Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/22556D0290AA08E04E52E5890C17182439269D40.cer
File:                     22556D0290AA08E04E52E5890C17182439269D40.cer (raw, json)
Hash identifier:          KrOCgIc9kbLqCcZKVvkEjC+UfZNlWCMIgPJMuntnSps=
Subject key identifier:   22:55:6D:02:90:AA:08:E0:4E:52:E5:89:0C:17:18:24:39:26:9D:40
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4529C8C3145DC704BAE4F645717236FDE9007B4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/67kEbHHX12x7WNmrVhaa9kfrr7jnZcZqEKa4v3VZhm3S/0/22556D0290AA08E04E52E5890C17182439269D40.mft
caRepository:             rsync://rpki-repo.registro.br/repo/67kEbHHX12x7WNmrVhaa9kfrr7jnZcZqEKa4v3VZhm3S/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 17 Sep 2024 12:53:33 +0000
Certificate not after:    Tue 16 Sep 2025 12:58:33 +0000
Subordinate resources:    AS: 61724
                          IP: 131.0.8.0/22
                          IP: 2804:1b60::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:29:c8:c3:14:5d:c7:04:ba:e4:f6:45:71:72:36:fd:e9:00:7b:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 17 12:53:33 2024 GMT
            Not After : Sep 16 12:58:33 2025 GMT
        Subject: CN=22556D0290AA08E04E52E5890C17182439269D40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7d:f6:ca:75:b2:b2:43:cf:6c:6f:37:e6:aa:
                    22:73:dd:4b:5f:ca:c8:06:e6:5d:c1:a0:a4:f8:ed:
                    68:bf:33:4a:b2:81:46:34:4c:b6:ff:22:33:e7:cf:
                    f2:f4:ce:83:41:d2:b2:fb:d9:02:ab:3a:7b:3a:82:
                    e8:90:bc:fc:22:f5:8b:ba:58:57:ef:a6:99:9d:4d:
                    ec:22:86:df:82:83:0e:98:26:f4:ee:2d:92:eb:a2:
                    d2:70:02:f4:df:2f:44:d4:64:9a:c3:d7:4f:81:80:
                    59:b5:c7:59:ba:32:27:36:8a:61:32:ab:d7:c1:d7:
                    71:27:ca:12:ba:8a:39:07:7f:83:74:e6:61:3c:ca:
                    db:c5:21:41:07:f8:14:88:69:a9:05:93:7d:7b:f5:
                    29:c4:81:ae:7e:44:c9:98:6e:25:27:3a:f3:49:8c:
                    8b:ea:39:5e:cf:16:a1:0b:6c:fa:06:8f:1e:20:e9:
                    a5:27:36:5d:53:27:be:61:19:fb:b8:12:78:59:86:
                    3b:e6:66:dd:95:a3:9a:c0:61:00:15:20:1a:7a:82:
                    a2:ee:21:26:f1:27:a5:64:d5:bf:17:75:40:5a:71:
                    66:2a:92:f3:73:9b:96:eb:bb:9c:55:48:d5:da:64:
                    7c:9a:b4:a0:4a:b1:c4:4e:e7:f4:50:53:98:df:e6:
                    cc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                22:55:6D:02:90:AA:08:E0:4E:52:E5:89:0C:17:18:24:39:26:9D:40
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/67kEbHHX12x7WNmrVhaa9kfrr7jnZcZqEKa4v3VZhm3S/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/67kEbHHX12x7WNmrVhaa9kfrr7jnZcZqEKa4v3VZhm3S/0/22556D0290AA08E04E52E5890C17182439269D40.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.8.0/22
                IPv6:
                  2804:1b60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61724

    Signature Algorithm: sha256WithRSAEncryption
         b0:7c:91:e5:4d:e8:8e:cc:fd:f4:40:ec:85:1a:61:c8:c0:31:
         5d:dd:05:5e:4a:cf:d2:dc:4d:0d:05:f5:6d:fb:cf:c2:70:cb:
         6e:94:86:09:e4:30:4e:7f:29:3d:ab:a3:2a:f3:ea:95:29:3c:
         36:e0:5c:28:1e:ea:3a:f0:d8:42:bd:42:c2:8d:e0:61:cd:8f:
         35:6f:36:13:67:7a:ef:f6:a9:54:e3:1b:29:b6:0c:b8:15:5e:
         43:d7:c1:f8:78:26:12:19:9d:19:54:36:e9:b4:56:13:54:bf:
         24:58:41:fc:22:7a:41:ce:ca:4b:59:1d:40:e6:2d:74:ff:27:
         f8:19:f1:ab:e3:3f:de:36:4f:9c:c3:79:64:45:46:73:3e:1f:
         e5:98:5f:07:63:1b:42:e4:90:9d:fc:ba:38:ac:e2:84:c7:7a:
         0d:4a:0f:ae:ab:d4:30:9d:97:04:38:f6:b2:b1:61:1c:7e:23:
         c3:1d:19:18:0f:de:79:43:03:a6:52:7d:1b:ae:5d:35:51:86:
         0d:51:06:5c:f3:9c:00:b3:45:91:7a:97:04:e6:3a:1f:14:bd:
         3b:be:57:95:e4:12:98:8d:0b:18:c7:1b:bf:e9:1b:51:d6:cc:
         6d:8b:11:a0:f4:7d:38:8f:b7:6d:54:ec:91:45:d9:cc:78:eb:
         f3:1f:2a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:46 2024 by rpki-client on console.sobornost.net