Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/18E27D86DE5A1AD9A728285FD883143042230B27.cer
File:                     18E27D86DE5A1AD9A728285FD883143042230B27.cer (raw, json)
Hash identifier:          GsVbeUhpQ2Lxtbr4WMYtParFK2kJzw3oHjCpDyFV41M=
Subject key identifier:   18:E2:7D:86:DE:5A:1A:D9:A7:28:28:5F:D8:83:14:30:42:23:0B:27
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3D77BA33CAEF5D55997F181BEAF0FEC42BBE0A0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/iPhQDddxKVEccwGkKj46UVHuzDTaoQXFBbPxYuzpJKK/1/18E27D86DE5A1AD9A728285FD883143042230B27.mft
caRepository:             rsync://rpki-repo.registro.br/repo/iPhQDddxKVEccwGkKj46UVHuzDTaoQXFBbPxYuzpJKK/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:25:48 +0000
Certificate not after:    Wed 02 Apr 2025 18:30:48 +0000
Subordinate resources:    AS: 266951
                          IP: 45.225.176.0/22
                          IP: 2804:45d0::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:77:ba:33:ca:ef:5d:55:99:7f:18:1b:ea:f0:fe:c4:2b:be:0a:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:25:48 2024 GMT
            Not After : Apr  2 18:30:48 2025 GMT
        Subject: CN=18E27D86DE5A1AD9A728285FD883143042230B27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:98:26:bc:ee:07:bd:15:36:2b:35:de:3c:9a:
                    3d:cc:13:42:79:a9:1f:16:31:3e:bf:e6:b0:f4:7b:
                    59:f4:0d:a7:2c:e7:46:70:9b:4a:7e:43:72:41:c8:
                    bc:86:ee:cf:7e:81:6b:e6:b1:37:5d:b8:1f:91:29:
                    59:7b:03:a2:d6:61:17:4d:6e:34:0d:68:cb:ce:1b:
                    e2:9e:84:54:2f:a7:05:80:f7:48:40:6b:da:77:ab:
                    1e:cf:3f:0b:05:a0:b1:0a:ef:24:61:c4:10:61:21:
                    0a:62:62:cd:50:3c:e1:ef:5a:e7:70:a8:92:8a:03:
                    c8:d0:11:87:33:56:10:b3:8b:b4:3e:d2:2d:1f:2a:
                    20:8a:b1:fa:fc:bc:39:20:b3:db:39:92:ce:cf:de:
                    8f:92:f4:e8:ee:04:61:3f:f4:5b:02:90:6a:2e:e0:
                    ac:81:f2:f3:9b:08:9a:4b:7f:1f:2e:8c:4e:68:d6:
                    1f:11:ca:47:41:45:dc:f6:e0:02:77:8a:2b:95:06:
                    c1:e3:f2:18:38:39:ae:f1:73:0a:95:03:d0:2d:bb:
                    11:f8:97:49:20:88:3c:37:e6:be:ed:83:bf:57:08:
                    61:06:57:c3:c8:d1:88:a8:67:cc:3b:98:66:a3:55:
                    1c:cd:d5:0f:e2:2e:03:bb:c0:4a:cd:5c:1a:85:38:
                    02:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                18:E2:7D:86:DE:5A:1A:D9:A7:28:28:5F:D8:83:14:30:42:23:0B:27
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/iPhQDddxKVEccwGkKj46UVHuzDTaoQXFBbPxYuzpJKK/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/iPhQDddxKVEccwGkKj46UVHuzDTaoQXFBbPxYuzpJKK/1/18E27D86DE5A1AD9A728285FD883143042230B27.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.176.0/22
                IPv6:
                  2804:45d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266951

    Signature Algorithm: sha256WithRSAEncryption
         57:9d:26:08:3d:2e:b8:ef:1c:c4:46:a3:34:9d:2a:c7:77:da:
         90:07:04:50:a4:8c:7c:48:e7:1f:0e:37:b2:fc:02:0e:b8:ac:
         cc:93:98:54:8b:16:44:44:9f:25:d0:8d:0c:86:7c:e3:65:60:
         98:0b:67:91:e3:26:2c:e3:b0:4f:7d:61:40:30:f7:dd:07:53:
         53:b3:f9:60:f7:49:40:e7:70:ca:3c:03:98:2a:84:0a:b5:37:
         2d:1f:fb:58:c7:79:8b:e7:ce:69:57:e3:a4:85:f1:a2:c3:ef:
         f7:fc:f6:0f:f3:81:bb:2d:52:a8:f8:50:79:ee:f9:91:be:f6:
         44:b1:2d:ac:3c:e9:17:0a:f9:0e:09:cf:86:60:ac:de:84:a5:
         03:5c:51:ff:b8:09:79:9b:3d:c1:42:08:f6:ce:cd:54:42:68:
         f8:16:ef:a8:32:a0:48:d8:ab:1e:64:59:72:64:37:1a:30:07:
         6b:65:54:c8:61:42:9b:d0:1c:0c:4f:3c:09:08:6c:4b:00:d9:
         70:b4:3a:20:1c:85:e5:be:92:f0:39:b5:05:3c:b4:f5:13:09:
         3c:f9:01:2f:ec:8e:15:82:48:8b:22:83:1b:83:eb:d6:d2:c7:
         e2:0f:16:59:3f:00:28:bc:1f:0a:95:3f:10:32:1b:85:d7:e9:
         b1:3d:d6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:45 2024 by rpki-client on console.sobornost.net