Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A549402556B1273F8A3031E620C960AD6F9EF416.cer
File:                     A549402556B1273F8A3031E620C960AD6F9EF416.cer (raw, json)
Hash identifier:          OkVvDriiXwtYa6lzhMJo2HRT61bEbZ+AsmjpLPTuC5o=
Subject key identifier:   A5:49:40:25:56:B1:27:3F:8A:30:31:E6:20:C9:60:AD:6F:9E:F4:16
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       14862B92B7D714715EF5FD4D501868971512CCB3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/A549402556B1273F8A3031E620C960AD6F9EF416.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 02 Oct 2024 14:57:33 +0000
Certificate not after:    Wed 01 Oct 2025 15:02:33 +0000
Subordinate resources:    AS: 263887
                          IP: 138.204.128.0/22
                          IP: 2804:2740::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:86:2b:92:b7:d7:14:71:5e:f5:fd:4d:50:18:68:97:15:12:cc:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  2 14:57:33 2024 GMT
            Not After : Oct  1 15:02:33 2025 GMT
        Subject: CN=A549402556B1273F8A3031E620C960AD6F9EF416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c4:72:38:65:20:27:9c:43:10:6f:36:f0:23:
                    54:80:88:2e:08:3d:80:5f:69:5a:9e:ff:07:c8:95:
                    a2:65:ff:8c:3d:e9:1f:45:2c:bb:ea:0e:65:85:07:
                    fa:0b:43:e1:a2:1b:b6:f4:84:7e:58:b7:c0:f9:fd:
                    a6:61:ae:1f:a5:c3:88:fa:7a:92:dd:f5:6c:0b:47:
                    ee:51:a7:c4:62:dd:e9:56:b1:c7:d2:6e:1a:7b:ae:
                    03:83:c0:6e:d6:63:56:0a:7a:a1:68:42:ad:fa:80:
                    89:78:f1:37:b7:d6:1a:d8:ab:fd:0d:5b:ae:6c:67:
                    c0:97:19:ac:cf:fe:ad:1b:24:8f:d5:17:6e:6d:6e:
                    b9:1d:41:59:37:69:19:f5:0c:53:0f:40:9c:1f:30:
                    13:90:8e:96:63:c6:99:01:97:4c:b1:a9:aa:89:f8:
                    85:99:50:77:bf:da:8b:ef:77:19:2d:43:3d:44:ad:
                    2f:3e:2c:ce:e9:66:ed:77:91:74:27:72:c8:7d:42:
                    3f:27:7d:21:02:fe:7f:13:f8:16:58:95:3e:16:86:
                    cf:ed:0f:a7:b0:09:63:a1:7a:e6:dc:cd:0e:bf:e1:
                    04:13:5c:06:bd:a0:18:f0:11:29:ea:6d:0b:da:10:
                    fd:30:25:2e:ff:11:13:be:47:94:9e:d8:ba:83:08:
                    b9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A5:49:40:25:56:B1:27:3F:8A:30:31:E6:20:C9:60:AD:6F:9E:F4:16
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/A549402556B1273F8A3031E620C960AD6F9EF416.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.128.0/22
                IPv6:
                  2804:2740::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263887

    Signature Algorithm: sha256WithRSAEncryption
         2d:1e:81:37:17:67:45:e9:2b:e2:1f:e4:4c:69:94:67:24:38:
         5f:81:6d:0c:f4:39:f8:83:4c:00:81:5d:95:73:01:c9:e1:73:
         a0:f7:f4:2f:13:a5:1d:ec:f6:3e:fb:b3:87:2b:32:23:87:de:
         ce:25:03:11:e3:7a:fb:82:20:22:25:8d:77:73:b6:91:c6:22:
         79:98:a0:b6:f8:80:31:96:82:98:b8:42:9a:97:f3:34:06:1d:
         27:ef:13:f5:9d:f9:0c:6c:84:f2:bd:53:fb:6e:8e:07:34:d6:
         19:2c:f0:90:84:2a:cc:fd:9f:d8:ab:82:c7:97:e4:fa:60:40:
         e6:a0:47:39:2c:41:69:a4:54:d0:79:c5:c1:a0:b7:2a:76:b7:
         dd:ae:67:c5:93:f3:9c:d4:a9:ca:06:b1:c4:8d:cb:d4:7b:bf:
         07:94:20:85:f4:53:a4:94:18:9f:74:b9:b6:86:ef:4c:25:d2:
         fe:ab:e7:72:ff:5c:9e:7f:19:18:ea:32:f5:bb:72:f7:a9:ca:
         fd:c2:aa:59:c6:0b:1e:db:c4:a9:ed:cb:9a:eb:9c:62:2b:9c:
         83:58:09:e3:85:55:95:d2:6b:4a:c3:32:be:25:bc:9c:e7:91:
         c2:44:ad:71:c3:fe:f0:f8:c0:24:fb:24:d2:1c:5b:0a:c6:6e:
         13:0f:11:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:08 2024 by rpki-client on console.sobornost.net