Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.cer
File:                     30FE93C29B2D9E965F52FCED04760810A240E9E1.cer (raw, json)
Hash identifier:          GvbgpyKVpSk9BhVkU67YijS4UxIuUX223+pyUyioPAo=
Subject key identifier:   30:FE:93:C2:9B:2D:9E:96:5F:52:FC:ED:04:76:08:10:A2:40:E9:E1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       74628C902ADA70021EDE899700A30C7F5B9EA981
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 18:34:40 +0000
Certificate not after:    Thu 03 Apr 2025 18:39:40 +0000
Subordinate resources:    AS: 53246
                          IP: 170.150.40.0/22
                          IP: 177.21.96.0/19
                          IP: 191.242.160.0/20
                          IP: 2804:358::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:62:8c:90:2a:da:70:02:1e:de:89:97:00:a3:0c:7f:5b:9e:a9:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 18:34:40 2024 GMT
            Not After : Apr  3 18:39:40 2025 GMT
        Subject: CN=30FE93C29B2D9E965F52FCED04760810A240E9E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c2:ee:5a:83:89:9d:da:69:83:ab:07:51:94:
                    ff:68:72:fa:ed:15:c1:06:91:e6:51:d0:de:8c:de:
                    b3:1a:42:b3:d9:02:eb:7a:f3:6a:7c:88:b5:b9:3d:
                    3b:71:8e:0d:99:54:1c:43:21:8b:25:5b:64:1d:e2:
                    00:66:78:dd:df:e8:b8:46:98:4c:ae:da:30:d7:3d:
                    69:5c:98:dc:d9:ba:da:40:9c:31:d0:56:0c:73:36:
                    37:c8:41:b0:9a:06:50:7a:b8:a9:04:9b:09:6d:80:
                    d2:df:25:78:fb:03:eb:87:af:8e:67:45:c6:44:5e:
                    cf:36:f1:03:1a:02:df:b2:00:96:34:e0:be:45:ff:
                    81:0e:ba:e8:3c:14:f5:3b:96:55:a9:af:8f:1a:0e:
                    79:9d:08:f0:be:95:81:b2:e3:9f:97:3e:ef:fb:46:
                    2c:b8:55:a6:66:c0:74:c2:aa:c8:54:44:82:40:8b:
                    49:d4:c9:ea:82:f5:ee:63:78:e9:08:b7:4c:1c:ba:
                    04:5b:48:ef:db:b4:59:51:e2:da:b3:b4:cb:8e:ef:
                    83:eb:90:91:7f:44:30:83:72:10:0a:6b:53:b0:16:
                    da:16:74:60:9f:f1:cb:e3:4e:ab:9d:45:91:d2:72:
                    a7:bd:4b:70:b8:36:a0:af:e6:3c:43:7a:51:29:ae:
                    3f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:FE:93:C2:9B:2D:9E:96:5F:52:FC:ED:04:76:08:10:A2:40:E9:E1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.40.0/22
                  177.21.96.0/19
                  191.242.160.0/20
                IPv6:
                  2804:358::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53246

    Signature Algorithm: sha256WithRSAEncryption
