Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/315119F0C7108A60EB3B6173D16C7114048C8D54.cer
File:                     315119F0C7108A60EB3B6173D16C7114048C8D54.cer (raw, json)
Hash identifier:          daKiYR9BYFOBsjnE5wxwTqHkws3HJdWmvYTXYMcGK4U=
Subject key identifier:   31:51:19:F0:C7:10:8A:60:EB:3B:61:73:D1:6C:71:14:04:8C:8D:54
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5BFA759707AA5C749CC551819BE32A82B2808638
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6xbNK3nw91aZEU6HeBRbZkBoTkTAPmw1ZG7c7zp99bV9/0/315119F0C7108A60EB3B6173D16C7114048C8D54.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6xbNK3nw91aZEU6HeBRbZkBoTkTAPmw1ZG7c7zp99bV9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 25 Sep 2024 17:44:00 +0000
Certificate not after:    Wed 24 Sep 2025 17:49:00 +0000
Subordinate resources:    AS: 267551
                          IP: 45.70.48.0/22
                          IP: 2804:4324::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:fa:75:97:07:aa:5c:74:9c:c5:51:81:9b:e3:2a:82:b2:80:86:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 25 17:44:00 2024 GMT
            Not After : Sep 24 17:49:00 2025 GMT
        Subject: CN=315119F0C7108A60EB3B6173D16C7114048C8D54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cc:a0:66:99:78:c1:f5:52:27:7c:83:94:50:
                    47:79:87:81:35:00:67:e2:e0:bb:00:9b:f2:62:16:
                    20:2b:d6:cb:50:ba:93:81:99:be:fa:83:da:07:34:
                    1d:ba:e9:96:ce:c1:aa:3a:45:d9:9d:47:b3:6d:9a:
                    2e:83:1b:4b:ee:9a:eb:22:95:af:9d:33:23:6d:28:
                    a5:f4:2d:75:9a:27:07:d2:6a:5e:12:8f:db:a6:ae:
                    ea:8c:d0:ed:87:ed:4e:86:53:9d:f6:e9:7a:4c:e6:
                    16:44:5b:dc:79:c7:95:6b:8b:47:28:65:db:0a:60:
                    08:be:20:0b:e5:d7:cb:a1:7b:50:bf:99:5a:9e:d0:
                    83:0e:91:cc:8d:0a:9e:d5:bf:47:6e:a4:5a:21:e6:
                    31:8d:a9:ad:4c:4f:30:7e:98:e9:47:0c:2b:86:85:
                    af:2e:3e:2e:96:c7:43:3a:4c:5f:b2:28:0b:55:81:
                    ad:76:27:54:2e:b3:38:11:5f:ef:ef:31:fd:d0:e7:
                    56:72:ae:58:c7:4f:96:de:82:60:dc:66:0e:97:7e:
                    e9:a1:46:b0:3a:73:79:8f:21:30:6f:92:7d:60:36:
                    fd:80:93:d7:3f:08:08:36:34:7a:f7:c7:1c:68:c4:
                    e9:cf:08:1e:40:59:33:0f:0e:6e:31:eb:1f:f6:d1:
                    2e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                31:51:19:F0:C7:10:8A:60:EB:3B:61:73:D1:6C:71:14:04:8C:8D:54
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6xbNK3nw91aZEU6HeBRbZkBoTkTAPmw1ZG7c7zp99bV9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6xbNK3nw91aZEU6HeBRbZkBoTkTAPmw1ZG7c7zp99bV9/0/315119F0C7108A60EB3B6173D16C7114048C8D54.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.48.0/22
                IPv6:
                  2804:4324::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267551

    Signature Algorithm: sha256WithRSAEncryption
         7a:d9:03:4b:d0:6c:11:09:c3:f8:a2:b0:1a:29:cd:01:eb:6b:
         93:b1:d5:13:53:be:be:e6:01:65:8d:42:a7:b6:e0:69:00:02:
         13:cc:5e:b5:2a:59:f6:a6:90:6f:7c:98:1c:ed:02:34:e7:97:
         21:d4:a2:a3:df:df:bd:48:23:b1:8d:11:ce:d7:57:64:df:8d:
         4b:ff:4c:3a:5f:5f:a8:b8:98:ac:29:f4:e9:16:c7:db:2b:74:
         ee:f2:a5:a3:5f:34:01:e4:11:99:30:53:0c:05:2b:a3:f3:03:
         56:ea:03:ad:35:d6:ec:03:03:99:18:3d:39:92:1e:b9:a1:33:
         2f:f7:23:90:b9:16:26:94:00:e0:31:3f:ff:25:37:86:0b:2a:
         14:5c:0c:8c:85:a6:24:15:d1:5d:4e:bc:6e:1d:50:2e:f2:13:
         2e:ae:14:01:99:08:c7:66:99:83:26:22:fa:0b:12:a7:fa:22:
         81:90:8d:8f:08:d3:4e:e5:43:18:5c:09:d0:df:c0:48:68:1e:
         7e:5f:af:bb:a8:1a:81:f0:c6:f8:52:1b:47:d9:3f:4e:cc:cb:
         25:1c:af:45:9b:85:60:bd:76:57:1f:f6:d6:ca:9a:e4:b3:71:
         5d:0e:1e:79:96:6a:c1:37:c8:0a:c4:30:bb:93:9d:76:5c:c3:
         10:cf:c2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:49 2024 by rpki-client on console.sobornost.net