Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B7A663920AEF637DF79AA0A99AF488170644C538.cer
File:                     B7A663920AEF637DF79AA0A99AF488170644C538.cer (raw, json)
Hash identifier:          fEymBT6P2/u8EZK2eqtQIM+7uHpkdoBAqDH4U/Bo4vM=
Subject key identifier:   B7:A6:63:92:0A:EF:63:7D:F7:9A:A0:A9:9A:F4:88:17:06:44:C5:38
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       15DACD4B8D4C1F665976150D8DB819652FB6C21A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/2/B7A663920AEF637DF79AA0A99AF488170644C538.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 05 Sep 2024 14:36:01 +0000
Certificate not after:    Thu 04 Sep 2025 14:41:01 +0000
Subordinate resources:    AS: 266920
                          IP: 45.225.16.0/22
                          IP: 187.84.156.0/22
                          IP: 2804:4558::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:da:cd:4b:8d:4c:1f:66:59:76:15:0d:8d:b8:19:65:2f:b6:c2:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep  5 14:36:01 2024 GMT
            Not After : Sep  4 14:41:01 2025 GMT
        Subject: CN=B7A663920AEF637DF79AA0A99AF488170644C538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:82:8c:aa:6d:d1:15:cf:e1:82:b1:ea:b6:3d:
                    2c:ce:38:5e:1f:78:44:51:f6:b8:ce:d7:46:32:da:
                    9a:73:8a:90:85:73:74:e4:dc:dc:0a:d2:72:51:d9:
                    de:eb:fe:e3:0f:8d:75:b3:ee:8a:0f:59:72:1f:fa:
                    b9:68:c7:45:7e:aa:4d:41:a1:a9:0e:40:ec:90:88:
                    aa:50:a3:48:29:72:4a:6f:28:b7:33:23:1a:d7:03:
                    79:62:d4:77:14:46:d8:b9:8b:9f:9b:dc:28:a6:53:
                    73:1e:b3:4c:a5:72:b8:34:4f:1a:a8:af:d7:15:0a:
                    48:c3:8e:03:e4:cb:0a:43:f7:4d:51:c4:fb:38:0e:
                    5e:1c:04:6c:da:ac:b9:06:93:5a:e8:16:48:b2:c7:
                    5f:90:9d:d8:3b:01:26:aa:eb:b4:91:d6:a4:9c:93:
                    f7:10:76:97:60:3d:4e:03:0d:0b:00:66:61:12:f1:
                    44:96:0e:81:10:c6:32:d5:2b:51:bf:9b:2a:f6:43:
                    5d:f5:13:e6:87:8c:b5:ba:6d:ba:51:b2:4a:0b:15:
                    c8:66:d0:89:7c:b3:92:d3:e8:b3:21:99:80:ab:e8:
                    2b:82:33:ce:36:e4:0f:97:3b:af:ea:52:a5:82:f5:
                    96:05:75:e5:94:9f:39:93:47:4b:e0:ff:8e:52:aa:
                    71:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:A6:63:92:0A:EF:63:7D:F7:9A:A0:A9:9A:F4:88:17:06:44:C5:38
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/2/B7A663920AEF637DF79AA0A99AF488170644C538.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.16.0/22
                  187.84.156.0/22
                IPv6:
                  2804:4558::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266920

    Signature Algorithm: sha256WithRSAEncryption
         72:af:c3:3d:82:e5:d2:cb:a1:c6:92:b5:fa:21:04:49:32:33:
         70:42:d6:fc:77:ae:f2:53:ae:ff:9f:93:db:a8:26:54:93:fa:
         e6:3c:fa:aa:13:d3:db:c3:65:84:c8:f0:29:52:cc:9f:f4:51:
         0a:b3:36:1d:11:0d:3e:50:15:b0:0b:78:8f:d5:1d:8b:39:f4:
         c1:ac:04:1d:85:c6:67:62:31:9c:4f:b9:cc:5e:d4:94:65:0a:
         9e:44:c3:d7:60:0e:0f:2f:95:78:7c:5d:f5:a2:a4:fd:ae:78:
         9d:66:f8:57:bf:1e:72:b1:ca:dc:86:4e:a6:76:29:1e:00:7b:
         1f:c6:4d:5e:2d:7c:6b:ab:4e:e9:ef:20:91:ef:61:5a:68:56:
         20:1f:f3:bd:c1:ee:48:f7:8b:bd:4b:53:80:60:cd:82:bb:7b:
         4f:d5:14:4c:ef:a1:ea:2b:c6:1b:a7:b6:d3:f7:ac:13:5f:ec:
         bb:f1:af:72:4a:fc:c0:6b:82:ac:31:bf:27:c7:d9:7c:de:ff:
         60:39:f1:db:66:f8:33:9d:91:5c:ea:54:37:79:52:da:dc:6d:
         4a:90:07:14:81:9e:1e:63:05:88:ec:1d:d0:2d:36:54:04:ec:
         1d:ca:1f:c0:b6:ea:cf:ea:21:7b:f1:aa:bf:e1:e6:62:4e:f6:
         ff:4f:ba:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:11 2024 by rpki-client on console.sobornost.net