Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/052DC3B49D4EDE6582E66C36AB2E6B728574B78F.cer
File:                     052DC3B49D4EDE6582E66C36AB2E6B728574B78F.cer (raw, json)
Hash identifier:          xLz9i20YmHmOUep+/t/ENSfdp1yGEPMJc1fdZuKs3Xc=
Subject key identifier:   05:2D:C3:B4:9D:4E:DE:65:82:E6:6C:36:AB:2E:6B:72:85:74:B7:8F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0D9D5C54E589FD0C902A94AF73FD0F9663E5110D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/052DC3B49D4EDE6582E66C36AB2E6B728574B78F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 05 Sep 2024 17:23:17 +0000
Certificate not after:    Thu 04 Sep 2025 17:28:17 +0000
Subordinate resources:    AS: 264577
                          IP: 138.36.116.0/22
                          IP: 2804:21d8::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:9d:5c:54:e5:89:fd:0c:90:2a:94:af:73:fd:0f:96:63:e5:11:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep  5 17:23:17 2024 GMT
            Not After : Sep  4 17:28:17 2025 GMT
        Subject: CN=052DC3B49D4EDE6582E66C36AB2E6B728574B78F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:83:b3:29:e9:56:6b:98:13:c4:c8:88:3d:bc:
                    e7:f6:d4:15:48:7c:d5:13:8e:d3:e1:1b:ef:af:fe:
                    ac:3b:b4:9a:7e:4d:47:2c:5c:59:9a:eb:96:4b:5f:
                    99:15:08:47:b1:74:f9:31:2b:0e:4b:30:13:ea:d0:
                    ee:a0:9c:27:01:12:a1:41:5f:00:66:a3:1b:48:1a:
                    50:25:89:32:14:26:3a:5b:d3:de:40:c9:c4:4f:98:
                    f1:43:91:be:47:00:9d:91:81:6d:f8:98:b6:0a:11:
                    69:ed:eb:aa:6b:b6:f6:94:04:f1:03:b5:f6:73:de:
                    67:9f:9b:4f:28:2a:89:75:ee:90:43:15:ca:0e:c9:
                    a6:95:78:af:47:8d:e7:92:3d:12:b9:85:8b:69:2c:
                    f1:c3:17:58:ae:1a:9b:62:de:1d:0a:ea:2d:c4:5f:
                    72:1a:71:dc:86:fc:b8:8a:5b:94:c4:74:93:d9:27:
                    3b:a2:ce:1e:b1:bd:77:31:32:e3:ff:29:8b:fe:29:
                    71:3e:e6:21:38:28:88:53:63:1f:80:2d:da:8c:dc:
                    c0:bb:be:40:95:7c:98:4f:45:b5:81:a8:22:87:67:
                    27:26:9e:67:b6:11:2f:4d:d1:88:a0:bc:1e:89:85:
                    4d:4c:e9:34:a3:6f:c0:1b:2f:58:29:d4:e3:ce:9c:
                    94:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                05:2D:C3:B4:9D:4E:DE:65:82:E6:6C:36:AB:2E:6B:72:85:74:B7:8F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/052DC3B49D4EDE6582E66C36AB2E6B728574B78F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.116.0/22
                IPv6:
                  2804:21d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264577

    Signature Algorithm: sha256WithRSAEncryption
         8f:3e:ab:cc:b2:ca:71:38:3f:45:ac:70:ba:82:ae:2f:99:f3:
         95:c2:b6:46:bd:a2:29:96:a2:7b:55:4e:13:fd:ae:0b:07:24:
         8c:12:e8:52:74:95:67:53:01:f5:7d:84:c1:26:4b:e9:b2:cc:
         bc:73:61:75:be:cb:87:72:f8:84:ac:0e:e3:2e:40:b9:88:3c:
         21:cf:1b:13:09:39:1e:01:e9:3d:7c:87:d6:35:9a:84:89:c8:
         f4:3d:97:3b:4e:6c:fb:f3:84:f0:8c:be:6a:a8:08:2f:3f:d2:
         ea:73:c5:06:ad:56:94:19:3f:e7:61:9f:bd:7d:ac:3a:c4:06:
         6c:a0:4e:d5:2c:ba:68:22:56:43:4e:ce:70:73:f4:62:64:b1:
         f7:bc:97:59:08:cc:7c:46:d4:5c:74:d7:d3:f2:49:c7:93:a8:
         9c:ac:96:2e:c2:38:88:4a:9c:fd:c9:47:31:61:c3:e3:3c:2c:
         9e:e9:26:3c:59:9c:7f:2d:15:b4:6d:b5:da:81:14:e1:42:a0:
         eb:6c:ee:9d:90:ee:4c:7d:82:b4:de:8f:3d:29:92:b3:cf:56:
         93:51:79:1d:13:fe:57:1e:92:51:ec:b5:ef:c4:d4:3c:02:1b:
         1b:fb:3e:02:95:5c:58:d0:54:c0:81:85:96:6b:d6:33:e1:1d:
         3e:e9:f6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:42 2024 by rpki-client on console.sobornost.net