Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
File:                     DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer (raw, json)
Hash identifier:          bZcV6XAuQVx0zMAF0pOUj5mLnKWm4wBMFuPqL/YcgyY=
Subject key identifier:   DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6C1E44292BD127B1D54D0FFBABB441845E255522
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 31 May 2024 23:03:28 +0000
Certificate not after:    Fri 30 May 2025 23:08:28 +0000
Subordinate resources:    AS: 61573
                          IP: 138.122.60.0/22
                          IP: 2804:25e4::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:1e:44:29:2b:d1:27:b1:d5:4d:0f:fb:ab:b4:41:84:5e:25:55:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 31 23:03:28 2024 GMT
            Not After : May 30 23:08:28 2025 GMT
        Subject: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d4:1b:c7:ed:45:8a:6b:d2:f1:47:df:a4:78:
                    80:48:b0:b2:71:8a:e1:2e:2a:9b:16:21:0c:bc:18:
                    3d:4c:96:bf:d5:72:89:af:03:89:12:d2:66:e2:af:
                    b7:1f:b8:50:f4:be:cc:54:12:00:37:04:46:54:4f:
                    9b:a1:63:f8:87:67:a8:22:fd:72:86:ae:33:bb:38:
                    7c:1a:c4:df:2b:65:9e:62:29:e9:82:e5:01:40:44:
                    15:79:44:97:8f:2f:4e:b0:ea:6e:83:ae:41:e1:b6:
                    b7:e8:fd:6b:ae:35:15:d6:f3:ce:66:f6:8a:18:81:
                    7a:13:37:de:84:27:4b:af:a1:75:c7:91:88:ae:9f:
                    fe:59:59:84:4b:58:25:01:df:b2:4a:59:d0:95:84:
                    63:1c:60:34:cf:7e:90:35:68:1b:f7:d8:9e:c9:6d:
                    ff:82:de:4d:cf:ad:fc:fc:38:ca:ca:67:83:0a:8b:
                    df:d5:31:91:1b:b7:3b:22:a2:05:cc:18:fc:14:17:
                    21:2e:12:95:20:e6:f2:7a:d2:71:41:f7:3c:be:6e:
                    22:c9:3a:78:a3:88:02:b3:26:0a:72:ad:38:1c:0a:
                    dd:e3:54:54:27:d4:aa:4b:64:96:84:1f:d0:67:3c:
                    aa:6d:d6:75:07:10:dd:ac:d8:86:30:4f:64:c0:1b:
                    2a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.60.0/22
                IPv6:
                  2804:25e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61573

    Signature Algorithm: sha256WithRSAEncryption
         38:dc:03:5b:0e:48:f9:f0:44:26:d8:31:3b:fa:2c:01:5f:16:
         54:3c:cd:91:40:e2:4e:3e:dd:d6:31:b5:ae:a0:cd:72:11:97:
         ee:fe:ab:fd:76:83:17:9a:e2:12:69:e5:4d:05:49:e9:7c:19:
         48:8b:f8:4c:e5:fe:9e:3f:f8:3f:1f:12:58:d4:fb:3b:78:41:
         ff:36:23:f6:a6:38:d5:4d:92:5c:d3:c7:3d:3c:b5:5a:2b:42:
         8f:5a:50:d1:3c:c8:45:d6:a7:5f:5d:54:8b:8c:97:e5:a2:90:
         1a:8e:3a:d6:b5:54:f1:15:e9:61:23:47:f3:b8:5a:a8:4c:df:
         9a:23:ea:03:20:ab:96:ed:68:79:9e:96:00:b9:1d:ee:38:fd:
         17:02:8f:e9:4c:ae:8a:cd:57:81:c0:e1:88:b3:a3:62:15:12:
         f6:02:d9:b2:f5:d6:c6:46:59:57:24:18:52:e2:f8:8b:c5:d8:
         54:9e:1b:95:e4:aa:9e:64:bd:d1:a1:43:39:d1:d3:62:59:90:
         82:fe:b9:85:af:47:c1:27:2e:5a:1e:09:0b:e5:ec:c9:e8:64:
         9f:96:34:c5:d4:5c:35:33:68:fe:0c:cb:52:73:0f:23:3b:44:
         07:1b:44:70:a0:a4:41:ed:2d:59:20:85:21:46:ea:1d:37:d8:
         88:90:4c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:18 2024 by rpki-client on console.sobornost.net