Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/18A4CF42CC304D1E5395D809FDD692A864102BAE.cer
File:                     18A4CF42CC304D1E5395D809FDD692A864102BAE.cer (raw, json)
Hash identifier:          k4I+/UDbgF7akCbQYsZCaEgPHXV5C6HR5Tov8Yre+IY=
Subject key identifier:   18:A4:CF:42:CC:30:4D:1E:53:95:D8:09:FD:D6:92:A8:64:10:2B:AE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4FAEAA0ABD778FF68ABDEE2533776B79E0A7CC8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/18A4CF42CC304D1E5395D809FDD692A864102BAE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 04 Oct 2024 06:39:52 +0000
Certificate not after:    Fri 03 Oct 2025 06:44:52 +0000
Subordinate resources:    AS: 269524
                          IP: 45.187.32.0/22
                          IP: 2804:65f0::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ae:aa:0a:bd:77:8f:f6:8a:bd:ee:25:33:77:6b:79:e0:a7:cc:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  4 06:39:52 2024 GMT
            Not After : Oct  3 06:44:52 2025 GMT
        Subject: CN=18A4CF42CC304D1E5395D809FDD692A864102BAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1d:14:4d:ff:5b:07:89:54:1e:d4:33:c8:1a:
                    76:d8:08:24:a3:07:3a:e8:27:5b:a1:17:89:86:1f:
                    a3:90:c6:db:41:37:6a:88:3d:7d:1f:97:b2:71:a3:
                    2c:1f:cd:51:25:dd:6e:19:a3:90:a9:82:db:fd:cb:
                    64:af:ee:f0:ad:1c:b9:c4:f3:7d:7d:8e:7e:3c:56:
                    6f:c1:ff:31:ce:32:9a:8c:b7:6f:3f:9a:13:85:e7:
                    b7:ea:e0:02:6d:49:13:f7:dc:76:b1:a3:43:02:d4:
                    ed:76:1c:ad:99:e0:c9:91:f0:6b:5e:65:2b:db:e1:
                    5c:21:44:ef:79:3f:08:38:b6:70:d2:72:9a:12:76:
                    6d:88:7d:e6:ed:2c:1f:eb:d8:79:d5:45:02:e4:cf:
                    ff:c0:de:af:5e:e7:c0:5c:01:d8:13:cb:b8:3e:c8:
                    3a:fd:0c:7a:a5:30:d5:d1:12:93:91:7f:02:d0:4e:
                    c0:99:0c:39:76:79:06:38:b7:13:dd:6d:7c:d0:f4:
                    95:c7:f6:a3:c3:70:88:64:e2:18:7e:8a:c5:08:bd:
                    be:d7:5e:86:c0:1b:f1:d7:e2:be:08:36:b8:8a:3f:
                    91:3e:bf:6c:e1:48:8b:15:ff:fc:1e:23:f5:35:38:
                    2c:0c:a2:48:9c:a3:b5:43:93:1b:7a:45:c3:be:d9:
                    89:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                18:A4:CF:42:CC:30:4D:1E:53:95:D8:09:FD:D6:92:A8:64:10:2B:AE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/18A4CF42CC304D1E5395D809FDD692A864102BAE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.32.0/22
                IPv6:
                  2804:65f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269524

    Signature Algorithm: sha256WithRSAEncryption
         ae:8f:7d:de:d3:9a:98:82:4e:e9:5c:b8:e4:77:b6:c6:00:c3:
         d2:be:22:85:af:c5:c3:e3:76:d5:9e:dc:2c:70:18:77:cb:e0:
         e9:e6:ce:a7:34:a2:9a:aa:1f:0b:82:14:db:a6:8f:26:a4:ef:
         fc:81:94:a3:61:c6:47:04:86:cb:df:07:3a:f6:cb:97:e4:cc:
         24:e4:32:93:c3:04:a3:fd:70:55:c5:26:4a:3b:15:94:8c:80:
         2f:cc:81:1c:a9:a0:bb:86:66:b5:1a:05:41:ce:d9:cd:57:46:
         6e:ef:aa:e1:f6:b8:2f:b8:5f:12:a4:38:a6:a0:88:96:24:d7:
         a4:99:31:43:e1:06:72:88:36:20:9a:b1:ab:54:44:1f:ab:c5:
         32:a1:6c:f9:7d:05:1b:d7:4c:67:1d:e2:69:7b:ba:d4:32:07:
         1d:1d:a1:be:4e:49:65:03:b2:60:bb:94:41:e6:99:38:0a:61:
         21:c3:0d:ad:a2:fc:c6:14:f8:8f:a4:89:84:fc:f4:98:a0:47:
         21:3f:37:f6:35:fd:50:70:ac:fc:0a:8e:78:be:7c:65:fa:60:
         69:2a:b6:2a:7c:9c:97:17:8f:68:79:26:b8:aa:8f:75:98:6b:
         ce:ac:48:f1:62:44:83:69:3c:cf:f5:0e:70:f3:23:57:ec:32:
         a2:9d:fe:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:45 2024 by rpki-client on console.sobornost.net