Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BCD84CFFDA0533E6587050A943123B0F8858F5DB.cer
File:                     BCD84CFFDA0533E6587050A943123B0F8858F5DB.cer (raw, json)
Hash identifier:          xHuXgTdVRZXg9+70HsgZczIcD8zFWuS0Tb1b/6ir90c=
Subject key identifier:   BC:D8:4C:FF:DA:05:33:E6:58:70:50:A9:43:12:3B:0F:88:58:F5:DB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4C816E16E68EEFFF9741A163F584BAC01E646B2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/1/BCD84CFFDA0533E6587050A943123B0F8858F5DB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 19:42:55 +0000
Certificate not after:    Thu 03 Apr 2025 19:47:55 +0000
Subordinate resources:    AS: 268020
                          IP: 45.167.8.0/22
                          IP: 2804:56bc::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:81:6e:16:e6:8e:ef:ff:97:41:a1:63:f5:84:ba:c0:1e:64:6b:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 19:42:55 2024 GMT
            Not After : Apr  3 19:47:55 2025 GMT
        Subject: CN=BCD84CFFDA0533E6587050A943123B0F8858F5DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5b:98:58:db:e4:a2:03:36:d1:c3:80:8d:34:
                    45:d8:04:15:54:83:f4:be:4e:75:41:5c:ee:a9:9c:
                    20:c3:28:b3:e3:0d:70:29:6f:2f:90:c2:ea:22:e4:
                    90:0a:d2:ae:f2:61:fa:38:1e:58:cb:f9:2b:e5:e1:
                    1b:cb:4c:c7:5a:cc:ff:1a:d4:05:27:4d:4c:f0:ed:
                    58:8d:64:89:7a:9a:6e:97:de:56:13:93:11:21:ec:
                    59:96:b3:27:db:f9:16:81:89:fc:53:52:38:4e:cd:
                    51:01:47:3c:05:87:3e:d4:7f:32:80:e7:9c:3d:b2:
                    db:72:66:2d:13:c6:43:cb:c3:63:2f:59:f3:9f:77:
                    f9:e4:6e:ab:8f:43:ae:3e:74:25:c0:ba:07:83:cb:
                    05:8a:45:c7:d6:60:7d:c4:f6:d8:d7:4a:a2:20:7c:
                    dc:8c:41:6a:72:cd:37:82:2a:a6:2f:3a:28:f1:56:
                    df:6c:e9:43:7b:0f:75:f7:62:01:72:e0:c2:8e:a2:
                    4a:ff:0f:e6:b7:38:69:39:03:b8:cb:22:e9:0d:44:
                    fb:76:46:13:04:75:a2:42:3a:30:c4:2b:be:21:ae:
                    fe:46:d9:d3:41:ce:c1:e0:13:65:c1:fd:34:f8:b2:
                    70:d9:bc:92:7e:b7:84:7b:f6:b0:2c:37:db:44:1f:
                    bf:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BC:D8:4C:FF:DA:05:33:E6:58:70:50:A9:43:12:3B:0F:88:58:F5:DB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/1/BCD84CFFDA0533E6587050A943123B0F8858F5DB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.8.0/22
                IPv6:
                  2804:56bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268020

    Signature Algorithm: sha256WithRSAEncryption
         9d:e2:c4:3c:a7:91:be:6d:ec:77:27:31:bf:8a:0a:2a:45:0b:
         41:55:6c:02:6a:41:ce:bb:65:a0:07:50:81:76:d1:ab:dc:ab:
         a5:82:15:3e:27:8a:b1:f9:09:73:cf:3a:d1:c9:6a:d3:b1:e4:
         06:01:14:c7:c5:a4:45:23:54:72:1f:7e:f0:25:aa:61:a9:bc:
         71:bf:b9:0f:9c:a7:d2:d2:f6:b3:44:96:30:02:81:42:98:f6:
         3a:ab:85:a0:ba:f4:cb:66:84:5f:9d:cd:9f:87:ec:ac:5f:13:
         3e:dd:b4:62:97:71:71:07:8f:74:b6:b6:ba:88:24:bf:4f:b0:
         9c:40:98:a7:79:39:2f:51:8b:45:ef:6b:0a:90:fb:2b:45:aa:
         44:6f:4c:e7:ed:e9:09:04:ed:10:05:9f:47:29:e6:48:55:9e:
         6a:cb:99:25:97:84:26:17:a1:a0:6f:96:e0:9e:07:b9:38:40:
         6f:f4:4e:bd:4b:dc:0b:18:02:d6:1a:bc:bd:90:23:c1:f1:ff:
         6e:c8:6e:92:c8:68:b0:17:a1:cd:ee:81:ab:e8:ea:7a:a3:da:
         89:b6:f3:70:e2:ad:7d:e8:44:52:e1:0a:8c:3c:9a:ec:86:40:
         51:43:d0:f5:31:37:24:a1:d5:5d:f7:14:5e:ca:db:f6:1b:ec:
         29:82:0e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:12 2024 by rpki-client on console.sobornost.net