Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/267CFD31CE3D98329F42489671A8D3C987CB2774.cer
File:                     267CFD31CE3D98329F42489671A8D3C987CB2774.cer (raw, json)
Hash identifier:          3ZS9JuzVqWlhJwg06vL/w4YEAmyQJ5MaqO+zD4Wc9U0=
Subject key identifier:   26:7C:FD:31:CE:3D:98:32:9F:42:48:96:71:A8:D3:C9:87:CB:27:74
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6BBF08E72516A483EEB911AA86AA354725242B8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CiLRDdtgpLjBPbxqjYKbYewZSayYtRQPGn87PU36TpyS/1/267CFD31CE3D98329F42489671A8D3C987CB2774.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CiLRDdtgpLjBPbxqjYKbYewZSayYtRQPGn87PU36TpyS/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 13:34:18 +0000
Certificate not after:    Thu 03 Apr 2025 13:39:18 +0000
Subordinate resources:    AS: 262365
                          IP: 177.128.80.0/21
                          IP: 2804:858::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:bf:08:e7:25:16:a4:83:ee:b9:11:aa:86:aa:35:47:25:24:2b:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 13:34:18 2024 GMT
            Not After : Apr  3 13:39:18 2025 GMT
        Subject: CN=267CFD31CE3D98329F42489671A8D3C987CB2774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:71:63:96:42:83:ce:3d:a3:29:9b:5d:a4:5e:
                    17:86:dc:c7:c2:54:fb:f2:76:ed:10:2c:f3:56:bd:
                    01:fc:cc:d2:b7:85:a1:b4:81:b9:84:a0:05:fa:b2:
                    8e:36:41:64:8c:b8:c7:b7:be:c0:42:84:8e:0e:e4:
                    2e:bc:f7:95:b3:2f:3a:62:43:fa:94:b1:3e:c8:b5:
                    31:e9:67:89:ca:e2:24:82:8d:cd:24:a2:8e:1a:ef:
                    6d:67:93:99:29:a4:51:c9:2a:7c:b3:d3:b6:f8:a9:
                    3b:59:0f:59:55:00:94:ad:f2:f7:a5:73:fe:6c:33:
                    40:55:71:07:3a:6f:94:ed:6e:f0:ca:a8:c5:cc:ca:
                    2c:4f:21:85:04:ac:b5:54:6d:3f:22:70:50:e5:3a:
                    79:72:81:8c:64:a8:c1:8e:2a:32:30:6c:a4:a2:a8:
                    71:1c:87:63:fc:22:41:56:08:f5:41:6b:92:41:6f:
                    b2:09:1d:bb:aa:56:31:63:6c:6c:a8:72:1b:01:c6:
                    9f:94:23:9f:40:3b:39:b1:cd:0b:e2:ce:ca:31:a6:
                    b6:59:12:ed:96:6b:c3:23:f5:f9:fd:01:eb:c9:11:
                    ac:10:07:2a:8f:11:d9:9a:0c:dd:7c:e8:f9:34:e6:
                    0b:08:de:b2:2b:a3:cd:b5:f3:a2:b1:40:78:03:ab:
                    81:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                26:7C:FD:31:CE:3D:98:32:9F:42:48:96:71:A8:D3:C9:87:CB:27:74
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CiLRDdtgpLjBPbxqjYKbYewZSayYtRQPGn87PU36TpyS/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CiLRDdtgpLjBPbxqjYKbYewZSayYtRQPGn87PU36TpyS/1/267CFD31CE3D98329F42489671A8D3C987CB2774.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.80.0/21
                IPv6:
                  2804:858::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262365

    Signature Algorithm: sha256WithRSAEncryption
         82:7a:40:3d:7b:09:48:d1:84:15:54:c1:3a:32:f0:81:6e:1b:
         44:94:56:7d:8c:99:90:ad:88:0e:da:d1:f3:1c:b8:63:52:75:
         6e:08:b2:97:ea:d8:24:fd:4c:64:7a:df:79:19:e3:e0:ee:12:
         ac:80:c2:70:1e:31:3f:99:ba:c6:46:9e:86:25:ff:ad:93:ca:
         2c:77:9b:56:ee:66:47:73:95:93:08:e6:dd:6f:7e:63:ae:49:
         d1:39:4f:88:b4:a0:bc:71:ca:28:9b:a3:50:b8:1c:17:24:76:
         e2:09:ef:10:fa:ac:6a:32:9d:df:40:2c:78:63:9a:12:d1:6c:
         02:85:1a:04:42:2a:89:42:91:65:dd:58:b5:ce:14:fb:09:a4:
         dc:d8:7f:5a:19:e6:37:0b:81:12:b8:16:47:df:28:95:0c:89:
         44:9b:17:3a:15:a7:37:79:06:d3:8f:cc:3f:65:e5:d4:eb:95:
         d5:b6:b7:a4:6f:fa:55:ac:6b:65:2a:e6:eb:f5:82:b1:6f:24:
         f2:67:5b:8c:31:00:1d:b7:81:55:61:14:a9:2d:60:b6:7d:97:
         c4:51:42:ac:40:1b:82:8a:6e:88:97:1d:17:b9:fa:18:19:4c:
         5f:ad:cd:69:d2:c2:60:eb:53:ae:bc:25:4b:4c:d9:1b:5b:da:
         44:12:c3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:47 2024 by rpki-client on console.sobornost.net