Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/001AEAFAC3DB84DF8098F4CA1CA612C595E64631.cer
File:                     001AEAFAC3DB84DF8098F4CA1CA612C595E64631.cer (raw, json)
Hash identifier:          fxc0B06lNTPWGEYhOXL/Rta4mgeClmim1BQY2N555HY=
Subject key identifier:   00:1A:EA:FA:C3:DB:84:DF:80:98:F4:CA:1C:A6:12:C5:95:E6:46:31
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2013A93BB185CB638E8E63C7E420DF1C24D27884
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HmeyVz9PUnzoTitHpW8YWnehzYKNvodcwJCyoSDJtQS7/0/001AEAFAC3DB84DF8098F4CA1CA612C595E64631.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HmeyVz9PUnzoTitHpW8YWnehzYKNvodcwJCyoSDJtQS7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 24 Sep 2024 19:27:15 +0000
Certificate not after:    Tue 23 Sep 2025 19:32:15 +0000
Subordinate resources:    AS: 270672
                          IP: 179.60.128.0/22
                          IP: 2804:6f9c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:13:a9:3b:b1:85:cb:63:8e:8e:63:c7:e4:20:df:1c:24:d2:78:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 24 19:27:15 2024 GMT
            Not After : Sep 23 19:32:15 2025 GMT
        Subject: CN=001AEAFAC3DB84DF8098F4CA1CA612C595E64631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:37:12:60:00:7d:e7:ac:d7:d3:a9:19:cf:e3:
                    00:11:32:f6:ed:3c:55:ba:9a:f6:84:cb:94:39:5a:
                    f2:48:f1:d9:9e:c2:cd:2e:9d:77:0d:10:cd:1a:25:
                    6e:6f:82:32:fe:86:d2:f8:93:49:6e:4f:40:33:3d:
                    9a:7e:92:3d:28:7e:03:00:52:08:a6:86:a9:58:63:
                    1f:f6:6c:19:b4:f4:ed:9d:c7:ab:d4:b7:f6:ef:c9:
                    1b:c8:6e:e8:b3:5a:61:fe:7f:02:f6:2c:dd:21:ed:
                    2d:a3:88:38:8a:32:e4:d3:35:f1:57:2c:77:44:9f:
                    03:a1:5f:ad:2d:bf:e5:a1:c2:fb:1f:8e:0d:8c:86:
                    47:e3:ee:d4:ec:c0:e3:20:c9:af:ac:52:25:d5:b2:
                    5e:2b:12:38:b0:04:d2:75:10:70:11:78:66:64:d6:
                    64:e1:4c:f9:3a:7b:29:c4:af:86:93:39:9c:68:47:
                    16:c8:06:21:f0:1a:71:b9:03:e8:9d:f2:66:5c:ad:
                    16:6a:88:5b:d8:91:df:ef:bb:99:62:13:f5:ae:20:
                    eb:d0:74:df:36:36:8b:c1:53:5c:96:6f:b3:af:a0:
                    f7:f0:17:76:2a:bf:4a:46:9d:64:95:db:d1:df:c3:
                    f3:0b:84:6a:6e:f0:d0:11:cb:4e:61:6c:cf:4a:bb:
                    6a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                00:1A:EA:FA:C3:DB:84:DF:80:98:F4:CA:1C:A6:12:C5:95:E6:46:31
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HmeyVz9PUnzoTitHpW8YWnehzYKNvodcwJCyoSDJtQS7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HmeyVz9PUnzoTitHpW8YWnehzYKNvodcwJCyoSDJtQS7/0/001AEAFAC3DB84DF8098F4CA1CA612C595E64631.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.128.0/22
