Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4EED9818567EF67A561AEB24FB9C960FF884B0BB.cer
File:                     4EED9818567EF67A561AEB24FB9C960FF884B0BB.cer (raw, json)
Hash identifier:          wkHFiHDlna4C+wXDl1NKTQJcz1SkR89aadB78OULHYE=
Subject key identifier:   4E:ED:98:18:56:7E:F6:7A:56:1A:EB:24:FB:9C:96:0F:F8:84:B0:BB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       343221E146308A57BEB577B6F85C2F83F7E1EC68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/4EED9818567EF67A561AEB24FB9C960FF884B0BB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 14 Aug 2024 01:00:29 +0000
Certificate not after:    Wed 13 Aug 2025 01:05:29 +0000
Subordinate resources:    AS: 14457
                          AS: 262391
                          IP: 45.235.16.0/22
                          IP: 131.0.76.0/22
                          IP: 168.181.68.0/22
                          IP: 170.254.124.0/22
                          IP: 177.125.220.0/22
                          IP: 177.131.112.0/20
                          IP: 190.89.104.0/22
                          IP: 200.53.16.0/20
                          IP: 2804:8c0::/32
                          IP: 2804:1a64::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:32:21:e1:46:30:8a:57:be:b5:77:b6:f8:5c:2f:83:f7:e1:ec:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 14 01:00:29 2024 GMT
            Not After : Aug 13 01:05:29 2025 GMT
        Subject: CN=4EED9818567EF67A561AEB24FB9C960FF884B0BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:02:8d:2e:c2:3d:1d:87:5a:7a:d2:1f:c1:a8:
                    05:c3:ca:61:10:96:5f:23:1e:72:22:22:5b:a3:0e:
                    64:fa:88:af:9a:39:8a:eb:fd:a5:4a:c1:f8:25:b7:
                    f0:62:6c:14:cb:0a:57:bb:f6:88:2a:81:7d:da:29:
                    65:8d:f9:13:eb:42:3e:82:9a:f2:ee:94:dc:45:b2:
                    12:75:78:f6:b4:0d:cf:13:b7:9d:6e:92:05:26:be:
                    30:10:ec:73:ba:f6:ae:41:65:a8:78:f0:9a:4e:b0:
                    32:9c:f7:42:1c:c1:3b:dd:b1:a2:bd:81:46:ff:a6:
                    15:41:a1:34:27:69:57:df:4b:8a:03:0c:dd:44:57:
                    f2:31:e2:c9:f4:b2:5f:b6:95:9c:9c:87:5e:a6:7a:
                    94:70:96:9b:69:4d:fd:cd:94:82:e9:a8:1b:b9:d5:
                    4c:ea:52:29:0f:3e:d8:c0:1f:af:be:85:ba:28:b1:
                    a6:3b:d3:23:2d:3c:6c:f1:6b:d0:22:6b:a9:18:05:
                    7e:b0:cf:53:b7:2b:44:c8:1b:08:fb:46:ea:e9:a6:
                    75:6d:59:8f:7f:70:83:e8:18:c9:cb:05:be:15:ed:
                    5c:09:60:55:b5:a0:49:30:1a:f3:99:7b:9d:05:86:
                    20:60:a9:73:32:2b:e1:5a:17:50:40:44:b6:93:f1:
                    69:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4E:ED:98:18:56:7E:F6:7A:56:1A:EB:24:FB:9C:96:0F:F8:84:B0:BB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/4EED9818567EF67A561AEB24FB9C960FF884B0BB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.16.0/22
                  131.0.76.0/22
                  168.181.68.0/22
                  170.254.124.0/22
                  177.125.220.0/22
