Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EB936D65024E77024A9636ED97CD85CEF11E460E.cer
File:                     EB936D65024E77024A9636ED97CD85CEF11E460E.cer (raw, json)
Hash identifier:          tUygq7NNGV8QKAMkquFmQpzdjUcQBLHno/aGlJT5wPw=
Subject key identifier:   EB:93:6D:65:02:4E:77:02:4A:96:36:ED:97:CD:85:CE:F1:1E:46:0E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       08BDE2252C5B8CD8D4FD9EAB36D36072E401630B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/1/EB936D65024E77024A9636ED97CD85CEF11E460E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 21:07:55 +0000
Certificate not after:    Wed 02 Apr 2025 21:12:55 +0000
Subordinate resources:    AS: 264308
                          IP: 138.122.20.0/22
                          IP: 2804:25e0::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:bd:e2:25:2c:5b:8c:d8:d4:fd:9e:ab:36:d3:60:72:e4:01:63:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 21:07:55 2024 GMT
            Not After : Apr  2 21:12:55 2025 GMT
        Subject: CN=EB936D65024E77024A9636ED97CD85CEF11E460E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:42:77:dd:cf:4c:fd:fa:59:52:26:15:37:ed:
                    9b:f6:74:ab:c4:ce:7f:cc:8b:94:3f:bf:e7:82:ab:
                    13:0e:19:36:36:3f:a6:cf:52:6d:59:f6:1c:8e:3a:
                    9e:a4:0c:15:1d:4c:c7:50:02:53:4a:85:57:fc:cb:
                    51:2e:1a:82:1e:7d:8a:82:4e:4a:b6:86:c5:33:c4:
                    40:d8:d3:18:7b:4f:7f:5d:5e:cd:ad:14:cf:05:e4:
                    7d:6c:b9:e5:45:b8:e2:e3:c1:4f:5b:f7:23:e0:63:
                    40:94:9b:43:c4:fa:4a:6e:74:45:7f:33:ad:15:8d:
                    9d:c4:30:59:3e:7f:a6:ea:ae:31:19:3f:22:70:8a:
                    45:f8:c7:b4:4a:c1:f6:85:8e:d1:66:df:c8:81:e2:
                    7b:a4:36:b1:ad:17:75:e2:1c:8f:62:bf:8c:0b:fa:
                    c7:97:a8:00:d7:93:8e:79:2e:c8:56:c4:f1:b3:af:
                    4f:de:ae:6e:05:49:ca:75:5e:6e:f2:95:8d:df:69:
                    dc:db:d9:01:da:a4:e6:33:3c:75:f9:73:36:0d:63:
                    17:02:e5:aa:07:ee:94:84:2c:7c:bf:8f:2d:6d:f7:
                    1a:58:24:4b:21:0d:f0:7c:b4:f2:c3:05:ba:90:20:
                    a0:ee:19:63:06:96:1e:12:33:d6:a6:d7:c4:3d:e6:
                    67:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EB:93:6D:65:02:4E:77:02:4A:96:36:ED:97:CD:85:CE:F1:1E:46:0E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/1/EB936D65024E77024A9636ED97CD85CEF11E460E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.20.0/22
                IPv6:
                  2804:25e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264308

    Signature Algorithm: sha256WithRSAEncryption
         c7:6e:d7:a8:0c:f2:a9:19:87:74:1e:2c:22:54:f4:5e:d8:e7:
         44:6d:27:76:3e:7c:85:57:b9:10:92:d9:18:ae:49:a6:06:2f:
         2d:57:fa:c8:ae:97:a7:d0:5f:e4:49:f0:79:38:8a:e7:97:73:
         c3:bc:4a:b6:fd:40:61:00:ad:f8:e2:01:fa:1b:bd:39:06:cb:
         5e:9f:06:14:b1:6a:d5:65:f4:1a:19:0a:e1:c3:da:15:50:ba:
         f8:52:4b:31:00:2a:1a:62:2b:9e:c4:e1:f7:4a:bf:2a:ec:a2:
         8d:bf:8e:1e:1e:98:bc:28:2f:14:27:c5:17:d0:30:41:b2:9a:
         16:68:85:50:92:f8:97:88:2d:5d:9a:42:d6:d7:f2:27:17:bb:
         51:63:19:13:ab:24:90:d7:73:76:ea:02:58:b6:c0:1f:a4:f7:
         25:0d:aa:d0:8f:c7:43:6d:68:ac:9c:8c:90:20:b3:bc:c4:6c:
         54:69:76:59:a0:22:1b:08:e3:0e:ce:0a:75:24:dc:a7:6f:31:
         fb:ca:8e:a4:d8:11:81:46:8d:d8:48:47:69:a2:a7:31:2a:6b:
         8c:5f:29:8c:40:19:b6:85:a4:9a:59:ed:6f:de:c8:ca:9f:64:
         6b:6f:3d:69:6a:42:f8:67:61:0e:8c:91:d1:9a:7b:9e:d5:2b:
         d1:b0:00:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:20 2024 by rpki-client on console.sobornost.net