Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2E940954738793728401E2B3BA1BF1AE600FF21A.cer
File:                     2E940954738793728401E2B3BA1BF1AE600FF21A.cer (raw, json)
Hash identifier:          1adjI6wHO4/46Zbi/VINX8YqD0UT4Fy64s6hmzvo6I0=
Subject key identifier:   2E:94:09:54:73:87:93:72:84:01:E2:B3:BA:1B:F1:AE:60:0F:F2:1A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       43CB637E65FF9D418BE4E3F7EBC038239214211C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BYdxeBDCKvqxU5gjqoqXi62on7CK9Ht26qgKKRPrZk8G/0/2E940954738793728401E2B3BA1BF1AE600FF21A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BYdxeBDCKvqxU5gjqoqXi62on7CK9Ht26qgKKRPrZk8G/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 Jul 2024 19:34:00 +0000
Certificate not after:    Mon 21 Jul 2025 19:39:00 +0000
Subordinate resources:    AS: 264329
                          IP: 138.122.136.0/22
                          IP: 2804:265c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:cb:63:7e:65:ff:9d:41:8b:e4:e3:f7:eb:c0:38:23:92:14:21:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 22 19:34:00 2024 GMT
            Not After : Jul 21 19:39:00 2025 GMT
        Subject: CN=2E940954738793728401E2B3BA1BF1AE600FF21A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2c:72:41:41:7d:08:75:ec:a7:06:bb:22:59:
                    af:2b:56:d1:6c:1c:6a:8a:ba:e5:ef:91:09:2d:77:
                    18:a7:cd:eb:be:f5:41:0e:0f:0d:4f:6d:e6:8b:81:
                    9d:c3:8e:bc:1d:a7:78:c0:1a:65:42:9a:03:90:66:
                    f9:f4:91:86:12:ce:36:b2:fc:fb:d4:12:32:3f:09:
                    83:a9:50:8b:d2:5c:bf:f3:39:cf:e3:2c:91:d8:a2:
                    80:6b:02:83:0e:37:f4:94:07:ba:44:5a:88:49:a6:
                    a2:42:5c:90:72:c9:a5:fc:36:4b:a1:65:b2:eb:0a:
                    a4:d6:4b:30:dd:7a:eb:a8:49:f0:9c:b5:8c:a0:99:
                    fb:1a:a5:6a:23:47:89:42:e4:17:2b:8d:ef:d9:8f:
                    df:26:07:d6:38:c9:4b:0b:91:4d:50:10:33:c5:bb:
                    f8:60:38:04:3b:fe:6b:5b:e6:e0:05:bb:5f:14:46:
                    71:29:24:c9:00:a5:c8:4c:51:ba:f1:54:50:c6:6c:
                    f1:9f:a2:6d:49:2c:ba:a4:a6:e6:3a:a5:b2:20:cd:
                    d1:27:da:42:15:6e:da:0b:2c:1f:f4:b6:79:d2:09:
                    8d:c2:40:c5:94:cd:86:27:c8:7d:22:da:0a:3a:d1:
                    93:fa:51:d2:de:9a:18:19:f5:e4:bc:33:94:0e:68:
                    b6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2E:94:09:54:73:87:93:72:84:01:E2:B3:BA:1B:F1:AE:60:0F:F2:1A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BYdxeBDCKvqxU5gjqoqXi62on7CK9Ht26qgKKRPrZk8G/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BYdxeBDCKvqxU5gjqoqXi62on7CK9Ht26qgKKRPrZk8G/0/2E940954738793728401E2B3BA1BF1AE600FF21A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.136.0/22
                IPv6:
                  2804:265c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264329

    Signature Algorithm: sha256WithRSAEncryption
         16:3c:2d:3e:49:b3:44:0e:82:71:ef:4c:2e:14:67:5a:80:ce:
         29:c6:e0:f5:f1:75:48:23:4d:b5:df:19:19:ea:f3:e0:61:8d:
         d0:67:af:11:09:34:8e:cc:1a:8f:0c:a2:44:82:f0:d5:3f:b6:
         c7:99:63:b3:5a:c5:24:0f:bb:ab:42:58:33:ad:e8:22:34:bf:
         76:1a:d1:6d:50:aa:63:aa:ac:8f:a5:07:4d:77:34:54:45:57:
         1c:e6:09:57:8c:bd:e7:f8:cc:c2:28:0b:18:c8:a2:8e:b3:35:
         f0:28:d4:46:91:70:c4:19:80:9b:ab:fb:6c:9c:b5:b6:ac:4c:
         13:58:e8:91:8f:98:de:eb:c9:81:35:2d:a0:eb:bf:dc:53:ab:
         1b:d0:f0:28:7f:7b:17:b0:b1:eb:14:e4:0f:2f:3f:da:3f:39:
         8b:73:8c:c8:6a:d4:3b:cc:aa:ff:f1:e9:ef:23:a9:f7:a0:21:
         f0:a3:76:9f:0a:ce:9a:d4:5a:c4:81:e2:fb:95:fe:84:7f:79:
         bb:da:aa:bc:fa:45:44:66:67:27:5f:58:a3:d0:55:82:89:10:
         d3:ff:e6:42:44:84:a7:06:46:4b:8f:ef:0c:7e:55:bb:ec:12:
         88:a6:58:32:41:a3:d7:6f:b5:16:50:7b:ed:12:9c:3c:2c:71:
         07:d9:a0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:48 2024 by rpki-client on console.sobornost.net