Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CBB8A038671DF77F8F9579424916B82CCF45F66A.cer
File:                     CBB8A038671DF77F8F9579424916B82CCF45F66A.cer (raw, json)
Hash identifier:          KG6vki8hRFHZ7+AlYl0pYwdHtje3ckUg4Dl2U4Lrkww=
Subject key identifier:   CB:B8:A0:38:67:1D:F7:7F:8F:95:79:42:49:16:B8:2C:CF:45:F6:6A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5073D7A34A1A94DBC389D0C219A6A4176FCAFDFA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/CBB8A038671DF77F8F9579424916B82CCF45F66A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 09 Jul 2024 11:42:06 +0000
Certificate not after:    Tue 08 Jul 2025 11:47:06 +0000
Subordinate resources:    AS: 263861
                          IP: 138.186.24.0/22
                          IP: 2804:26dc::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:73:d7:a3:4a:1a:94:db:c3:89:d0:c2:19:a6:a4:17:6f:ca:fd:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  9 11:42:06 2024 GMT
            Not After : Jul  8 11:47:06 2025 GMT
        Subject: CN=CBB8A038671DF77F8F9579424916B82CCF45F66A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:31:2e:31:c3:ac:21:11:f6:32:7c:57:5b:90:
                    71:c1:f9:cb:11:ef:4d:ea:65:06:a8:23:dc:dd:ae:
                    1a:a0:5d:ac:b6:46:16:72:85:78:c6:57:f3:62:14:
                    2e:c9:03:86:bc:8c:12:d2:9b:1f:90:eb:f8:b3:db:
                    e6:b7:3d:a4:a3:4b:d9:79:48:58:0f:53:24:de:9a:
                    53:c2:57:16:d4:2d:30:5a:b9:ac:fc:c2:10:c8:3c:
                    89:95:c3:85:9c:07:bf:93:89:ed:94:40:8c:3c:98:
                    16:43:76:ab:58:b6:3f:3b:b6:05:de:55:8c:b2:ae:
                    47:c8:7a:d1:ce:b4:30:2b:da:63:bb:fe:e4:3b:6f:
                    e8:f4:85:a2:4a:18:bd:97:6b:ed:09:be:df:fa:a4:
                    4d:ef:0f:5a:25:30:bc:99:15:79:16:65:02:d0:89:
                    1c:f3:cd:db:f1:55:ca:88:96:21:12:2d:3a:a1:0d:
                    f2:81:11:6a:45:da:61:5c:e9:f2:9f:61:0c:7e:f5:
                    2e:bb:5d:ad:b0:71:7f:9f:ce:30:7d:fb:34:b0:85:
                    93:0b:74:1f:73:ad:ef:f5:95:54:dd:16:de:b1:5e:
                    77:5e:2b:ce:37:8a:2f:bd:87:cc:30:eb:a6:9c:d9:
                    06:2f:41:2a:1e:e7:2b:72:43:d1:a5:a8:e5:71:f4:
                    99:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CB:B8:A0:38:67:1D:F7:7F:8F:95:79:42:49:16:B8:2C:CF:45:F6:6A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/CBB8A038671DF77F8F9579424916B82CCF45F66A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.24.0/22
                IPv6:
                  2804:26dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263861

