Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F8627EF4EC5630BFBFA1853F634FB0290F6D4852.cer
File:                     F8627EF4EC5630BFBFA1853F634FB0290F6D4852.cer (raw, json)
Hash identifier:          piwEPgDHPcLtuZdQqbxxO6UTAYF7tQy8+Sd3q1IeDjY=
Subject key identifier:   F8:62:7E:F4:EC:56:30:BF:BF:A1:85:3F:63:4F:B0:29:0F:6D:48:52
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       087C074D84B744002EE16FFA7A298A2B8E01CFA1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Cqe4BWJkXwJjK2Gf45V2jcAcdqLNJnui9n7bJTQKPc3X/0/F8627EF4EC5630BFBFA1853F634FB0290F6D4852.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Cqe4BWJkXwJjK2Gf45V2jcAcdqLNJnui9n7bJTQKPc3X/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 04 Sep 2024 05:44:46 +0000
Certificate not after:    Wed 03 Sep 2025 05:49:46 +0000
Subordinate resources:    AS: 270470
                          IP: 24.152.8.0/22
                          IP: 2804:6c78::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:7c:07:4d:84:b7:44:00:2e:e1:6f:fa:7a:29:8a:2b:8e:01:cf:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep  4 05:44:46 2024 GMT
            Not After : Sep  3 05:49:46 2025 GMT
        Subject: CN=F8627EF4EC5630BFBFA1853F634FB0290F6D4852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0d:6e:0f:2b:d6:04:0a:aa:c6:ab:14:1b:8b:
                    d0:38:2f:5f:96:2d:3e:14:0e:bd:44:49:61:eb:f4:
                    13:9c:0f:1b:f4:43:05:1b:e7:ac:df:d4:e7:47:cd:
                    7f:ff:ec:d4:20:c2:26:81:9f:ec:0c:f6:0f:09:38:
                    14:f5:70:16:e5:70:78:f9:11:58:00:59:77:dd:38:
                    b1:a6:24:86:e7:18:df:7b:df:33:23:9b:b0:ae:70:
                    6e:04:8c:9b:78:49:f1:9d:f3:04:01:0a:11:8e:4f:
                    c2:c1:e5:b6:14:d2:f3:1d:1b:37:e4:93:40:55:f7:
                    39:ac:b2:77:78:65:b0:aa:2b:d0:2c:f6:14:6b:b6:
                    99:e0:65:71:a6:98:1d:2d:3a:8b:3b:4d:9d:d0:f8:
                    64:b2:09:ec:d7:6d:07:e8:15:06:5f:42:c7:2d:75:
                    e0:be:d4:03:9c:ad:59:df:90:90:26:4d:52:ab:e7:
                    c8:8b:a1:8d:29:cc:71:38:7b:fb:a2:21:cb:5c:cc:
                    34:57:11:6f:f4:cf:de:5e:8b:19:4c:76:4b:cc:ca:
                    29:78:a1:86:d7:ae:bb:35:7d:c1:85:41:da:e2:91:
                    ad:36:47:85:df:9a:9b:26:3b:60:3b:f2:fe:ba:23:
                    99:58:90:b0:e8:39:67:79:07:ae:45:4e:ec:20:c2:
                    b0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F8:62:7E:F4:EC:56:30:BF:BF:A1:85:3F:63:4F:B0:29:0F:6D:48:52
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cqe4BWJkXwJjK2Gf45V2jcAcdqLNJnui9n7bJTQKPc3X/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cqe4BWJkXwJjK2Gf45V2jcAcdqLNJnui9n7bJTQKPc3X/0/F8627EF4EC5630BFBFA1853F634FB0290F6D4852.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.8.0/22
