Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7ED7FB77C6430C0662EFBB0086DC22532C394D9F.cer
File:                     7ED7FB77C6430C0662EFBB0086DC22532C394D9F.cer (raw, json)
Hash identifier:          mLO2W8+KTWY8c07Ct/YE/8y9b6h4HoxlGx9eQNC1KNQ=
Subject key identifier:   7E:D7:FB:77:C6:43:0C:06:62:EF:BB:00:86:DC:22:53:2C:39:4D:9F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       01A0D4265116454B7C8C5DFBD6DB913EE07D061E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HFeC61ypvTMds8UMuZPpgA3ijbqr51LqjWcfgFo5BQip/0/7ED7FB77C6430C0662EFBB0086DC22532C394D9F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HFeC61ypvTMds8UMuZPpgA3ijbqr51LqjWcfgFo5BQip/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Jul 2024 17:59:25 +0000
Certificate not after:    Mon 30 Jun 2025 18:04:25 +0000
Subordinate resources:    AS: 265033
                          AS: 268378
                          IP: 45.239.248.0/22
                          IP: 170.150.124.0/22
                          IP: 2804:31b8::/32
                          IP: 2804:5044::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:26:51:16:45:4b:7c:8c:5d:fb:d6:db:91:3e:e0:7d:06:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  1 17:59:25 2024 GMT
            Not After : Jun 30 18:04:25 2025 GMT
        Subject: CN=7ED7FB77C6430C0662EFBB0086DC22532C394D9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:15:78:84:58:72:0b:96:85:11:d1:87:b9:28:
                    00:47:59:a8:a5:b2:c4:a8:0b:ce:06:6e:ad:fe:3d:
                    1e:d3:a4:b3:3c:b0:1e:ea:91:b2:0f:87:83:d0:d8:
                    7b:d1:e6:96:a5:77:92:10:f3:33:90:ca:98:67:c5:
                    fc:ad:ac:94:54:f5:45:9a:de:d2:f1:1f:43:af:8f:
                    9f:2e:0e:28:00:4a:9a:3f:cb:9f:98:09:6a:93:5c:
                    68:e3:50:80:a7:07:8d:7a:31:39:72:3c:53:4a:eb:
                    fd:d7:66:8d:f0:2a:05:9b:ec:a3:f0:5e:ba:ce:de:
                    2b:54:0c:a9:78:65:49:00:98:0e:03:c9:3f:da:20:
                    04:d4:52:74:55:77:cf:fb:6e:64:07:18:a1:3f:30:
                    ea:42:51:32:2d:e1:4b:ae:53:d4:3d:e4:b4:40:f1:
                    e7:21:f2:39:4a:81:ea:88:fa:74:ef:0c:f7:31:aa:
                    01:f0:fa:3e:5a:d1:57:e9:fd:68:1f:54:bf:e1:54:
                    ca:38:3c:ea:6e:aa:52:d3:0c:9f:59:b4:b7:52:2b:
                    54:2a:8e:2d:ba:e0:e1:df:10:df:63:a3:0a:5d:69:
                    f9:88:be:cc:0e:ac:43:c0:d9:e6:cc:71:90:eb:97:
                    00:78:7b:ea:49:0a:1d:e4:a0:e3:56:6c:f8:eb:4d:
                    25:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7E:D7:FB:77:C6:43:0C:06:62:EF:BB:00:86:DC:22:53:2C:39:4D:9F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HFeC61ypvTMds8UMuZPpgA3ijbqr51LqjWcfgFo5BQip/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HFeC61ypvTMds8UMuZPpgA3ijbqr51LqjWcfgFo5BQip/0/7ED7FB77C6430C0662EFBB0086DC22532C394D9F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.248.0/22
                  170.150.124.0/22
                IPv6:
                  2804:31b8::/32
                  2804:5044::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265033
                  268378

    Signature Algorithm: sha256WithRSAEncryption
         93:a9:e5:2e:ab:f3:99:5e:71:e6:4d:cd:4c:1e:83:35:ba:bd:
         d3:ce:a2:8d:9d:25:4b:40:42:55:95:41:4f:ae:45:3a:31:fb:
         3c:03:6b:75:64:2a:df:cd:f2:fd:57:b3:90:b3:d5:81:07:8f:
         f1:5d:4c:c3:07:4a:66:37:9d:3d:86:f3:84:fc:0c:17:72:3b:
         e6:c2:e0:3d:d8:d6:76:a0:8d:63:0c:a2:0a:6d:b9:34:3d:04:
         b1:31:f9:b1:c3:f2:c6:b1:d2:be:83:b5:95:11:e4:70:1c:6c:
         1e:e9:63:51:31:8d:8a:71:6f:d4:ad:f1:a8:2a:13:c6:b0:2b:
         9b:ac:46:8f:76:73:d5:b5:39:a2:ab:27:44:30:97:b6:af:c8:
         6c:b3:8d:ee:6a:85:90:4c:5b:be:42:db:7b:c1:6b:60:f7:f3:
         06:6d:51:bf:01:6d:31:80:00:39:77:1b:f2:df:ff:a8:40:a9:
         c0:f5:8f:dd:7d:06:e3:21:65:1b:28:2d:fb:a7:90:94:26:28:
         5c:ea:7e:28:b2:14:96:60:54:0d:70:bd:b4:6f:61:55:d8:c5:
         4d:8a:da:56:24:1f:8e:1c:4d:6b:d8:51:f9:65:1a:f5:1f:07:
         2b:95:08:f7:f8:d3:20:56:cb:75:77:78:71:cf:b6:3e:75:c6:
         c9:3f:e7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:02 2024 by rpki-client on console.sobornost.net