Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/47C9379EE2F8BD5DFAD70FB93BFBC9B4F211A271.cer
File:                     47C9379EE2F8BD5DFAD70FB93BFBC9B4F211A271.cer (raw, json)
Hash identifier:          fBuuPomMxTJpKEhmUrkYOZmoy/1NSrUTNI2D78z1tI0=
Subject key identifier:   47:C9:37:9E:E2:F8:BD:5D:FA:D7:0F:B9:3B:FB:C9:B4:F2:11:A2:71
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5125724B43A7DEBB9C21A6F947581A0BBB735DF0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E8caTf6AzNtnjfAVfFGYg5TAp6bQnkQvCk2Z8EPYyUTj/1/47C9379EE2F8BD5DFAD70FB93BFBC9B4F211A271.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E8caTf6AzNtnjfAVfFGYg5TAp6bQnkQvCk2Z8EPYyUTj/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 17:04:07 +0000
Certificate not after:    Thu 03 Apr 2025 17:09:07 +0000
Subordinate resources:    AS: 262540
                          IP: 177.72.32.0/21
                          IP: 2804:5c4::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:25:72:4b:43:a7:de:bb:9c:21:a6:f9:47:58:1a:0b:bb:73:5d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 17:04:07 2024 GMT
            Not After : Apr  3 17:09:07 2025 GMT
        Subject: CN=47C9379EE2F8BD5DFAD70FB93BFBC9B4F211A271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c8:86:5b:f4:88:bb:7e:bd:bd:fb:bf:36:5d:
                    d9:d8:68:e0:47:2b:e5:35:fc:48:31:b6:4e:de:6c:
                    b8:04:47:68:10:be:55:1d:72:d0:91:2f:83:fb:c8:
                    39:86:44:55:9e:55:6b:de:c9:e0:81:6d:ab:82:ce:
                    e8:55:c5:8c:b5:70:06:ed:97:80:57:24:7d:c6:26:
                    fb:a2:33:bd:5f:16:2f:79:a3:23:f6:3b:c7:6b:9a:
                    d5:ff:5e:9e:67:ac:66:ff:5a:cc:69:a0:f2:af:8c:
                    97:17:87:96:53:be:1a:bb:bc:cf:96:70:49:f0:2a:
                    44:e3:54:12:2f:a0:a7:6b:f9:c3:45:a0:e4:91:fa:
                    c2:1d:12:00:fe:7b:4c:61:ae:74:e9:86:20:2a:26:
                    50:f7:dd:90:12:0d:90:7e:22:6b:8b:7e:0b:b9:a9:
                    3a:dd:31:23:63:9c:3f:77:00:7c:31:ed:57:ef:dd:
                    af:b1:34:cd:d2:1e:de:ef:3b:f5:6b:bc:29:ae:a1:
                    30:fd:5f:f4:d6:b7:61:e5:e3:3d:1c:66:7b:5b:b3:
                    c7:a1:d4:ec:50:d8:2b:cb:48:ab:e8:0b:12:be:35:
                    15:30:e9:26:3f:22:f3:47:8f:40:4a:c2:2f:0e:2b:
                    be:78:ec:25:22:d9:74:71:5f:94:e3:81:19:da:3f:
                    3a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                47:C9:37:9E:E2:F8:BD:5D:FA:D7:0F:B9:3B:FB:C9:B4:F2:11:A2:71
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E8caTf6AzNtnjfAVfFGYg5TAp6bQnkQvCk2Z8EPYyUTj/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E8caTf6AzNtnjfAVfFGYg5TAp6bQnkQvCk2Z8EPYyUTj/1/47C9379EE2F8BD5DFAD70FB93BFBC9B4F211A271.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.32.0/21
