Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/48F2B2A91F796982ADA6E093AE2391942ED8774B.cer
File:                     48F2B2A91F796982ADA6E093AE2391942ED8774B.cer (raw, json)
Hash identifier:          W8z/6fSgeQidIPyFltz/hnq+zvoiVpoWzWuVLZQgspY=
Subject key identifier:   48:F2:B2:A9:1F:79:69:82:AD:A6:E0:93:AE:23:91:94:2E:D8:77:4B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3B5B9E4754214E95EFBEBED6D32B834CBC04D310
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/hamm3Je2crZq1P9nqwQ5YN8V228g1xEHMt23dHR3Y4a/0/48F2B2A91F796982ADA6E093AE2391942ED8774B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/hamm3Je2crZq1P9nqwQ5YN8V228g1xEHMt23dHR3Y4a/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 16 Sep 2024 02:17:04 +0000
Certificate not after:    Mon 15 Sep 2025 02:22:04 +0000
Subordinate resources:    AS: 266153
                          IP: 190.196.240.0/22
                          IP: 2804:3b80::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:5b:9e:47:54:21:4e:95:ef:be:be:d6:d3:2b:83:4c:bc:04:d3:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 16 02:17:04 2024 GMT
            Not After : Sep 15 02:22:04 2025 GMT
        Subject: CN=48F2B2A91F796982ADA6E093AE2391942ED8774B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:50:0f:27:1d:75:a0:ad:b7:e0:c0:85:c5:3c:
                    48:32:d9:09:64:2a:d9:24:65:ce:17:72:2b:d9:32:
                    00:af:0b:36:1f:d2:d9:68:2d:21:f4:b7:e2:8e:da:
                    06:25:fa:0b:ab:dd:be:c9:fb:79:07:07:c3:0b:78:
                    4f:55:d4:8c:67:92:7c:db:06:f8:2b:7f:86:b2:26:
                    c0:0b:35:4b:25:9c:dd:8d:e8:85:1a:16:f5:3a:a8:
                    4c:a0:34:03:7b:6a:20:b7:34:2d:eb:fa:95:61:87:
                    39:b3:ec:b1:20:00:17:e6:4f:b2:72:5f:f4:3e:58:
                    fa:51:67:aa:7e:7a:8a:88:ed:5d:fa:14:33:10:9a:
                    b1:7e:4a:8a:7a:3f:86:7f:be:7a:32:94:7c:a4:17:
                    be:f2:a5:68:18:54:47:5e:99:a8:3d:48:2c:e7:12:
                    c4:f0:ca:7f:51:79:95:88:9f:53:b6:09:4b:b7:f0:
                    e6:29:8d:53:53:89:12:66:b9:db:55:bb:7c:72:28:
                    1f:a8:58:2e:87:f5:84:12:25:b9:7c:ed:2a:18:05:
                    54:b9:91:ac:5b:92:14:06:90:cc:65:0e:14:cf:21:
                    c1:d7:dd:8d:97:49:ba:06:3b:c3:6e:d9:d8:35:cf:
                    80:dc:d9:b9:45:2e:0f:56:21:fc:8b:5f:8d:80:83:
                    ca:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                48:F2:B2:A9:1F:79:69:82:AD:A6:E0:93:AE:23:91:94:2E:D8:77:4B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/hamm3Je2crZq1P9nqwQ5YN8V228g1xEHMt23dHR3Y4a/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/hamm3Je2crZq1P9nqwQ5YN8V228g1xEHMt23dHR3Y4a/0/48F2B2A91F796982ADA6E093AE2391942ED8774B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.240.0/22
                IPv6:
                  2804:3b80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266153

    Signature Algorithm: sha256WithRSAEncryption
         3b:cc:4a:49:01:98:5e:ef:02:63:1a:af:79:95:3d:a6:f9:80:
         c7:71:34:e4:b8:28:1b:58:dc:cc:23:48:ef:50:b8:19:4f:79:
         e0:49:25:ca:5f:b1:be:39:2e:f9:1e:74:25:ba:fa:d2:31:fd:
         55:e1:b3:ac:c2:1d:7a:d3:15:d0:3e:31:81:f1:3b:39:66:2f:
         14:10:0c:e7:74:37:d5:03:bf:99:9a:1b:a3:33:f0:ee:af:f5:
         64:bb:fd:7a:c9:ed:f6:7c:21:e8:40:ea:ab:bd:70:ea:c7:7f:
         ca:d0:b9:3b:6f:d8:e0:bd:96:8c:d1:12:34:60:11:49:6a:d5:
         22:d2:9e:b8:39:76:04:c7:5d:90:49:00:ed:c5:f8:49:ea:52:
         e0:06:4e:ef:2e:8c:0b:a8:57:fb:38:77:82:92:6c:f1:e0:c1:
         a5:14:7d:ea:4f:36:06:71:28:01:10:bf:be:47:ae:e8:67:ef:
         2a:66:f8:7b:2e:22:b6:8b:4e:59:7a:23:3a:8b:ae:e4:96:76:
         ac:e8:7c:b8:2d:7d:4b:fa:53:b7:da:c0:c0:60:c7:f7:10:fd:
         b5:d2:ad:c1:17:ef:5e:55:7a:d7:b7:9f:96:0e:f8:17:c8:01:
         92:83:2f:ea:9d:c9:5b:83:9f:26:a5:63:5c:4f:d1:b5:dc:a1:
         33:84:12:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:53 2024 by rpki-client on console.sobornost.net