Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2F1383F64BD17A7B2A51D898B7844C28394E116E.cer
File:                     2F1383F64BD17A7B2A51D898B7844C28394E116E.cer (raw, json)
Hash identifier:          v2ZS/zCNvCPGO9HLDmV+tdvcPZGIGMx/7M9MijzicO8=
Subject key identifier:   2F:13:83:F6:4B:D1:7A:7B:2A:51:D8:98:B7:84:4C:28:39:4E:11:6E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3B25214D4F203658D91112CFD60EC8A43F4AA38D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EmQF7LdXHDMkEwsvsomego24xJArotwrxfd4rvyGYGQY/0/2F1383F64BD17A7B2A51D898B7844C28394E116E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EmQF7LdXHDMkEwsvsomego24xJArotwrxfd4rvyGYGQY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 30 Sep 2024 16:52:51 +0000
Certificate not after:    Mon 29 Sep 2025 16:57:51 +0000
Subordinate resources:    AS: 272750
                          IP: 187.49.148.0/22
                          IP: 2804:8814::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:25:21:4d:4f:20:36:58:d9:11:12:cf:d6:0e:c8:a4:3f:4a:a3:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 30 16:52:51 2024 GMT
            Not After : Sep 29 16:57:51 2025 GMT
        Subject: CN=2F1383F64BD17A7B2A51D898B7844C28394E116E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:8b:23:57:29:0c:cf:e3:c5:f1:32:53:63:74:
                    ca:9b:6f:68:51:45:41:0d:c3:aa:32:db:0b:6c:b9:
                    7a:17:39:5b:ed:65:26:ba:6f:d4:91:ba:8b:88:68:
                    b8:ab:a1:9d:1d:fc:44:61:a0:cf:5b:44:b1:f9:9e:
                    e5:f8:55:bf:77:fd:b0:2f:30:a3:a2:70:62:b7:ea:
                    3d:46:0f:f0:87:92:77:4e:a7:44:c1:a0:96:f8:0a:
                    0f:6c:7d:6c:c9:cf:f9:4c:f4:49:1e:2e:6b:4c:ba:
                    75:f9:b0:19:7d:63:2d:30:a1:4f:3a:47:c2:6a:18:
                    c9:b0:55:01:3a:77:4c:73:b0:91:ad:87:78:28:b1:
                    2f:7a:5c:d7:a8:0d:a3:e1:dc:14:15:db:20:60:18:
                    eb:e2:ef:4d:73:07:1e:85:b6:cc:09:4d:61:b3:9d:
                    94:68:18:cc:15:88:28:1f:02:0e:68:d1:0e:33:6a:
                    85:55:c4:46:70:c2:c1:9d:98:74:e9:3a:67:52:13:
                    b8:68:9a:51:7b:68:a8:f1:32:7c:cf:be:62:5d:3e:
                    94:a2:46:87:e4:4a:3f:cf:10:55:15:46:22:10:c3:
                    df:56:16:c2:49:f2:7c:85:cf:3f:22:52:1d:0d:d7:
                    ea:a2:33:e8:3e:e3:5b:d7:b0:b3:58:54:18:d6:ba:
                    cc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2F:13:83:F6:4B:D1:7A:7B:2A:51:D8:98:B7:84:4C:28:39:4E:11:6E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EmQF7LdXHDMkEwsvsomego24xJArotwrxfd4rvyGYGQY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EmQF7LdXHDMkEwsvsomego24xJArotwrxfd4rvyGYGQY/0/2F1383F64BD17A7B2A51D898B7844C28394E116E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.148.0/22