                IPv6:
                  2804:5c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262540

    Signature Algorithm: sha256WithRSAEncryption
         26:f7:e1:fb:9d:bf:84:d8:27:ac:4d:8f:d6:7f:a6:6c:c3:d2:
         8f:b3:ac:09:26:78:13:05:4d:e7:1d:2c:af:72:53:8f:43:d9:
         58:96:d8:9b:77:56:8e:15:32:0b:1f:ce:7f:0d:2f:b7:c9:6d:
         56:c3:06:14:64:7c:37:f2:dc:28:92:4f:5b:7a:94:f6:d0:a5:
         d0:7a:84:52:75:e2:21:46:8f:bb:6f:4d:7e:a4:72:4a:db:44:
         60:6f:89:e5:1d:ed:eb:75:f5:fe:4d:09:8e:73:ba:2d:3c:c5:
         fe:2b:b0:0e:d0:86:75:53:4c:fe:e5:59:70:ac:d7:bd:f6:05:
         15:cb:27:bf:d1:8d:70:a3:0a:3d:bb:22:a3:9b:d6:d2:b2:f5:
         f1:56:75:50:2a:9f:63:6c:41:13:7c:f5:27:aa:90:fd:03:29:
         47:00:e6:aa:a2:d5:76:b5:ca:26:e2:d7:ca:a3:02:19:60:b7:
         21:25:b7:c1:cc:23:a6:9e:96:67:b1:a8:15:fa:f9:f5:25:5e:
         1c:aa:f3:c1:f1:ba:7f:c6:61:7c:25:64:1d:d0:66:a9:b9:37:
         55:9e:95:5d:94:15:df:51:2d:bb:12:45:b4:6a:0e:88:56:ea:
         f0:59:a3:34:f6:22:86:e5:37:41:65:41:48:2b:75:a5:a9:44:
         88:be:7e:b3
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUUSVyS0On3rucIab5R1gaC7tzXfAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQxNzA0MDdaFw0yNTA0MDMxNzA5MDdaMDMxMTAvBgNV
BAMTKDQ3QzkzNzlFRTJGOEJENURGQUQ3MEZCOTNCRkJDOUI0RjIxMUEyNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAyIZb9Ii7fr29+782XdnYaOBH
K+U1/Egxtk7ebLgER2gQvlUdctCRL4P7yDmGRFWeVWveyeCBbauCzuhVxYy1cAbt
l4BXJH3GJvuiM71fFi95oyP2O8drmtX/Xp5nrGb/WsxpoPKvjJcXh5ZTvhq7vM+W
cEnwKkTjVBIvoKdr+cNFoOSR+sIdEgD+e0xhrnTphiAqJlD33ZASDZB+ImuLfgu5
qTrdMSNjnD93AHwx7Vfv3a+xNM3SHt7vO/VrvCmuoTD9X/TWt2Hl4z0cZntbs8eh
1OxQ2CvLSKvoCxK+NRUw6SY/IvNHj0BKwi8OK7547CUi2XRxX5TjgRnaPzpTAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRHyTee4vi9XfrX
D7k7+8m08hGicTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRThj
YVRmNkF6TnRuamZBVmZGR1lnNVRBcDZiUW5rUXZDazJaOEVQWXlVVGovMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0U4
Y2FUZjZBek50bmpmQVZmRkdZZzVUQXA2YlFua1F2Q2syWjhFUFl5VVRqLzEvNDdD
OTM3OUVFMkY4QkQ1REZBRDcwRkI5M0JGQkM5QjRGMjExQTI3MS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQDsUggMA0EAgACMAcDBQAoBAXEMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQBjDANBgkqhkiG9w0BAQsFAAOCAQEAJvfh+52/hNgnrE2P
1n+mbMPSj7OsCSZ4EwVN5x0sr3JTj0PZWJbYm3dWjhUyCx/Ofw0vt8ltVsMGFGR8
N/LcKJJPW3qU9tCl0HqEUnXiIUaPu29NfqRySttEYG+J5R3t63X1/k0JjnO6LTzF
/iuwDtCGdVNM/uVZcKzXvfYFFcsnv9GNcKMKPbsio5vW0rL18VZ1UCqfY2xBE3z1
J6qQ/QMpRwDmqqLVdrXKJuLXyqMCGWC3ISW3wcwjpp6WZ7GoFfr59SVeHKrzwfG6
f8ZhfCVkHdBmqbk3VZ6VXZQV31EtuxJFtGoOiFbq8FmjNPYihuU3QWVBSCt1palE
iL5+sw==
-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:53 2024 by rpki-client on console.sobornost.net