Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.cer
File:                     7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.cer (raw, json)
Hash identifier:          7ZX7YGMosapBbz6L1E5XsgJKierERHsJChQ3Hvus7Zk=
Subject key identifier:   7E:29:AE:C3:29:9A:DB:B9:DF:46:C4:66:56:23:FD:44:CD:D5:C2:19
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       272C89C7B388754ACED664AE22255EB80DFAA57A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 19 Aug 2024 07:09:39 +0000
Certificate not after:    Mon 18 Aug 2025 07:14:39 +0000
Subordinate resources:    AS: 262523
                          IP: 138.204.104.0/22
                          IP: 170.83.20.0/22
                          IP: 177.67.176.0/21
                          IP: 2804:590::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:2c:89:c7:b3:88:75:4a:ce:d6:64:ae:22:25:5e:b8:0d:fa:a5:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 19 07:09:39 2024 GMT
            Not After : Aug 18 07:14:39 2025 GMT
        Subject: CN=7E29AEC3299ADBB9DF46C4665623FD44CDD5C219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d5:37:fd:a8:22:a7:bb:46:2a:79:e7:83:16:
                    a2:cd:80:1d:81:60:6a:d9:18:ea:46:1a:4b:51:20:
                    d3:2c:c7:75:18:d8:c6:73:fb:c1:bb:84:29:88:76:
                    a6:d6:aa:ff:cd:eb:32:e7:c5:2b:0d:10:92:5c:28:
                    a6:60:75:33:f2:cd:8b:a2:07:16:1d:14:44:6b:86:
                    96:fc:2c:28:43:c5:48:fd:cc:f5:3c:99:a5:c5:e8:
                    bb:db:0b:b5:e5:5b:81:c9:1b:21:f3:15:e4:df:ce:
                    76:d1:38:7b:35:43:3f:0c:96:db:52:89:4b:08:ca:
                    00:67:49:66:e5:d8:a2:34:03:a4:ad:ce:24:0d:e9:
                    31:eb:30:55:11:71:f8:df:fc:5f:dc:52:c4:b1:40:
                    69:79:70:61:37:0e:1f:af:1f:11:b4:58:22:e3:17:
                    7c:87:a8:3d:95:c6:21:67:cc:89:68:68:5d:12:e3:
                    46:86:e6:59:b0:8c:26:c8:23:23:3e:54:89:fb:3d:
                    9c:d5:ab:85:9f:f6:df:76:c0:f9:a7:e6:aa:71:ab:
                    51:4c:80:bb:ac:d2:18:1f:62:cd:56:ea:8b:a5:cb:
                    01:7c:f9:d8:72:a1:0c:35:aa:6b:fb:69:5f:04:bd:
                    03:ed:ec:74:8d:3b:c0:2d:57:3d:ff:ce:2f:0b:ef:
                    b1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7E:29:AE:C3:29:9A:DB:B9:DF:46:C4:66:56:23:FD:44:CD:D5:C2:19
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.104.0/22
                  170.83.20.0/22
                  177.67.176.0/21
                IPv6:
                  2804:590::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262523

    Signature Algorithm: sha256WithRSAEncryption
         12:0f:cf:da:de:11:9f:07:aa:5e:f1:27:b6:c4:0b:e7:d3:61:
         84:cf:65:a7:bb:ce:c9:fb:66:19:ec:1a:c7:38:a2:bb:d4:2a:
         d2:44:7b:cc:98:76:30:e2:1d:23:7e:86:28:5c:f8:f2:e7:de:
         75:d0:07:e8:2a:27:53:94:ca:42:40:b1:a7:b3:2f:9b:70:30:
         f9:e7:7a:f6:4a:85:bc:6a:c7:9c:d3:f2:11:b2:75:9f:3f:81:
         17:1b:42:cf:7e:86:67:73:55:e7:36:b5:38:f0:85:67:54:a2:
         70:a3:28:67:0f:22:2e:3d:ae:5f:9c:1b:f2:33:fd:81:a6:07:
         fd:8b:f7:58:77:d9:d3:d5:af:cf:43:20:ec:f7:0a:f1:12:75:
         77:d0:db:bd:84:2c:2e:56:bd:37:d9:bf:fa:99:44:54:fa:33:
         14:b1:15:bd:71:12:7e:4b:6b:23:5a:6e:ab:2d:90:ff:14:aa:
         fc:70:9b:e2:45:dc:ac:1a:e7:a3:bf:96:e9:10:9c:08:e8:0e:
         6c:ea:38:02:54:bc:6a:f2:e4:2d:08:5b:b6:11:4e:8b:f2:83:
         7c:5a:9c:26:cb:78:fa:7e:e8:89:1b:ae:be:21:21:b8:5f:68:
         77:7b:b2:a5:01:43:8b:8e:6f:53:22:62:5c:76:b5:bc:92:1a:
         df:ae:04:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:02 2024 by rpki-client on console.sobornost.net