         bd:d4:eb:67:1a:8a:ec:b5:e0:23:56:6b:d3:5b:81:1d:d4:29:
         de:95:d4:6d:72:2f:dd:de:93:f0:5a:30:fb:3d:85:d1:b2:05:
         5a:c9:ea:b3:b3:7b:60:2d:71:27:7f:96:4c:b1:da:e8:77:cd:
         ba:d1:90:1b:c3:e0:06:bf:92:bd:57:78:90:dd:10:90:b8:12:
         60:17:cd:79:4e:23:6f:95:b7:9c:2f:56:53:d3:a4:d6:6e:46:
         ae:a4:14:71:48:c9:38:0a:19:b1:9f:8c:d7:b6:cf:bd:fd:f8:
         8a:b2:98:b5:11:99:cf:d7:87:4f:f4:34:74:85:eb:f9:5c:9c:
         d3:27:dd:8d:84:e6:44:21:ac:ee:51:b0:47:64:05:a6:c1:e8:
         5f:b5:b8:08:b5:60:a5:7e:62:d6:5b:43:eb:53:0e:f8:0f:63:
         d5:57:f6:28:e5:75:a7:23:5a:69:3e:58:16:52:fc:e7:67:e5:
         3d:89:fa:1a:7b:36:d0:a0:d4:68:d7:97:13:16:e3:81:fa:ad:
         91:0e:d3:09:76:0c:1f:0e:89:58:28:83:97:fa:e2:81:24:1c:
         bb:13:37:ee:22:00:4c:27:7f:ee:e0:5c:51:0f:28:48:5f:40:
         16:1a:47:92:e1:e5:ca:96:d0:d3:70:eb:31:3c:4c:ef:3b:34:
         6f:59:ec:32
-----BEGIN CERTIFICATE-----
MIIGPDCCBSSgAwIBAgIUdGKMkCracAIe3omXAKMMf1ueqYEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQxODM0NDBaFw0yNTA0MDMxODM5NDBaMDMxMTAvBgNV
BAMTKDMwRkU5M0MyOUIyRDlFOTY1RjUyRkNFRDA0NzYwODEwQTI0MEU5RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQwu5ag4md2mmDqwdRlP9ocvrt
FcEGkeZR0N6M3rMaQrPZAut682p8iLW5PTtxjg2ZVBxDIYslW2Qd4gBmeN3f6LhG
mEyu2jDXPWlcmNzZutpAnDHQVgxzNjfIQbCaBlB6uKkEmwltgNLfJXj7A+uHr45n
RcZEXs828QMaAt+yAJY04L5F/4EOuug8FPU7llWpr48aDnmdCPC+lYGy45+XPu/7
Riy4VaZmwHTCqshURIJAi0nUyeqC9e5jeOkIt0wcugRbSO/btFlR4tqztMuO74Pr
kJF/RDCDchAKa1OwFtoWdGCf8cvjTqudRZHScqe9S3C4NqCv5jxDelEprj9PAgMB
AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQw/pPCmy2ell9S
/O0EdggQokDp4TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMlJ2
UW5tTmVRcWlVZERxRjRxZ1hSQkJOM29DUGtNRVBmZEhZOGkzSlZQeDEvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJS
dlFubU5lUXFpVWREcUY0cWdYUkJCTjNvQ1BrTUVQZmRIWThpM0pWUHgxLzEvMzBG
RTkzQzI5QjJEOUU5NjVGNTJGQ0VEMDQ3NjA4MTBBMjQwRTlFMS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH
AQH/BCswKTAYBAIAATASAwQCqpYoAwQFsRVgAwQEv/KgMA0EAgACMAcDBQAoBANY
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDP/jANBgkqhkiG9w0BAQsFAAOCAQEA
vdTrZxqK7LXgI1Zr01uBHdQp3pXUbXIv3d6T8Fow+z2F0bIFWsnqs7N7YC1xJ3+W
TLHa6HfNutGQG8PgBr+SvVd4kN0QkLgSYBfNeU4jb5W3nC9WU9Ok1m5GrqQUcUjJ
OAoZsZ+M17bPvf34irKYtRGZz9eHT/Q0dIXr+Vyc0yfdjYTmRCGs7lGwR2QFpsHo
X7W4CLVgpX5i1ltD61MO+A9j1Vf2KOV1pyNaaT5YFlL852flPYn6Gns20KDUaNeX
ExbjgfqtkQ7TCXYMHw6JWCiDl/rigSQcuxM37iIATCd/7uBcUQ8oSF9AFhpHkuHl
ypbQ03DrMTxM7zs0b1nsMg==
-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:49 2024 by rpki-client on console.sobornost.net