Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/270A6B614E226CC356973519B40E8C57F2B8A8C9.cer
File:                     270A6B614E226CC356973519B40E8C57F2B8A8C9.cer (raw, json)
Hash identifier:          V+5f1dGEx8GKFHr7xTL4EuA1vbcPYqzjl+Vb8sN+J3o=
Subject key identifier:   27:0A:6B:61:4E:22:6C:C3:56:97:35:19:B4:0E:8C:57:F2:B8:A8:C9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       26D17A8B96E425418BFCAC33B5DC8865BDC4A27A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5UbQ9SkZDWwvKjGWCP3D2EJWXjAeBNJ3nPSso3be6jhJ/1/270A6B614E226CC356973519B40E8C57F2B8A8C9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5UbQ9SkZDWwvKjGWCP3D2EJWXjAeBNJ3nPSso3be6jhJ/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 08 Oct 2024 13:29:52 +0000
Certificate not after:    Tue 07 Oct 2025 13:34:52 +0000
Subordinate resources:    AS: 269030
                          IP: 45.177.192.0/22
                          IP: 2804:5e64::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d1:7a:8b:96:e4:25:41:8b:fc:ac:33:b5:dc:88:65:bd:c4:a2:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  8 13:29:52 2024 GMT
            Not After : Oct  7 13:34:52 2025 GMT
        Subject: CN=270A6B614E226CC356973519B40E8C57F2B8A8C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:af:d2:5b:01:db:12:0d:e0:43:8b:a0:b2:ac:
                    6a:13:dc:d5:5a:ba:6d:54:70:91:fd:53:2a:cf:bc:
                    9d:a2:fd:3a:99:52:e2:47:8b:73:25:4b:6f:96:1e:
                    02:9b:48:1a:a1:94:6a:ab:52:2f:dc:c1:62:d0:64:
                    9b:08:48:39:5f:08:5b:fb:3f:60:af:63:69:30:00:
                    6d:10:33:52:be:52:87:06:6d:d0:28:fe:4c:51:6a:
                    41:3f:d5:86:21:ac:2e:f1:ec:7d:87:5c:f5:7f:c4:
                    3c:95:55:74:40:17:02:80:1e:f3:49:1e:3f:48:74:
                    e2:b9:c3:75:68:5a:01:45:c1:8d:07:ff:76:af:c3:
                    60:05:98:76:c3:0c:77:48:be:fd:e7:63:86:ba:81:
                    9a:09:1f:4c:7c:d1:fd:12:e7:cc:11:11:a2:37:78:
                    70:62:0b:58:66:ad:e0:e1:91:76:6d:92:cf:10:1c:
                    7a:72:41:af:a0:aa:fd:a5:ef:77:4e:63:80:3b:0c:
                    67:48:e2:a0:49:dc:5f:da:08:2f:e7:71:49:b8:e1:
                    48:53:f4:e3:07:63:82:42:ef:d2:31:ff:cd:4f:43:
                    21:c4:05:51:35:4c:3f:71:de:a9:97:1d:8b:ea:4f:
                    18:44:61:69:10:03:80:e9:e7:06:7b:9b:8a:c3:60:
                    f3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                27:0A:6B:61:4E:22:6C:C3:56:97:35:19:B4:0E:8C:57:F2:B8:A8:C9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5UbQ9SkZDWwvKjGWCP3D2EJWXjAeBNJ3nPSso3be6jhJ/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5UbQ9SkZDWwvKjGWCP3D2EJWXjAeBNJ3nPSso3be6jhJ/1/270A6B614E226CC356973519B40E8C57F2B8A8C9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.192.0/22
                IPv6:
                  2804:5e64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269030

    Signature Algorithm: sha256WithRSAEncryption
         c5:08:96:e1:76:ff:d6:cb:67:2c:93:f0:97:4b:dd:b9:43:72:
         c3:b0:0c:3e:28:82:ec:34:14:db:93:f8:66:58:73:88:7d:ef:
         ac:a5:83:b1:98:8a:01:36:0d:ca:a0:70:e5:db:1f:a4:6f:83:
         45:3f:5f:d6:0b:4a:d8:82:8d:7f:21:30:22:4b:9f:dd:8a:f6:
         59:41:3d:f9:cc:10:87:41:7b:bf:bd:18:18:4e:28:ee:c9:c3:
         4a:18:e2:c8:6b:b0:28:dd:78:ca:f0:b8:ad:27:1d:b5:3c:0a:
         d6:c7:00:01:5b:df:ef:0f:d9:51:6c:76:58:5a:9e:cf:22:d9:
         fc:6a:9b:08:da:cf:10:d6:21:1a:33:a8:fd:96:77:76:b2:e5:
         5b:a2:2f:2d:7f:58:df:91:b9:5c:38:38:4d:fd:af:87:f1:50:
         46:f7:67:75:28:c0:dc:8c:bb:c6:e7:f9:03:22:07:4d:53:31:
         59:8b:5c:01:b3:96:9c:44:97:c4:5a:11:d3:66:7f:25:8e:bb:
         89:36:ac:ea:a9:dd:97:d8:32:f3:94:77:ba:76:f7:1f:41:c5:
         50:a7:1b:c6:16:96:37:c7:ac:97:51:89:20:ad:09:df:cb:0d:
         fc:a5:18:d2:4a:15:21:9f:8c:01:c2:75:43:a8:eb:2e:2a:8d:
         3a:e0:c2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:47 2024 by rpki-client on console.sobornost.net