                IPv6:
                  2804:8814::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272750

    Signature Algorithm: sha256WithRSAEncryption
         8e:18:bd:86:f3:b6:cb:80:6c:8e:f5:96:36:18:ad:b0:3d:28:
         1e:0b:00:d5:59:88:d4:ac:f3:f4:ad:13:aa:0a:fc:92:f8:ef:
         49:5f:04:71:d4:2c:2d:bb:c3:c4:b8:a9:68:72:3a:8f:2a:6c:
         f9:1a:09:e9:ce:db:2f:1d:d6:2c:cc:94:00:0f:c6:9d:dc:41:
         1e:25:70:a1:90:9c:c4:ea:21:54:64:23:ca:24:94:5d:75:f7:
         98:47:05:7a:9f:a4:58:11:37:18:0c:b5:01:99:24:0a:61:a0:
         f4:6b:e0:01:10:1a:8b:f3:6d:64:ef:5f:f6:15:fd:e9:43:05:
         21:5c:09:86:78:52:2b:40:f1:75:7a:f4:11:85:4e:8f:88:a0:
         58:c2:c4:d7:33:17:9c:e5:a7:3c:af:bb:08:75:46:2b:93:c6:
         aa:63:32:65:2e:02:3e:d4:86:3d:2b:f4:10:aa:65:3d:1a:fd:
         2e:2f:a2:02:33:18:ff:5c:40:59:e9:36:0c:9d:8e:40:55:d2:
         e2:4e:25:65:fa:d8:a9:4c:f1:25:fe:0a:81:5c:ae:1d:d8:51:
         1b:c3:a6:5e:f8:3d:c7:c1:fb:9f:56:7c:00:34:6f:a9:c6:ed:
         95:25:01:2f:10:4c:e4:df:53:1e:4c:46:97:a4:00:ef:80:12:
         e5:e6:5b:1e
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUOyUhTU8gNljZERLP1g7IpD9Ko40wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA5MzAxNjUyNTFaFw0yNTA5MjkxNjU3NTFaMDMxMTAvBgNV
BAMTKDJGMTM4M0Y2NEJEMTdBN0IyQTUxRDg5OEI3ODQ0QzI4Mzk0RTExNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpiyNXKQzP48XxMlNjdMqbb2hR
RUENw6oy2wtsuXoXOVvtZSa6b9SRuouIaLiroZ0d/ERhoM9bRLH5nuX4Vb93/bAv
MKOicGK36j1GD/CHkndOp0TBoJb4Cg9sfWzJz/lM9EkeLmtMunX5sBl9Yy0woU86
R8JqGMmwVQE6d0xzsJGth3gosS96XNeoDaPh3BQV2yBgGOvi701zBx6FtswJTWGz
nZRoGMwViCgfAg5o0Q4zaoVVxEZwwsGdmHTpOmdSE7homlF7aKjxMnzPvmJdPpSi
RofkSj/PEFUVRiIQw99WFsJJ8nyFzz8iUh0N1+qiM+g+41vXsLNYVBjWuszBAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQvE4P2S9F6eypR
2Ji3hEwoOU4RbjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRW1R
RjdMZFhIRE1rRXdzdnNvbWVnbzI0eEpBcm90d3J4ZmQ0cnZ5R1lHUVkvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vt
UUY3TGRYSERNa0V3c3Zzb21lZ28yNHhKQXJvdHdyeGZkNHJ2eUdZR1FZLzAvMkYx
MzgzRjY0QkQxN0E3QjJBNTFEODk4Qjc4NDRDMjgzOTRFMTE2RS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCuzGUMA0EAgACMAcDBQAoBIgUMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQpbjANBgkqhkiG9w0BAQsFAAOCAQEAjhi9hvO2y4BsjvWW
NhitsD0oHgsA1VmI1Kzz9K0Tqgr8kvjvSV8EcdQsLbvDxLipaHI6jyps+RoJ6c7b
Lx3WLMyUAA/GndxBHiVwoZCcxOohVGQjyiSUXXX3mEcFep+kWBE3GAy1AZkkCmGg
9GvgARAai/NtZO9f9hX96UMFIVwJhnhSK0DxdXr0EYVOj4igWMLE1zMXnOWnPK+7
CHVGK5PGqmMyZS4CPtSGPSv0EKplPRr9Li+iAjMY/1xAWek2DJ2OQFXS4k4lZfrY
qUzxJf4KgVyuHdhRG8OmXvg9x8H7n1Z8ADRvqcbtlSUBLxBM5N9THkxGl6QA74AS
5eZbHg==
-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:49 2024 by rpki-client on console.sobornost.net