Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9741D1A029B32962563B5C5BA3B3C73B198E65B4.cer
File:                     9741D1A029B32962563B5C5BA3B3C73B198E65B4.cer (raw, json)
Hash identifier:          znKS/jqr7aUoEKQsHiBHPg4QmpV/a44vo75r2WMVfVg=
Subject key identifier:   97:41:D1:A0:29:B3:29:62:56:3B:5C:5B:A3:B3:C7:3B:19:8E:65:B4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       116722D9D32BAEC8A31842206F2A2C3A89E25457
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/9741D1A029B32962563B5C5BA3B3C73B198E65B4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Jul 2024 14:04:33 +0000
Certificate not after:    Wed 02 Jul 2025 14:09:33 +0000
Subordinate resources:    AS: 263544
                          IP: 143.0.48.0/22
                          IP: 168.227.84.0/22
                          IP: 170.78.248.0/22
                          IP: 191.5.240.0/20
                          IP: 2804:13a8::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:67:22:d9:d3:2b:ae:c8:a3:18:42:20:6f:2a:2c:3a:89:e2:54:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  3 14:04:33 2024 GMT
            Not After : Jul  2 14:09:33 2025 GMT
        Subject: CN=9741D1A029B32962563B5C5BA3B3C73B198E65B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:40:52:f7:b8:da:94:bc:87:27:18:ac:ee:bf:
                    eb:84:51:82:d7:26:1d:f7:ca:ca:34:c4:d5:ff:99:
                    0f:be:15:ad:7a:44:4c:3d:8c:21:21:52:85:d2:23:
                    02:65:ad:e4:e7:9b:44:09:12:79:b7:89:78:0a:c0:
                    0f:15:32:3a:97:ab:fa:f5:21:1c:23:a8:a1:d5:ba:
                    45:2e:8e:4a:72:7b:60:79:1d:36:4b:16:4b:d7:2d:
                    f3:64:9a:38:46:d7:2c:27:c3:46:39:c0:b7:f1:17:
                    b4:d8:ce:72:1c:7c:0d:6d:c9:33:52:ea:ac:b3:88:
                    63:78:4c:65:40:0d:01:ed:54:1b:73:45:48:aa:cd:
                    3c:4f:69:7a:dc:12:99:de:81:07:85:d1:c0:37:67:
                    0f:7b:e9:57:8f:ac:6b:35:a2:67:98:a2:f4:09:75:
                    72:fb:8f:65:65:e8:eb:4c:2a:6a:bf:61:7d:74:e3:
                    4b:5c:43:f3:c1:62:2f:40:e7:a6:f9:6f:36:e0:53:
                    27:30:98:cf:bb:31:e8:74:06:3b:d2:15:63:3f:c1:
                    8b:1d:74:f1:09:31:f5:02:d6:12:0a:61:e8:aa:e4:
                    87:fa:63:9c:0b:18:ce:ca:6e:62:1b:22:6e:64:74:
                    ac:7c:e4:be:30:27:87:62:30:b4:77:64:7d:c3:55:
                    ee:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:41:D1:A0:29:B3:29:62:56:3B:5C:5B:A3:B3:C7:3B:19:8E:65:B4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/9741D1A029B32962563B5C5BA3B3C73B198E65B4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.48.0/22
                  168.227.84.0/22
                  170.78.248.0/22
                  191.5.240.0/20
                IPv6:
                  2804:13a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263544

    Signature Algorithm: sha256WithRSAEncryption
         81:23:57:f5:4a:5c:56:43:42:51:c1:af:e1:0f:a7:35:7f:c8:
         09:e6:f0:ff:3c:53:00:67:a1:06:99:7f:b1:1d:4f:74:61:70:
         52:b7:f2:e7:c7:d3:e0:e8:c4:46:1c:1b:5b:e2:a4:e1:44:fa:
         cb:ae:4b:46:97:ad:2b:e9:cc:cc:5e:24:77:99:50:ba:33:ec:
         9e:6e:14:9d:25:88:7e:90:50:6e:8c:aa:18:c9:ed:f0:d9:47:
         8f:a9:f9:25:33:0a:17:09:99:dc:c9:46:89:3a:59:f9:7b:98:
         a5:0f:de:c6:e1:84:aa:0c:18:17:56:14:14:4c:c4:02:05:de:
         a8:c5:7d:54:bb:d4:97:82:73:7a:af:4c:26:59:31:af:07:7b:
         f4:78:96:8b:86:66:12:4c:35:53:46:8b:66:70:61:1d:86:ba:
         fd:39:40:de:8f:f1:b1:bf:cd:eb:6c:04:4f:3b:d9:d7:a5:33:
         df:79:7d:39:21:f2:12:85:6c:aa:a0:bd:fd:ba:9f:2e:16:9e:
         ed:a7:be:fe:c1:cc:15:a3:57:d3:bf:63:9e:a4:48:be:ef:ec:
         af:3b:d3:5c:bc:ca:79:11:65:ec:08:6b:f2:32:5c:d8:87:e4:
         bb:9b:34:5b:d1:a3:c3:f6:75:b0:cd:73:a4:5d:6f:08:4e:15:
         46:5b:e9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:06 2024 by rpki-client on console.sobornost.net