Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3701790BFCD740698BF2D59FB7800495728B1041.cer
File:                     3701790BFCD740698BF2D59FB7800495728B1041.cer (raw, json)
Hash identifier:          /Jj4zrPHToHdxUN4aS+LWn/+K1waMLCCfLizEqKiy6k=
Subject key identifier:   37:01:79:0B:FC:D7:40:69:8B:F2:D5:9F:B7:80:04:95:72:8B:10:41
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       476A14D84C18749B4301C53B9FD5739CE424031C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3701790BFCD740698BF2D59FB7800495728B1041.mft
caRepository:             rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 05:29:48 +0000
Certificate not after:    Thu 03 Apr 2025 05:34:48 +0000
Subordinate resources:    AS: 264354
                          IP: 131.108.128.0/22
                          IP: 2804:1d34::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:6a:14:d8:4c:18:74:9b:43:01:c5:3b:9f:d5:73:9c:e4:24:03:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 05:29:48 2024 GMT
            Not After : Apr  3 05:34:48 2025 GMT
        Subject: CN=3701790BFCD740698BF2D59FB7800495728B1041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:21:13:7b:97:43:f5:a0:5f:c0:cf:10:26:c1:
                    3d:98:ef:39:df:50:9b:1b:b1:2f:8a:41:76:53:10:
                    2c:d2:5d:73:d2:1a:fe:69:bf:9e:7f:bc:e1:12:11:
                    7c:9c:fe:33:2a:14:ee:aa:aa:fe:1a:23:90:1c:1f:
                    01:f1:94:1a:a1:b7:7c:ef:26:b4:3f:c3:48:56:fb:
                    dc:4e:d8:f4:1b:16:a3:63:63:60:ca:57:d1:31:4a:
                    8d:6c:fd:26:04:c3:8b:71:bd:be:57:b4:26:89:aa:
                    f7:00:5d:c4:29:be:97:75:99:ad:af:ce:b3:ff:16:
                    8c:ef:f6:1b:61:f6:6a:a3:ae:22:06:58:b4:36:4c:
                    d2:9d:38:fc:43:4b:fb:75:df:40:ef:53:d1:22:62:
                    f7:9c:06:0b:b8:1a:27:dd:16:a2:a9:2c:ec:a4:38:
                    4c:a1:6b:f2:2a:3e:d6:1f:ae:4f:d2:1b:72:01:fa:
                    54:77:53:9d:af:7c:55:53:2c:be:c4:62:f4:a6:1d:
                    a0:09:67:26:8a:bb:e1:ee:04:55:1b:14:31:5c:70:
                    38:3b:1e:c2:dd:f2:24:fe:4f:9d:c0:bc:67:0a:b0:
                    e5:d3:4c:e4:eb:61:fb:7c:90:bf:fe:0d:9d:75:cc:
                    92:d9:b5:40:32:5b:52:0f:d2:92:6c:e2:25:b5:8f:
                    33:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                37:01:79:0B:FC:D7:40:69:8B:F2:D5:9F:B7:80:04:95:72:8B:10:41
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3701790BFCD740698BF2D59FB7800495728B1041.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.128.0/22
                IPv6:
                  2804:1d34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264354

    Signature Algorithm: sha256WithRSAEncryption
         b8:14:78:e9:87:ca:64:de:6a:a7:38:01:88:00:56:12:04:e7:
         39:05:08:89:e6:95:b7:80:41:dd:cf:4d:5a:11:a1:88:43:bf:
         f5:62:73:b9:d4:e4:ad:95:5e:84:b9:1a:25:0d:d2:6e:ed:c0:
         fa:7b:99:50:2f:df:74:a8:58:4a:cd:84:3d:65:e4:5a:8f:76:
         02:7b:51:99:b4:e7:09:aa:ff:f8:fe:6a:07:04:7f:58:c8:9f:
         d0:61:d4:94:fc:04:28:84:4a:3a:4d:81:e6:6d:c3:f3:17:19:
         8a:0d:59:e6:5a:45:53:54:72:89:8e:0d:6a:61:a6:f0:16:bb:
         5d:2f:49:ba:a6:42:66:03:93:58:ca:20:ff:cf:58:1e:0b:ff:
         60:a1:47:70:84:18:fb:47:c1:b9:a2:d3:66:18:ec:83:bf:30:
         c7:ed:26:5b:42:9c:13:53:19:59:45:03:af:88:0f:37:c3:ac:
         80:a6:83:f9:92:1d:77:0d:99:a1:9a:48:a5:b6:8a:d9:d2:3d:
         6c:db:98:b4:ed:7c:f7:27:d1:65:8b:d1:3f:6d:49:17:8d:d5:
         45:3b:b2:6b:28:2e:3a:d2:f9:d8:50:1a:41:16:e8:99:ef:72:
         7f:a7:cb:92:e4:f7:a4:aa:92:95:eb:07:3f:aa:99:b6:49:e6:
         2e:95:16:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:50 2024 by rpki-client on console.sobornost.net