Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3F7667D2CA97F4875AB3986F0D03936A276296AF.cer
File:                     3F7667D2CA97F4875AB3986F0D03936A276296AF.cer (raw, json)
Hash identifier:          IfihwvlxFCnngi1YaUu5QyvRiEdpwDzjSeuloOzEEUU=
Subject key identifier:   3F:76:67:D2:CA:97:F4:87:5A:B3:98:6F:0D:03:93:6A:27:62:96:AF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3926359C41069D1A9F8EE9901037C4A0C661E834
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5WQvhtNymC6zCWVJgYTo7N1vR87U2o3r2rK5M3W36Lby/1/3F7667D2CA97F4875AB3986F0D03936A276296AF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5WQvhtNymC6zCWVJgYTo7N1vR87U2o3r2rK5M3W36Lby/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 19:27:25 +0000
Certificate not after:    Thu 03 Apr 2025 19:32:25 +0000
Subordinate resources:    AS: 269226
                          IP: 45.182.72.0/22
                          IP: 2804:6148::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:26:35:9c:41:06:9d:1a:9f:8e:e9:90:10:37:c4:a0:c6:61:e8:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 19:27:25 2024 GMT
            Not After : Apr  3 19:32:25 2025 GMT
        Subject: CN=3F7667D2CA97F4875AB3986F0D03936A276296AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:5b:4d:55:10:d7:05:ce:56:e2:18:0f:2f:bd:
                    99:89:11:0c:0f:30:6b:1d:26:a2:5d:84:75:8b:a3:
                    41:80:31:67:a3:cf:7e:31:5b:50:07:25:56:83:cb:
                    b4:87:53:4b:da:2e:91:c7:75:a3:f8:91:5f:27:fc:
                    de:86:4e:b3:d8:cb:c6:d9:93:b9:e1:b3:39:99:8a:
                    8a:15:be:52:f9:37:d8:ca:8b:55:58:46:84:33:ab:
                    4e:ae:4f:0c:79:be:eb:98:79:89:b5:2b:a4:1d:f4:
                    d4:c8:10:8d:21:91:91:1c:c1:00:13:39:ca:34:89:
                    b1:ea:86:07:02:dc:fd:c0:e4:c3:1c:82:f5:b9:05:
                    45:92:b3:cd:0f:3c:e9:c4:ca:c6:6f:ef:7e:6d:44:
                    2f:78:36:6f:01:2e:d3:fb:5b:bd:50:e4:84:81:c4:
                    30:e7:b8:39:6e:c9:2a:07:6c:53:ec:7c:f7:15:4e:
                    c9:a8:a4:e7:4d:1f:1c:b5:68:f3:8f:81:5b:9b:9d:
                    36:c4:11:66:72:bb:8c:3b:8d:29:38:f9:53:c0:f3:
                    de:14:9d:e8:93:38:45:09:e8:5b:eb:fc:a5:64:a4:
                    e0:48:fc:21:47:12:0b:80:2a:e0:a7:ed:d0:61:6f:
                    5b:47:d4:f0:a2:a1:3e:59:c0:e8:b9:18:f5:57:ae:
                    1c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3F:76:67:D2:CA:97:F4:87:5A:B3:98:6F:0D:03:93:6A:27:62:96:AF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5WQvhtNymC6zCWVJgYTo7N1vR87U2o3r2rK5M3W36Lby/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5WQvhtNymC6zCWVJgYTo7N1vR87U2o3r2rK5M3W36Lby/1/3F7667D2CA97F4875AB3986F0D03936A276296AF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.72.0/22
                IPv6:
                  2804:6148::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269226

    Signature Algorithm: sha256WithRSAEncryption
         84:e3:1a:ec:e0:15:14:3d:5a:a4:d1:f8:a8:6d:11:11:dd:58:
         ac:41:a2:c3:e1:a4:d7:79:c1:dc:97:7f:fe:b0:0d:c9:5e:88:
         d1:a3:79:da:d3:00:3b:8c:6e:7e:99:d2:8d:b9:a8:44:cc:e8:
         5f:fd:f0:d9:01:02:29:6b:05:0d:b0:ba:d9:25:31:be:a5:09:
         03:92:64:9a:37:14:48:de:c7:60:b5:ae:0d:31:36:fc:5e:5c:
         31:1b:36:14:a2:93:70:b9:30:4c:fd:ed:10:ed:4d:e5:56:4a:
         4b:85:69:d2:a3:6b:85:af:44:65:eb:02:05:82:fc:75:1c:9d:
         da:2d:fc:cc:12:3d:87:79:97:44:79:5f:39:f3:3d:8b:ef:ce:
         f2:dc:e4:b9:96:1e:db:f9:5d:d1:e8:fe:f4:ba:05:13:bd:aa:
         7f:29:ac:a4:ae:53:7d:8c:5e:6a:61:56:cd:98:f1:ca:51:ed:
         52:fc:dc:1d:10:9a:23:80:5c:82:ac:c4:a1:e5:11:08:a2:d4:
         1e:9f:73:2e:7a:2a:9d:51:55:3b:14:2a:a2:dd:a6:f3:4d:26:
         2c:e7:87:bd:c5:16:42:8f:91:6b:95:99:d0:ec:2b:7d:df:f8:
         14:95:cb:c1:90:f2:55:98:38:3c:6b:60:53:43:bf:7a:51:50:
         10:b0:05:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:51 2024 by rpki-client on console.sobornost.net