22:f2:5b:57:a1:f0:
                    b4:5b:27:68:7b:4b:18:fe:43:55:a1:b1:99:71:2f:
                    43:15:9f:04:c5:72:02:e5:43:37:c8:e3:47:b2:ec:
                    d2:dd:12:71:55:c2:0c:2b:55:ad:54:31:0a:9a:01:
                    de:8a:49:e2:50:de:b8:18:ab:0a:93:23:18:1f:70:
                    7d:f8:3f:92:d1:9b:13:1c:f8:fd:45:42:b0:b8:0e:
                    1a:9b:76:e4:18:64:84:1b:92:32:9b:a3:25:7a:4d:
                    80:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6A:A0:D5:0C:32:0D:53:3B:78:4D:03:81:8C:75:6A:9E:5E:44:70:85
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/1/6AA0D50C320D533B784D03818C756A9E5E447085.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.16.0/22
                IPv6:
                  2804:2d48::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265271

    Signature Algorithm: sha256WithRSAEncryption
         6c:d3:33:a7:d4:91:7b:86:12:48:06:00:7e:b9:03:fc:50:7a:
         b6:52:cb:f2:96:83:72:74:a1:a8:bf:74:75:e3:5c:b9:ba:c0:
         5d:c1:03:a4:1e:e9:04:10:1c:1f:e9:a3:f4:f9:4d:b9:b8:a3:
         8b:92:7c:90:fc:3c:aa:5a:12:b5:e3:c0:0a:58:a3:34:40:a4:
         6d:99:5b:24:82:30:7e:6e:02:5b:45:d5:55:bc:85:c8:84:5e:
         2f:3a:3e:72:e2:a2:22:f5:34:07:6d:59:9c:a3:65:0d:45:92:
         6c:40:3e:18:07:d0:25:18:aa:07:88:7f:3f:0f:f7:59:4f:95:
         fe:7a:e1:68:ee:01:3d:b0:81:2e:b4:dd:47:cd:a9:08:e4:0e:
         cf:46:7b:de:b7:fc:cf:d7:4d:cf:27:f0:19:cb:cf:7f:c0:57:
         53:a7:f1:84:35:a0:1f:8b:d5:b4:b1:a0:d4:bb:ae:d0:c3:77:
         22:79:77:0e:30:a5:23:ed:f2:c0:2e:35:3f:3c:fc:27:b9:c1:
         18:fd:29:08:1e:28:f1:ca:64:de:39:f9:10:7f:cb:84:55:2f:
         f4:84:08:38:3d:7e:8d:f1:26:60:46:11:be:62:37:dd:b8:9f:
         13:34:5a:45:d7:e3:40:a3:76:c2:6e:34:d3:53:a3:09:91:6f:
         48:ab:0e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:59 2024 by rpki-client on console.sobornost.net