Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0CB5FA63FE8A75BC46313C51DF1E80C17F64039C.cer
File:                     0CB5FA63FE8A75BC46313C51DF1E80C17F64039C.cer (raw, json)
Hash identifier:          Hbw+z+gJYAJ2IhzQ0eXOaYGdUFEGwxeZ0LmiLWYj8Y8=
Subject key identifier:   0C:B5:FA:63:FE:8A:75:BC:46:31:3C:51:DF:1E:80:C1:7F:64:03:9C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7A2A53DCB5BA9B41358F4551FD12AF83F308AAE1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3QGTuzhgrW81gZoNHNbMaLcZufcAoQXL38dHEKeNvRHK/0/0CB5FA63FE8A75BC46313C51DF1E80C17F64039C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3QGTuzhgrW81gZoNHNbMaLcZufcAoQXL38dHEKeNvRHK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 12 Aug 2024 19:53:00 +0000
Certificate not after:    Mon 11 Aug 2025 19:58:00 +0000
Subordinate resources:    AS: 268505
                          IP: 45.162.112.0/22
                          IP: 2804:5240::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:2a:53:dc:b5:ba:9b:41:35:8f:45:51:fd:12:af:83:f3:08:aa:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 12 19:53:00 2024 GMT
            Not After : Aug 11 19:58:00 2025 GMT
        Subject: CN=0CB5FA63FE8A75BC46313C51DF1E80C17F64039C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9a:65:1b:db:1a:d9:03:47:5c:51:46:46:eb:
                    7e:e9:b0:21:2e:e0:31:d9:b9:58:10:f1:76:18:eb:
                    77:18:0f:d6:ad:5b:a1:d9:ca:b9:91:14:36:9a:75:
                    27:c2:29:86:3a:43:cb:32:fb:1d:d3:f4:3c:f3:8d:
                    2d:7b:68:17:18:c8:d4:13:1e:9e:d8:0a:48:3d:09:
                    8b:6a:60:18:40:91:cb:e8:9e:33:2a:95:dc:d4:ab:
                    8c:ae:8f:4c:89:7c:c4:53:d6:de:36:ce:1b:f7:ea:
                    07:f4:75:83:a0:12:36:65:50:69:4a:cd:20:b3:b4:
                    bd:90:ae:96:34:7f:e9:bb:5d:1a:e8:d4:54:9f:bf:
                    8b:d4:4d:8f:e1:85:ec:d7:17:c6:92:c5:a6:c2:20:
                    a2:a8:46:50:dc:06:1d:86:99:3b:e8:3b:ff:83:89:
                    f7:09:c0:94:4e:76:d8:70:0f:3d:81:9a:b8:39:22:
                    48:ec:3e:f5:f5:50:55:17:37:4e:c4:ad:53:2b:7b:
                    d5:f4:1e:7c:c0:25:5a:77:c9:ad:cc:b6:d4:59:60:
                    9f:bf:12:49:f4:8f:4e:13:2e:d9:9f:2a:af:f7:8c:
                    7e:21:04:80:b6:13:c0:7b:1f:d1:2d:e4:95:ed:2c:
                    6a:94:86:07:c7:05:47:27:09:22:49:41:88:d4:e4:
                    18:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0C:B5:FA:63:FE:8A:75:BC:46:31:3C:51:DF:1E:80:C1:7F:64:03:9C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3QGTuzhgrW81gZoNHNbMaLcZufcAoQXL38dHEKeNvRHK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3QGTuzhgrW81gZoNHNbMaLcZufcAoQXL38dHEKeNvRHK/0/0CB5FA63FE8A75BC46313C51DF1E80C17F64039C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.112.0/22
                IPv6:
                  2804:5240::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268505

    Signature Algorithm: sha256WithRSAEncryption
         18:af:4e:13:40:03:49:85:77:5c:21:92:c8:7c:3d:e1:88:c1:
         28:58:73:09:ea:39:9e:c9:0d:51:6e:7e:90:c0:cd:3b:eb:a1:
         d1:3b:eb:99:f4:29:cb:a8:da:99:1c:04:66:31:c7:da:c4:9f:
         38:2e:d3:81:d5:25:52:2c:8a:bf:b4:6c:61:94:65:90:bb:bd:
         30:54:d5:8d:1e:8a:87:d5:e9:aa:f1:ad:b6:12:a9:bb:58:cd:
         91:97:59:65:e8:c9:98:a2:dd:7a:c4:f0:6f:c4:84:04:60:ed:
         7f:2c:ac:ed:fa:c2:b2:2c:b5:29:52:a2:65:56:51:e3:54:76:
         3f:ce:47:19:98:ea:d1:31:60:1a:a1:7d:ef:c7:cf:9c:67:95:
         a1:94:55:3f:b6:97:69:42:14:be:5b:e4:2a:62:95:e9:67:75:
         be:83:f3:2a:b6:8a:e1:0d:62:bc:78:95:3f:1c:7b:14:d3:b4:
         83:88:ef:e9:e5:4b:e3:73:22:5a:59:7a:73:31:cd:66:0c:a6:
         70:0e:34:28:11:8a:27:e8:06:9f:ac:45:a0:cb:31:ea:a0:eb:
         0c:ce:25:29:ee:f4:08:34:ea:c3:63:37:81:4e:8a:7d:74:f5:
         57:1f:26:52:68:db:84:e5:a2:d7:db:48:0e:ae:c7:b3:4d:a0:
         cd:c1:56:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:43 2024 by rpki-client on console.sobornost.net