Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/404A3AC7CB5BD5C803C318C5F02FD5611F6BB962.cer
File:                     404A3AC7CB5BD5C803C318C5F02FD5611F6BB962.cer (raw, json)
Hash identifier:          1bADb1ftEEiXo27maP/JGPsnc8z7Kvzwd8f8SPhwAYg=
Subject key identifier:   40:4A:3A:C7:CB:5B:D5:C8:03:C3:18:C5:F0:2F:D5:61:1F:6B:B9:62
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       424CBF7299C02D6D5851EBB861F0B46B9CAF8433
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/404A3AC7CB5BD5C803C318C5F02FD5611F6BB962.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 14 Oct 2024 01:37:24 +0000
Certificate not after:    Mon 13 Oct 2025 01:42:24 +0000
Subordinate resources:    AS: 262493
                          IP: 138.255.216.0/22
                          IP: 168.121.148.0/22
                          IP: 170.82.132.0/22
                          IP: 177.8.48.0/21
                          IP: 177.55.48.0/20
                          IP: 2804:fec::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:4c:bf:72:99:c0:2d:6d:58:51:eb:b8:61:f0:b4:6b:9c:af:84:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 14 01:37:24 2024 GMT
            Not After : Oct 13 01:42:24 2025 GMT
        Subject: CN=404A3AC7CB5BD5C803C318C5F02FD5611F6BB962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7b:53:2f:9b:70:1a:b3:53:ca:82:95:c6:5f:
                    4d:c3:a9:af:2e:95:e4:a2:d1:5b:bd:dc:43:03:13:
                    57:09:10:b1:da:7a:ae:a6:b0:ac:1e:4e:b9:fe:2e:
                    6c:11:45:89:b5:2a:42:94:da:95:14:cc:55:6a:3d:
                    06:ea:fe:ce:c8:1d:b1:1b:60:07:8c:43:64:66:76:
                    c2:c9:b3:72:d5:c3:d2:be:e5:a2:b3:8a:31:2e:c7:
                    20:01:d4:8c:94:12:f5:d4:34:76:33:ed:f8:7d:1b:
                    93:98:d1:fa:cf:44:c9:06:56:82:6f:03:08:4d:5b:
                    63:36:80:6a:8c:1f:8c:62:a5:b8:e6:73:b5:fe:ea:
                    d8:36:b3:95:80:de:6c:15:14:e8:19:cc:93:52:c6:
                    3b:52:89:bd:01:b6:30:85:d2:83:3c:39:4c:94:49:
                    8c:b7:f7:ef:bd:aa:8b:00:82:01:42:ad:b1:55:fa:
                    d0:d0:a7:15:0b:77:74:69:62:7e:2c:27:c1:0b:78:
                    3e:70:77:d8:b2:8c:3e:2f:b6:6a:4e:90:54:e4:c8:
                    98:8c:59:b7:09:b0:17:63:00:22:92:78:07:e6:a5:
                    6a:93:7e:09:d5:db:67:96:76:a1:ee:c6:a0:fe:ad:
                    f8:49:71:b2:2c:34:78:fa:61:49:35:6d:c0:37:c4:
                    1b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                40:4A:3A:C7:CB:5B:D5:C8:03:C3:18:C5:F0:2F:D5:61:1F:6B:B9:62
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/404A3AC7CB5BD5C803C318C5F02FD5611F6BB962.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.216.0/22
                  168.121.148.0/22
                  170.82.132.0/22
                  177.8.48.0/21
                  177.55.48.0/20
                IPv6:
                  2804:fec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262493

    Signature Algorithm: sha256WithRSAEncryption
         23:51:61:f3:48:d7:2a:c7:2e:e3:6c:85:cd:be:a4:07:de:c8:
         45:c3:b6:3b:b8:6b:75:69:7b:72:45:09:2a:30:f2:ef:e2:97:
         0a:03:1c:63:e8:d5:0b:83:6b:dd:2a:10:79:15:a8:17:d2:ce:
         15:c0:b5:21:a9:aa:83:51:0b:ac:70:ea:d7:34:49:37:d0:66:
         a7:7a:16:c8:d3:ff:84:11:45:2a:58:47:45:42:fa:b8:55:5c:
         63:81:b4:0c:c4:03:b4:98:19:04:0f:69:d3:a1:71:dd:24:38:
         ef:4c:c0:03:51:7b:30:98:7e:48:61:1c:53:91:1f:59:05:37:
         01:6f:87:8a:6d:fb:0f:df:b0:fb:e4:c6:4b:61:1b:6d:4b:5e:
         fb:92:8f:f9:25:42:a8:20:f4:e9:5c:27:59:6f:87:ad:06:2d:
         87:62:ef:af:bc:8b:11:8f:8a:d4:37:f9:70:e5:3b:7c:3e:bd:
         ab:d7:42:ec:a9:6f:26:c0:ba:03:78:89:41:96:17:8e:95:6d:
         07:8d:d1:a2:06:98:0b:d8:22:64:e5:55:62:02:fb:7b:cb:fd:
         03:ba:8c:95:4e:79:6c:59:8d:83:49:5e:3a:df:be:8e:64:70:
         d4:b9:7f:19:06:df:9b:45:08:aa:89:6c:1d:b7:72:06:53:e8:
         7a:58:6a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:52 2024 by rpki-client on console.sobornost.net