Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/29C31657A960C2E935AE54CDF5F84A913CCF19AE.cer
File:                     29C31657A960C2E935AE54CDF5F84A913CCF19AE.cer (raw, json)
Hash identifier:          IZf/XAvjl6f+Bnofed+xyEbV7719LGRTjcfzZ2wLaT4=
Subject key identifier:   29:C3:16:57:A9:60:C2:E9:35:AE:54:CD:F5:F8:4A:91:3C:CF:19:AE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       76BC4A15F00C01A2863527DCBCCFDD232DF9F8EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/29C31657A960C2E935AE54CDF5F84A913CCF19AE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 02 Aug 2024 11:23:00 +0000
Certificate not after:    Fri 01 Aug 2025 11:28:00 +0000
Subordinate resources:    AS: 270737
                          IP: 177.221.136.0/22
                          IP: 2804:709c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:bc:4a:15:f0:0c:01:a2:86:35:27:dc:bc:cf:dd:23:2d:f9:f8:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  2 11:23:00 2024 GMT
            Not After : Aug  1 11:28:00 2025 GMT
        Subject: CN=29C31657A960C2E935AE54CDF5F84A913CCF19AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:df:dc:29:d6:ba:2f:dc:a0:ba:1e:0b:c2:e3:
                    f1:47:3e:37:cf:c4:80:dd:4d:24:88:fd:21:c9:00:
                    ff:b7:cf:48:23:7d:24:6a:ff:a3:f9:04:9f:4d:37:
                    01:74:9d:08:31:61:2f:a7:61:6a:e0:ae:07:2a:94:
                    f9:82:42:50:28:77:7e:c3:43:69:1e:f7:83:91:82:
                    f2:a4:52:a8:1a:1a:2a:7e:e4:c3:a9:ff:31:90:3e:
                    bb:ce:7a:1a:9e:ed:58:70:87:93:dd:57:2e:5b:61:
                    2a:a5:6e:80:fc:a6:40:e9:49:9c:63:f9:f8:aa:49:
                    ff:6c:34:00:21:e8:da:62:6a:9a:8f:82:ed:28:b7:
                    f0:6f:f6:36:b6:b8:40:20:07:a3:c2:ce:5a:ee:d0:
                    ad:e5:0c:f9:4e:2d:85:8d:21:e8:57:be:83:44:50:
                    63:cc:6c:23:48:7a:3a:21:11:a9:f1:08:39:f4:4d:
                    8e:c5:38:7a:c3:62:f8:c2:a2:c3:8a:40:f8:1f:e1:
                    54:db:28:64:8a:53:52:33:da:fa:3a:56:6e:29:9a:
                    7d:4a:02:fd:d9:93:08:16:1d:4f:68:d0:29:0e:61:
                    19:90:aa:99:dd:01:35:f5:df:6b:05:56:f8:9c:e7:
                    f1:cb:91:8a:26:89:12:cc:48:cc:42:35:e7:d5:4f:
                    77:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                29:C3:16:57:A9:60:C2:E9:35:AE:54:CD:F5:F8:4A:91:3C:CF:19:AE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/29C31657A960C2E935AE54CDF5F84A913CCF19AE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.136.0/22
                IPv6:
                  2804:709c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270737

    Signature Algorithm: sha256WithRSAEncryption
         86:27:74:36:c7:7b:8d:e1:57:0e:62:f0:ac:22:68:12:70:24:
         2b:12:9b:11:f1:f7:6c:ab:9a:e2:1c:ef:f2:34:01:71:cd:e8:
         12:1b:2a:26:24:18:60:d9:eb:c8:70:f0:4b:97:e0:35:52:55:
         10:01:80:da:c5:69:a6:d9:20:56:f9:7f:cc:af:5d:66:9d:a8:
         39:24:db:33:1d:9e:b1:b7:46:55:37:b2:98:12:46:e8:97:64:
         53:0a:d7:a4:4f:a5:56:6e:c5:8b:2c:99:6a:be:7d:c1:df:08:
         db:3e:e1:06:8c:55:f0:67:61:d5:17:92:88:a8:13:33:21:d2:
         0c:32:bf:b9:61:e7:40:e2:8c:e3:83:a7:60:bb:37:96:9e:c7:
         e0:48:fd:c4:3b:51:89:61:c9:a6:24:e0:38:d5:eb:20:f8:03:
         f1:27:5f:0f:7c:64:e3:31:6e:c9:53:b0:01:e0:b8:54:3d:0a:
         a1:77:56:09:4b:c2:35:42:af:22:f4:d9:5c:e5:15:53:16:1f:
         90:58:7d:78:04:7b:50:a4:8e:cd:ac:93:9d:40:99:fb:6c:f1:
         83:75:a3:34:04:d9:93:5e:2b:aa:27:3a:63:74:de:a3:1b:47:
         1c:7d:86:9a:0c:24:b5:aa:cd:a5:60:dd:04:c5:56:36:a0:bb:
         86:74:6d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:48 2024 by rpki-client on console.sobornost.net