Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.cer
File:                     A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.cer (raw, json)
Hash identifier:          F8qfASw67aCKF+0OCm8PG0Rr/lLmYXvvvFLtw+6H79s=
Subject key identifier:   A6:53:12:DF:E9:3D:F2:E9:A1:10:9A:17:CD:E8:A7:C0:7F:71:F2:B4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       317CD14DB5622FE8FD9B0FA136CF7CF1D1C985A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 04:12:48 +0000
Certificate not after:    Thu 03 Apr 2025 04:17:48 +0000
Subordinate resources:    AS: 266968
                          IP: 45.226.148.0/22
                          IP: 2804:4618::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:7c:d1:4d:b5:62:2f:e8:fd:9b:0f:a1:36:cf:7c:f1:d1:c9:85:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 04:12:48 2024 GMT
            Not After : Apr  3 04:17:48 2025 GMT
        Subject: CN=A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:64:92:9b:73:b4:d4:37:e7:a1:ee:83:3c:05:
                    11:9c:9e:58:5a:9d:e6:a4:d4:78:dc:01:75:62:de:
                    1b:db:b1:00:28:03:b9:73:66:e7:b7:59:1d:ea:ca:
                    28:65:c0:20:b6:56:3d:3a:57:b5:eb:16:96:d8:60:
                    4d:30:c0:94:29:a1:28:29:95:d1:c6:f1:4b:87:20:
                    09:82:ee:c8:7f:63:70:b4:74:36:fc:4a:50:b8:e2:
                    f5:51:c1:4b:c5:64:90:d5:70:d2:c1:be:10:81:d1:
                    cf:64:8c:d3:09:20:2f:21:91:de:d4:65:41:96:af:
                    aa:58:3b:a6:f4:0d:1b:d7:fe:c8:84:b6:ab:c7:1b:
                    10:dc:c1:8a:ab:fb:f0:28:b3:c0:3f:86:05:64:0f:
                    e4:af:de:fd:8b:db:71:15:4a:5f:0a:d0:47:ec:ff:
                    be:b5:2c:96:6b:e3:c4:91:32:25:68:de:a7:47:5c:
                    fb:9d:2c:fd:98:6f:e8:b8:8f:8e:2c:b2:a6:0e:39:
                    c4:c2:cc:49:38:ff:fd:a2:f5:fc:4c:cd:09:f8:b1:
                    a1:1a:46:e6:ad:fc:09:9a:8c:b5:78:29:23:51:b5:
                    04:c6:5b:b3:67:b2:df:c7:96:a0:07:38:8a:49:0f:
                    93:1b:cb:ed:c3:68:9f:7e:7d:e4:8d:d3:c1:a3:d2:
                    68:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A6:53:12:DF:E9:3D:F2:E9:A1:10:9A:17:CD:E8:A7:C0:7F:71:F2:B4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.148.0/22
                IPv6:
                  2804:4618::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266968

    Signature Algorithm: sha256WithRSAEncryption
         8e:86:c4:9a:3a:48:d1:3d:45:50:63:3e:d0:72:f1:42:33:88:
         38:db:da:96:14:cb:27:62:73:1b:e5:c0:f0:0a:f9:eb:30:72:
         54:38:64:ed:17:61:d6:90:a1:cf:20:14:16:73:f5:81:44:3f:
         18:16:2c:04:83:8d:44:6d:bf:db:46:2a:3c:94:0a:1a:9c:45:
         56:fd:c7:f2:41:b0:af:11:2e:4c:c8:6b:62:1d:18:21:2a:58:
         8b:97:36:91:0a:7a:38:69:ca:af:c9:7e:6e:65:4d:77:8a:96:
         78:17:bd:af:42:78:c1:24:81:07:fb:91:94:26:a3:c0:eb:94:
         b9:48:37:dd:bb:0c:68:c0:eb:d8:2c:a4:82:bc:35:e3:96:6e:
         95:3a:36:97:02:39:d0:24:33:cc:f7:50:a4:be:78:a0:f7:bb:
         56:90:23:9c:53:86:fe:6d:c3:d9:7d:ed:7d:69:f3:09:83:6d:
         ce:c0:c8:81:a9:5e:a0:11:19:c9:62:36:e5:e8:d3:42:82:36:
         b7:46:5f:7d:e5:ef:12:19:32:26:cc:22:43:3d:d6:b3:c9:27:
         31:5d:56:9f:ed:93:03:17:d8:72:b9:90:6c:e7:47:3b:b0:19:
         f9:24:03:ef:88:45:c9:be:4e:a8:f4:fc:05:aa:bd:33:78:29:
         06:cd:e1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:08 2024 by rpki-client on console.sobornost.net