                IPv6:
                  2804:6f9c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270672

    Signature Algorithm: sha256WithRSAEncryption
         6a:1e:c6:ef:9d:22:05:b3:da:f6:b8:e5:75:f2:be:cf:08:a7:
         b6:7f:5b:8b:22:a9:36:ac:52:ba:49:07:89:39:a7:36:b0:02:
         3a:d4:12:4c:9e:ab:87:14:52:cf:ba:0c:12:27:5b:32:f0:f3:
         80:db:64:5b:21:ce:d2:05:57:2e:15:06:6f:24:37:0c:f4:05:
         5f:ae:50:a5:9c:a3:98:ce:34:56:9f:77:7f:0c:7c:e0:29:9d:
         f8:80:46:0a:ac:ba:e0:a1:b2:75:a2:1a:3a:00:84:20:58:eb:
         2b:bd:a3:e0:b7:bf:f7:14:af:e8:0b:fe:7f:60:c3:dd:4d:3c:
         6e:2b:96:42:3c:8d:33:7a:54:fc:c7:9c:42:5a:2e:e7:8c:8e:
         2d:5f:4c:b9:1c:7c:84:ac:a6:3c:3c:1a:5d:da:2c:e2:98:e6:
         5f:5d:bd:af:99:77:e6:cb:d3:b4:8c:05:6b:d9:2a:a7:2b:52:
         9f:1b:9d:62:19:c8:ee:60:83:9a:17:63:26:5e:c1:af:f2:4d:
         28:a7:c9:f6:bd:45:3b:f5:ea:ee:44:1d:ba:b1:9b:17:9d:64:
         02:6b:bc:aa:6b:4a:65:4b:c2:b5:5e:74:3b:21:b9:80:88:62:
         7b:ce:e4:37:48:dc:43:2b:d8:6e:f1:77:c9:95:82:a7:42:73:
         6a:5c:f2:b4
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUIBOpO7GFy2OOjmPH5CDfHCTSeIQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA5MjQxOTI3MTVaFw0yNTA5MjMxOTMyMTVaMDMxMTAvBgNV
BAMTKDAwMUFFQUZBQzNEQjg0REY4MDk4RjRDQTFDQTYxMkM1OTVFNjQ2MzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3NxJgAH3nrNfTqRnP4wARMvbt
PFW6mvaEy5Q5WvJI8dmews0unXcNEM0aJW5vgjL+htL4k0luT0AzPZp+kj0ofgMA
UgimhqlYYx/2bBm09O2dx6vUt/bvyRvIbuizWmH+fwL2LN0h7S2jiDiKMuTTNfFX
LHdEnwOhX60tv+Whwvsfjg2Mhkfj7tTswOMgya+sUiXVsl4rEjiwBNJ1EHAReGZk
1mThTPk6eynEr4aTOZxoRxbIBiHwGnG5A+id8mZcrRZqiFvYkd/vu5liE/WuIOvQ
dN82NovBU1yWb7OvoPfwF3Yqv0pGnWSV29Hfw/MLhGpu8NARy05hbM9Ku2rJAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQAGur6w9uE34CY
9MocphLFleZGMTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSG1l
eVZ6OVBVbnpvVGl0SHBXOFlXbmVoellLTnZvZGN3SkN5b1NESnRRUzcvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ht
ZXlWejlQVW56b1RpdEhwVzhZV25laHpZS052b2Rjd0pDeW9TREp0UVM3LzAvMDAx
QUVBRkFDM0RCODRERjgwOThGNENBMUNBNjEyQzU5NUU2NDYzMS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCszyAMA0EAgACMAcDBQAoBG+cMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQhUDANBgkqhkiG9w0BAQsFAAOCAQEAah7G750iBbPa9rjl
dfK+zwintn9biyKpNqxSukkHiTmnNrACOtQSTJ6rhxRSz7oMEidbMvDzgNtkWyHO
0gVXLhUGbyQ3DPQFX65QpZyjmM40Vp93fwx84Cmd+IBGCqy64KGydaIaOgCEIFjr
K72j4Le/9xSv6Av+f2DD3U08biuWQjyNM3pU/MecQlou54yOLV9MuRx8hKymPDwa
Xdos4pjmX129r5l35svTtIwFa9kqpytSnxudYhnI7mCDmhdjJl7Br/JNKKfJ9r1F
O/Xq7kQdurGbF51kAmu8qmtKZUvCtV50OyG5gIhie87kN0jcQyvYbvF3yZWCp0Jz
alzytA==
-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:41 2024 by rpki-client on console.sobornost.net