    Signature Algorithm: sha256WithRSAEncryption
         a1:d4:c2:df:39:d0:1a:af:ab:37:3f:2c:0d:d3:2c:0f:bb:1e:
         96:12:86:7a:3b:0c:8a:89:b1:4e:ff:b1:85:74:02:15:41:42:
         51:22:9f:ca:95:97:78:cc:22:f1:f6:a0:ec:a1:2f:78:25:42:
         5b:8c:c3:b5:57:3d:7a:01:cd:2d:07:78:71:51:df:a0:35:20:
         af:49:36:14:06:08:ae:5a:8c:a5:8c:6f:0a:e4:d2:de:e7:fb:
         b7:9f:44:39:ad:02:c6:7e:9e:02:42:f9:41:d7:b4:95:08:76:
         b4:ea:9c:49:ff:b9:16:ad:bc:d1:f0:90:77:01:db:9d:9c:76:
         ad:59:09:a0:6e:03:f8:09:63:c3:6f:31:42:43:58:5a:30:a9:
         fa:5a:41:b7:a5:32:9f:1f:2d:5b:e4:90:e2:2c:a4:1c:38:57:
         8a:45:0c:57:5b:a2:81:61:d9:4e:73:9b:34:08:ed:2a:84:2f:
         48:b0:d8:da:a5:0e:45:08:71:35:d9:57:7b:2d:8b:77:3f:20:
         b4:b5:4e:dc:59:cf:ab:dc:5f:d8:ba:13:ad:a6:5d:93:ef:37:
         32:ac:d7:61:15:68:c6:e1:8e:2a:71:ef:6a:ff:89:2c:93:7d:
         14:ac:d5:19:89:04:db:6e:04:dd:50:f7:02:e2:9a:a2:1a:84:
         7a:c7:f9:04
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUUHPXo0oalNvDidDCGaakF2/K/fowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA3MDkxMTQyMDZaFw0yNTA3MDgxMTQ3MDZaMDMxMTAvBgNV
BAMTKENCQjhBMDM4NjcxREY3N0Y4Rjk1Nzk0MjQ5MTZCODJDQ0Y0NUY2NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtMS4xw6whEfYyfFdbkHHB+csR
703qZQaoI9zdrhqgXay2RhZyhXjGV/NiFC7JA4a8jBLSmx+Q6/iz2+a3PaSjS9l5
SFgPUyTemlPCVxbULTBauaz8whDIPImVw4WcB7+Tie2UQIw8mBZDdqtYtj87tgXe
VYyyrkfIetHOtDAr2mO7/uQ7b+j0haJKGL2Xa+0Jvt/6pE3vD1olMLyZFXkWZQLQ
iRzzzdvxVcqIliESLTqhDfKBEWpF2mFc6fKfYQx+9S67Xa2wcX+fzjB9+zSwhZML
dB9zre/1lVTdFt6xXndeK843ii+9h8ww66ac2QYvQSoe5ytyQ9GlqOVx9JmXAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTLuKA4Zx33f4+V
eUJJFrgsz0X2ajAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNFJw
SDFUQ0pFckxpMkY1YWdOTHRCS0ZpaEpLZ0tyamRjQnNIdnFUS2s1RG8vMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRS
cEgxVENKRXJMaTJGNWFnTkx0QktGaWhKS2dLcmpkY0JzSHZxVEtrNURvLzAvQ0JC
OEEwMzg2NzFERjc3RjhGOTU3OTQyNDkxNkI4MkNDRjQ1RjY2QS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCiroYMA0EAgACMAcDBQAoBCbcMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQGtTANBgkqhkiG9w0BAQsFAAOCAQEAodTC3znQGq+rNz8s
DdMsD7selhKGejsMiomxTv+xhXQCFUFCUSKfypWXeMwi8fag7KEveCVCW4zDtVc9
egHNLQd4cVHfoDUgr0k2FAYIrlqMpYxvCuTS3uf7t59EOa0Cxn6eAkL5Qde0lQh2
tOqcSf+5Fq280fCQdwHbnZx2rVkJoG4D+Aljw28xQkNYWjCp+lpBt6Uynx8tW+SQ
4iykHDhXikUMV1uigWHZTnObNAjtKoQvSLDY2qUORQhxNdlXey2Ldz8gtLVO3FnP
q9xf2LoTraZdk+83MqzXYRVoxuGOKnHvav+JLJN9FKzVGYkE224E3VD3AuKaohqE
esf5BA==
-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:14 2024 by rpki-client on console.sobornost.net