Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.cer
File:                     5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.cer (raw, json)
Hash identifier:          sb0NgtIy9wpQ+p2t/GRuyXWBrSyMtW555XqOgam2Oe4=
Subject key identifier:   54:45:B2:68:F9:5C:5A:86:AE:66:A9:F2:C2:3E:2E:41:A5:8C:3D:78
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       583B34F02445D8D913589DFA63272C46721E64BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 25 May 2024 14:50:34 +0000
Certificate not after:    Sat 24 May 2025 14:55:34 +0000
Subordinate resources:    AS: 272438
                          IP: 2804:8130::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:3b:34:f0:24:45:d8:d9:13:58:9d:fa:63:27:2c:46:72:1e:64:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 25 14:50:34 2024 GMT
            Not After : May 24 14:55:34 2025 GMT
        Subject: CN=5445B268F95C5A86AE66A9F2C23E2E41A58C3D78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f1:15:19:ba:f2:6c:1e:a4:8f:52:a8:33:ae:
                    4c:7b:65:75:f9:4c:ff:ad:34:72:ff:b5:50:3f:3a:
                    0c:d6:a2:50:aa:b8:a5:4e:fa:c9:40:3d:cf:60:8a:
                    b2:05:57:ad:9b:07:b6:97:01:fa:c7:2a:c5:d6:18:
                    ab:67:c3:80:b6:89:3a:b8:67:d2:84:ec:1c:cb:45:
                    d4:2a:f8:b0:6b:cc:42:fb:c9:4b:31:15:4a:34:54:
                    ee:1f:b0:a5:de:db:34:fa:53:4c:fd:70:6a:76:64:
                    53:b0:c1:5c:cf:80:b3:45:cc:ae:88:2a:0f:b8:a2:
                    eb:28:ce:a5:41:99:41:f8:f1:d9:16:45:29:da:fb:
                    25:d6:53:06:46:76:5d:da:7c:a7:32:a2:4c:e7:51:
                    77:e7:cd:fd:ec:d7:f4:05:17:47:e5:2c:a9:3a:2e:
                    45:4e:e8:cb:4a:e7:49:af:2a:d3:6c:3e:1d:10:e4:
                    2f:89:06:79:71:03:31:75:42:d6:63:9b:bf:83:97:
                    78:ed:f5:91:d4:7d:99:05:0f:06:0a:db:f8:87:21:
                    4f:3d:0e:12:1c:f4:5b:b3:a5:e5:b8:99:5e:98:c9:
                    e3:60:a5:74:f4:04:22:e8:1e:39:78:e8:88:62:97:
                    1a:9f:a6:c3:41:03:8c:bd:40:97:4b:a7:49:2e:75:
                    e6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                54:45:B2:68:F9:5C:5A:86:AE:66:A9:F2:C2:3E:2E:41:A5:8C:3D:78
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8130::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272438

    Signature Algorithm: sha256WithRSAEncryption
         80:4d:dd:18:7b:46:c7:b1:f3:d1:7e:c5:77:1f:64:40:fc:f5:
         0c:ac:06:ca:19:53:6f:76:4e:60:a6:08:e9:d0:bb:72:c8:aa:
         4a:49:3e:63:a2:7b:3a:09:c1:bc:79:88:09:c1:26:75:a9:e4:
         29:91:7c:d6:97:67:fa:aa:6f:2f:2e:01:a9:6e:33:9b:ea:2a:
         b4:94:40:4c:5c:85:df:e4:f1:ad:d1:69:91:17:1e:5a:c5:e4:
         5f:88:61:a2:08:b2:12:f3:9e:2f:ee:83:47:d9:a2:3f:28:cb:
         65:13:da:7d:1d:8b:07:84:fc:10:8f:a4:e4:73:5d:ec:cb:28:
         d1:aa:7c:aa:03:79:d4:08:6a:7a:4b:c4:d2:e9:de:b5:b8:df:
         7a:ea:c3:70:a4:9b:58:fa:b4:dd:0d:d6:db:60:9c:52:0a:95:
         ad:27:d4:8f:59:e3:50:3b:45:a4:1c:af:60:de:86:03:00:e9:
         e0:f5:6d:ac:b6:e8:b5:51:b6:9e:d2:aa:b2:4f:42:1d:35:e1:
         09:88:c8:35:07:28:08:1e:3d:12:38:41:37:3a:1d:84:fd:e7:
         d8:9d:71:e7:0f:54:20:59:1b:9e:72:2e:f9:e7:94:6b:ab:35:
         79:37:b9:9e:e8:9f:12:57:f7:39:ec:5e:ce:f6:59:07:78:89:
         5d:07:3a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:55 2024 by rpki-client on console.sobornost.net