                IPv6:
                  2804:6c78::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270470

    Signature Algorithm: sha256WithRSAEncryption
         5b:4f:2a:e5:29:e5:ac:0c:c9:78:a3:a8:8a:2c:f7:85:8c:57:
         43:57:18:a8:82:e8:a0:3e:47:39:08:c0:fa:4e:7b:77:bd:96:
         71:be:ef:26:ea:2a:b4:d6:40:b7:a3:f6:77:5e:2a:68:cf:7f:
         bc:bf:0e:09:05:da:4c:52:88:cd:bf:6b:f9:5b:64:bf:9c:33:
         21:7c:aa:2c:24:72:63:81:66:00:f2:33:10:f0:94:d6:03:d3:
         d1:7d:e6:3c:6d:bf:e2:78:47:5f:b8:c0:0a:ce:a0:3d:d2:0d:
         59:1d:f2:e0:f4:07:6d:2e:19:7c:3e:c3:3d:88:91:16:12:a1:
         34:a1:7e:8c:34:ca:65:d3:2b:a4:8a:3d:b9:24:84:a5:04:e9:
         1e:16:f8:02:5b:33:ff:2c:df:31:58:1b:86:07:30:35:a6:79:
         d0:f6:d3:94:8f:b3:27:bc:cc:aa:6d:1c:a7:85:73:dc:60:75:
         5e:b1:b0:7f:e4:32:2e:7f:1c:44:e0:ea:36:8c:7f:70:30:26:
         0f:03:6e:7d:88:bf:c9:bf:8e:9c:ca:1b:e3:46:90:8a:a9:5e:
         44:7d:1b:d5:e5:b5:08:e0:cc:d2:18:3f:1a:2b:f1:ce:69:12:
         61:a1:18:cc:57:0d:44:f6:72:d5:d8:ee:61:19:10:49:1e:52:
         33:fa:6f:3e
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUCHwHTYS3RAAu4W/6eimKK44Bz6EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA5MDQwNTQ0NDZaFw0yNTA5MDMwNTQ5NDZaMDMxMTAvBgNV
BAMTKEY4NjI3RUY0RUM1NjMwQkZCRkExODUzRjYzNEZCMDI5MEY2RDQ4NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+DW4PK9YECqrGqxQbi9A4L1+W
LT4UDr1ESWHr9BOcDxv0QwUb56zf1OdHzX//7NQgwiaBn+wM9g8JOBT1cBblcHj5
EVgAWXfdOLGmJIbnGN973zMjm7CucG4EjJt4SfGd8wQBChGOT8LB5bYU0vMdGzfk
k0BV9zmssnd4ZbCqK9As9hRrtpngZXGmmB0tOos7TZ3Q+GSyCezXbQfoFQZfQsct
deC+1AOcrVnfkJAmTVKr58iLoY0pzHE4e/uiIctczDRXEW/0z95eixlMdkvMyil4
oYbXrrs1fcGFQdrika02R4XfmpsmO2A78v66I5lYkLDoOWd5B65FTuwgwrABAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT4Yn707FYwv7+h
hT9jT7ApD21IUjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ3Fl
NEJXSmtYd0pqSzJHZjQ1VjJqY0FjZHFMTkpudWk5bjdiSlRRS1BjM1gvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Nx
ZTRCV0prWHdKaksyR2Y0NVYyamNBY2RxTE5KbnVpOW43YkpUUUtQYzNYLzAvRjg2
MjdFRjRFQzU2MzBCRkJGQTE4NTNGNjM0RkIwMjkwRjZENDg1Mi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCGJgIMA0EAgACMAcDBQAoBGx4MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQghjANBgkqhkiG9w0BAQsFAAOCAQEAW08q5SnlrAzJeKOo
iiz3hYxXQ1cYqILooD5HOQjA+k57d72Wcb7vJuoqtNZAt6P2d14qaM9/vL8OCQXa
TFKIzb9r+Vtkv5wzIXyqLCRyY4FmAPIzEPCU1gPT0X3mPG2/4nhHX7jACs6gPdIN
WR3y4PQHbS4ZfD7DPYiRFhKhNKF+jDTKZdMrpIo9uSSEpQTpHhb4Alsz/yzfMVgb
hgcwNaZ50PbTlI+zJ7zMqm0cp4Vz3GB1XrGwf+QyLn8cRODqNox/cDAmDwNufYi/
yb+OnMob40aQiqleRH0b1eW1CODM0hg/GivxzmkSYaEYzFcNRPZy1djuYRkQSR5S
M/pvPg==
-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:22 2024 by rpki-client on console.sobornost.net