Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.cer
File:                     3003122391B162B39EE7A7E7BD630BF0F3B7F06A.cer (raw, json)
Hash identifier:          el2KbBKd4lzgjPfNF04IIPFXigHm8KnbDq3/VfoFWPI=
Subject key identifier:   30:03:12:23:91:B1:62:B3:9E:E7:A7:E7:BD:63:0B:F0:F3:B7:F0:6A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       04D36228B470080585F1D80B4DC8C82476C7922E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Apr 2024 02:31:23 +0000
Certificate not after:    Fri 04 Apr 2025 02:36:23 +0000
Subordinate resources:    AS: 262478
                          IP: 177.47.240.0/20
                          IP: 2804:a78::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d3:62:28:b4:70:08:05:85:f1:d8:0b:4d:c8:c8:24:76:c7:92:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  5 02:31:23 2024 GMT
            Not After : Apr  4 02:36:23 2025 GMT
        Subject: CN=3003122391B162B39EE7A7E7BD630BF0F3B7F06A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:74:1d:9e:0d:f2:eb:01:e9:78:8c:bf:30:50:
                    12:1c:93:2d:a6:dd:db:3f:80:c7:02:8d:c5:c9:03:
                    d0:d7:91:0e:54:9d:91:ad:8a:34:7c:4f:a2:25:43:
                    a0:05:e4:16:1f:d4:e9:84:9c:ba:1d:b9:19:32:b1:
                    f4:90:d7:5f:53:9e:db:7f:f5:08:ea:a8:cf:37:6a:
                    61:b0:4d:19:a3:be:68:ff:fe:d7:4e:38:6c:f9:c6:
                    8f:9a:77:c3:83:9f:42:8a:90:20:62:7e:9a:45:80:
                    6a:7e:5f:bc:d2:64:0e:2b:69:0c:96:a3:b6:1b:39:
                    d8:45:6e:ca:ff:cb:28:e7:e4:7a:12:57:63:09:26:
                    8c:97:1d:87:9a:1b:bd:f4:16:5f:37:7e:20:5f:f2:
                    bf:49:44:83:35:aa:7b:0a:1e:e0:21:e4:cf:92:31:
                    1f:82:dc:bb:5c:2b:96:8c:76:75:6a:88:7e:bb:bb:
                    d1:2a:15:8a:d4:be:d1:61:84:ee:a1:63:07:30:3f:
                    51:5a:15:18:71:6d:9c:80:f5:5a:fd:24:cc:58:f7:
                    7b:c6:78:24:e0:45:22:50:bc:40:1c:89:9b:3d:78:
                    31:e3:17:02:1e:2d:63:06:48:c5:26:c4:74:78:fa:
                    c4:18:d2:8c:0c:63:45:88:aa:37:27:c7:da:a4:65:
                    70:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:03:12:23:91:B1:62:B3:9E:E7:A7:E7:BD:63:0B:F0:F3:B7:F0:6A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.240.0/20
                IPv6:
                  2804:a78::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262478

    Signature Algorithm: sha256WithRSAEncryption
         af:12:6d:0d:7f:33:7c:cf:66:e5:90:c1:8a:ee:85:05:7b:4c:
         0e:b6:8b:60:a0:fa:06:b6:72:93:f8:13:b8:4c:75:c2:c3:fe:
         4a:12:89:fa:66:50:15:aa:11:b6:33:de:ae:7c:31:29:dd:c6:
         26:bb:16:72:2a:b7:51:bb:f2:2d:ab:15:e4:cb:52:fa:bd:56:
         22:8e:84:cd:bf:8a:d9:00:f5:4a:72:f0:36:ea:ac:fd:20:62:
         d7:d8:68:5a:46:a3:9d:f0:f9:02:83:16:9d:47:38:18:d4:cd:
         42:2c:aa:70:f7:03:52:d0:93:77:ae:6d:4f:e0:91:9a:4c:f6:
         27:c6:05:3a:55:0b:0c:18:07:0b:43:4e:d2:d0:99:71:93:02:
         52:87:0a:31:7f:a5:cc:fd:8b:40:e6:8b:fd:4f:d2:6c:0e:46:
         92:f2:b3:72:7e:17:4e:71:7f:25:cf:de:0b:4f:4a:37:6a:76:
         84:ae:0b:36:89:b2:55:c8:58:56:b3:10:fb:b6:d7:3f:5d:5d:
         f3:bd:59:95:62:b6:35:f6:e2:d8:7a:fd:c8:9d:14:68:9c:64:
         a4:4e:39:93:d2:f0:e4:b2:42:10:d2:ca:a3:59:fd:5c:a0:f7:
         bf:11:13:f7:70:66:8d:5b:9a:e6:b3:a9:a7:1c:bd:9b:9b:d3:
         8a:ca:67:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:49 2024 by rpki-client on console.sobornost.net