                  177.131.112.0/20
                  190.89.104.0/22
                  200.53.16.0/20
                IPv6:
                  2804:8c0::/32
                  2804:1a64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14457
                  262391

    Signature Algorithm: sha256WithRSAEncryption
         2e:6a:eb:1a:f4:f3:68:43:e1:30:d5:31:af:c1:c7:18:16:de:
         1d:ff:d0:8b:36:68:bb:25:ed:54:39:fd:4c:3a:b7:d8:a3:8c:
         8d:c0:15:77:07:d0:ed:66:e4:28:d6:c9:6a:f2:d6:4c:06:ec:
         6f:c3:c6:40:65:7b:59:90:a6:bb:bf:14:5c:5a:c5:6c:97:d3:
         5f:bb:af:5f:6c:5b:91:55:bf:58:37:29:7a:1c:71:90:05:8c:
         1d:8f:fa:f7:1c:1e:c3:e3:da:eb:a0:a0:a4:b0:be:8c:9f:3e:
         90:81:c3:64:a6:8e:5a:c5:fc:75:0e:49:1f:d1:4f:b7:5d:50:
         1b:80:50:8a:2e:eb:ee:4d:9d:65:5f:f0:1d:a0:3f:97:b6:46:
         66:39:cf:74:e2:85:76:fe:6f:11:fc:4a:5d:e9:c4:fe:7d:89:
         58:bf:f9:66:4e:ec:44:fc:94:d3:79:7c:0e:00:2f:33:25:89:
         27:5a:47:60:aa:19:dc:57:a4:f9:0b:9b:f8:ae:33:22:c9:eb:
         17:52:c4:62:d6:e5:03:a9:d0:e8:3c:19:43:07:e8:0c:e4:52:
         3f:7e:ce:b9:ad:5e:d5:0f:fc:43:8a:bc:35:90:40:87:23:84:
         e5:6b:c5:52:fa:4a:9b:0b:62:da:d7:3d:f1:c0:86:3f:86:ef:
         aa:8b:1a:df
-----BEGIN CERTIFICATE-----
MIIGYzCCBUugAwIBAgIUNDIh4UYwile+tXe2+Fwvg/fh7GgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA4MTQwMTAwMjlaFw0yNTA4MTMwMTA1MjlaMDMxMTAvBgNV
BAMTKDRFRUQ5ODE4NTY3RUY2N0E1NjFBRUIyNEZCOUM5NjBGRjg4NEIwQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNAo0uwj0dh1p60h/BqAXDymEQ
ll8jHnIiIlujDmT6iK+aOYrr/aVKwfglt/BibBTLCle79ogqgX3aKWWN+RPrQj6C
mvLulNxFshJ1ePa0Dc8Tt51ukgUmvjAQ7HO69q5BZah48JpOsDKc90IcwTvdsaK9
gUb/phVBoTQnaVffS4oDDN1EV/Ix4sn0sl+2lZych16mepRwlptpTf3NlILpqBu5
1UzqUikPPtjAH6++hboosaY70yMtPGzxa9Aia6kYBX6wz1O3K0TIGwj7RurppnVt
WY9/cIPoGMnLBb4V7VwJYFW1oEkwGvOZe50FhiBgqXMyK+FaF1BARLaT8WkJAgMB
AAGjggNtMIIDaTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRO7ZgYVn72elYa
6yT7nJYP+ISwuzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vc3lq
WTdpdFY2UTFpdkJxWlBWOUdGZUV5RWhwaGZOb0gxWm9FNEt1bldZOS8wLzCBiQYI
KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vc3lq
WTdpdFY2UTFpdkJxWlBWOUdGZUV5RWhwaGZOb0gxWm9FNEt1bldZOS8wLzRFRUQ5
ODE4NTY3RUY2N0E1NjFBRUIyNEZCOUM5NjBGRjg4NEIwQkIubWZ0MD8GCCsGAQUF
BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh
dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBggrBgEFBQcBBwEB
/wRQME4wNgQCAAEwMAMEAi3rEAMEAoMATAMEAqi1RAMEAqr+fAMEArF93AMEBLGD
cAMEAr5ZaAMEBMg1EDAUBAIAAjAOAwUAKAQIwAMFACgEGmQwHgYIKwYBBQUHAQgB
Af8EDzANoAswCQICOHkCAwQA9zANBgkqhkiG9w0BAQsFAAOCAQEALmrrGvTzaEPh
MNUxr8HHGBbeHf/QizZouyXtVDn9TDq32KOMjcAVdwfQ7WbkKNbJavLWTAbsb8PG
QGV7WZCmu78UXFrFbJfTX7uvX2xbkVW/WDcpehxxkAWMHY/69xwew+Pa66CgpLC+
jJ8+kIHDZKaOWsX8dQ5JH9FPt11QG4BQii7r7k2dZV/wHaA/l7ZGZjnPdOKFdv5v
EfxKXenE/n2JWL/5Zk7sRPyU03l8DgAvMyWJJ1pHYKoZ3Fek+Qub+K4zIsnrF1LE
YtblA6nQ6DwZQwfoDORSP37Oua1e1Q/8Q4q8NZBAhyOE5WvFUvpKmwti2tc98cCG
P4bvqosa3w==
-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:54 2024 by rpki-client on console.sobornost.net