Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/759056D29FFF39251355512175D35C57E1A33318.cer
File:                     759056D29FFF39251355512175D35C57E1A33318.cer (raw, json)
Hash identifier:          G0eo8Aifh0zNFti91OvjiepcEDKlvjAwJdtN8MWwxvA=
Subject key identifier:   75:90:56:D2:9F:FF:39:25:13:55:51:21:75:D3:5C:57:E1:A3:33:18
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3913388240A6A784C37071B4BE70DF7F79022154
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/759056D29FFF39251355512175D35C57E1A33318.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 21 May 2024 12:23:39 +0000
Certificate not after:    Tue 20 May 2025 12:28:39 +0000
Subordinate resources:    AS: 268763
                          IP: 45.172.104.0/22
                          IP: 2804:5a4c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:13:38:82:40:a6:a7:84:c3:70:71:b4:be:70:df:7f:79:02:21:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 21 12:23:39 2024 GMT
            Not After : May 20 12:28:39 2025 GMT
        Subject: CN=759056D29FFF39251355512175D35C57E1A33318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:dd:f7:bc:d0:51:0b:53:3c:36:df:69:80:36:
                    71:d7:54:64:90:e8:0d:10:6d:43:5d:86:d1:8d:cb:
                    77:2e:ce:85:ff:a3:13:6d:c7:cf:5d:0a:75:8c:fb:
                    24:5e:3b:ff:98:64:99:2e:03:e7:2f:e2:4c:73:49:
                    66:cb:fa:e2:80:63:cf:8d:02:8d:ee:5e:55:df:89:
                    5c:c8:f9:cc:58:a2:ae:a6:be:05:1e:92:b8:c3:08:
                    2b:51:ec:9b:96:4b:88:27:cd:53:95:9e:94:0d:0e:
                    83:5b:71:d7:d7:77:64:58:58:4f:b7:ad:93:72:d1:
                    a6:77:25:c6:ab:56:01:50:83:0f:af:be:61:03:78:
                    f0:79:c6:a7:2c:cc:f5:ce:e7:a9:bb:52:74:3f:4a:
                    39:6c:68:98:82:34:42:55:43:f1:64:60:76:c9:76:
                    1b:f0:7c:f2:56:ef:0d:ce:dc:68:b7:ab:38:9e:cb:
                    77:f2:e7:26:ad:6f:ae:fc:25:ee:cd:c1:d3:23:58:
                    37:2e:1c:f8:e8:a0:b5:0e:d9:d8:64:cf:03:07:01:
                    2c:4c:4b:b0:52:f0:c2:c2:b8:4d:68:84:07:8b:ef:
                    6c:04:c4:12:f4:1e:3f:db:fa:5b:bf:6d:c5:b4:92:
                    da:55:c1:5e:87:e5:23:92:a0:5c:1f:f3:94:3e:cb:
                    93:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                75:90:56:D2:9F:FF:39:25:13:55:51:21:75:D3:5C:57:E1:A3:33:18
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/759056D29FFF39251355512175D35C57E1A33318.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.104.0/22
                IPv6:
                  2804:5a4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268763

    Signature Algorithm: sha256WithRSAEncryption
         41:d9:ca:e0:2c:15:5a:d1:22:1e:eb:b4:72:b4:6f:6b:a8:9e:
         41:eb:e6:2b:9d:12:90:f3:92:f5:89:27:f1:85:e9:18:f0:cf:
         97:72:1f:6f:27:ed:67:99:de:7f:f1:36:92:a6:cc:75:d1:eb:
         91:68:39:1a:44:2f:0b:a3:a8:2d:71:e8:ab:b2:3d:0f:03:18:
         c9:ee:d7:c4:ce:4f:4e:03:68:2a:7d:3a:b7:4c:bd:94:bf:75:
         50:71:7a:73:11:6b:9d:91:b9:bf:38:5a:9d:37:8d:09:a9:b3:
         19:c2:c9:82:df:75:87:62:07:b4:99:d6:bb:4a:c0:8e:83:cc:
         46:cc:ac:24:fe:ab:42:15:f6:5a:d4:a7:8e:08:f8:e8:72:fc:
         4a:bd:fe:d2:bc:17:ef:ee:63:1e:e0:82:8c:8d:40:47:f2:0b:
         ea:88:29:36:31:d0:93:1d:5e:4f:4c:46:bc:4e:6b:4e:1a:89:
         55:a4:f4:d7:55:b5:26:7a:06:48:62:7d:a6:0f:9e:16:b6:87:
         58:6d:21:b2:aa:94:4d:e4:72:38:25:35:3a:7a:ec:bf:79:26:
         70:15:61:68:68:16:e8:53:81:a4:f1:d9:27:58:87:83:90:64:
         3b:a9:08:65:c5:07:4f:d8:51:3b:a8:a8:e1:6d:9d:f4:3d:cf:
         47:25:92:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:00 2024 by rpki-client on console.sobornost.net