Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE.cer
File:                     F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE.cer (raw, json)
Hash identifier:          TXqAQL1sq1enX5tazLH8Q9QKTZTYlTZAEoWF7PzxmYc=
Subject key identifier:   F4:CC:BF:55:AA:1D:25:CB:A2:0B:D8:CE:85:D9:CD:6D:00:08:CA:FE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4E3CA784B848730A82F9380D7377D758A4C6A888
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/2/F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 Jul 2024 11:50:42 +0000
Certificate not after:    Tue 22 Jul 2025 11:55:42 +0000
Subordinate resources:    AS: 53080
                          IP: 45.175.80.0/22
                          IP: 138.186.36.0/22
                          IP: 170.82.64.0/22
                          IP: 170.150.4.0/22
                          IP: 186.194.176.0/20
                          IP: 187.95.0.0/20
                          IP: 191.253.0.0/20
                          IP: 201.216.100.0/22
                          IP: 2804:71c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:3c:a7:84:b8:48:73:0a:82:f9:38:0d:73:77:d7:58:a4:c6:a8:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 23 11:50:42 2024 GMT
            Not After : Jul 22 11:55:42 2025 GMT
        Subject: CN=F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0e:b0:3b:4d:8f:1e:95:f0:c6:5e:54:ec:7a:
                    5c:23:74:e5:af:c7:52:f9:9f:07:35:87:f8:01:96:
                    cd:c1:34:13:26:c6:f2:da:d8:47:92:97:f3:d0:ba:
                    52:d0:0d:38:ba:ee:97:ba:64:bd:61:ce:df:5e:0c:
                    32:77:ff:02:94:01:b5:b0:f3:38:7b:a9:48:0e:49:
                    aa:e4:47:b3:0c:74:8c:c4:9c:fb:b6:30:6d:6b:6d:
                    ba:06:9f:1c:57:38:8a:14:0d:a9:5a:e6:7e:3b:e2:
                    2f:23:9a:63:fb:b6:76:2e:98:96:b7:41:88:c0:db:
                    f8:d3:b9:31:71:8e:c7:74:22:4b:3e:0c:29:f9:b9:
                    bd:d6:af:c9:b2:2c:07:72:41:23:b3:c2:a5:4c:f0:
                    70:17:b4:85:03:2a:1a:cb:0b:08:a5:c8:11:a2:c9:
                    3a:53:f5:e4:76:54:53:12:af:87:93:4d:d3:05:17:
                    60:b1:2b:8b:0b:8d:6d:87:31:61:55:01:8b:75:6e:
                    dc:cd:ce:58:82:7f:cb:91:1c:83:31:4b:18:9f:34:
                    16:19:28:f5:17:f1:5e:74:13:06:e0:af:38:85:46:
                    a5:e1:44:46:8f:e6:df:31:d7:3d:ff:98:b6:82:3a:
                    61:53:18:76:f0:a6:8e:be:84:5b:5c:46:28:48:75:
                    35:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F4:CC:BF:55:AA:1D:25:CB:A2:0B:D8:CE:85:D9:CD:6D:00:08:CA:FE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/2/F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.80.0/22
                  138.186.36.0/22
                  170.82.64.0/22
                  170.150.4.0/22
                  186.194.176.0/20
                  187.95.0.0/20
                  191.253.0.0/20
                  201.216.100.0/22
                IPv6:
                  2804:71c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53080

    Signature Algorithm: sha256WithRSAEncryption
         79:66:25:62:3d:85:b5:36:9d:f9:a5:b3:de:e4:7c:62:57:ab:
         3a:93:1c:6a:98:68:22:9e:15:0d:98:92:e0:3d:4f:a1:f2:1f:
         03:3d:d3:3c:26:7a:d9:67:95:66:fc:70:0e:06:64:3f:9d:98:
         0c:ef:c9:f4:0a:fe:74:b4:38:7f:fd:a9:d0:c1:7f:2a:ce:92:
         74:83:7b:47:ff:9f:73:40:4d:a8:e1:23:a3:ca:37:d4:93:7f:
         d1:0e:df:62:cf:2a:10:73:d7:ab:31:45:c7:70:c9:2b:45:ff:
         d5:77:07:59:60:65:2e:70:a2:0b:50:bb:85:c3:14:4c:6a:a8:
         11:97:ec:56:c3:3e:ba:1e:5c:d9:c8:73:31:31:f8:ca:a2:ea:
         72:a6:e5:69:2d:3d:87:40:84:9f:e4:62:86:97:6e:0b:ed:41:
         b7:cc:6e:2e:b7:0c:76:49:32:c3:3f:e9:3d:d1:75:3d:92:25:
         8b:2d:8f:a7:4a:dd:f6:71:74:13:63:41:65:46:49:86:39:4f:
         af:57:bd:3e:7e:fd:ee:cb:b3:ed:d7:9a:4a:3b:69:eb:64:20:
         7e:ee:34:33:b0:41:86:75:74:e1:d6:69:6a:15:f4:f2:da:a1:
         85:d2:91:ca:ba:b2:10:7b:b8:98:ce:4c:b5:13:e0:52:02:f3:
         d6:4e:c9:1b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:22 2024 by rpki-client on console.sobornost.net