Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/569B1A49B7C34AF9FABB8A50660A14D1E8C184AD.cer
File:                     569B1A49B7C34AF9FABB8A50660A14D1E8C184AD.cer (raw, json)
Hash identifier:          Qr5p7JQ3que/Fyc3ykriqmkihm2vnyIsX2ipNVPYJck=
Subject key identifier:   56:9B:1A:49:B7:C3:4A:F9:FA:BB:8A:50:66:0A:14:D1:E8:C1:84:AD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       25513F056B62829806AC363F499861160A44283D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/569B1A49B7C34AF9FABB8A50660A14D1E8C184AD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 04 Oct 2024 10:59:32 +0000
Certificate not after:    Fri 03 Oct 2025 11:04:32 +0000
Subordinate resources:    AS: 262389
                          IP: 177.129.64.0/22
                          IP: 2804:8b4::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:51:3f:05:6b:62:82:98:06:ac:36:3f:49:98:61:16:0a:44:28:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  4 10:59:32 2024 GMT
            Not After : Oct  3 11:04:32 2025 GMT
        Subject: CN=569B1A49B7C34AF9FABB8A50660A14D1E8C184AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:66:cb:ce:76:c0:48:60:da:dd:8d:fe:2e:fa:
                    5b:81:27:dd:ed:a3:9b:cc:20:f7:53:4e:06:2e:33:
                    0b:7c:ab:57:00:24:72:af:73:7e:8a:6e:df:79:33:
                    d9:3d:66:db:77:63:4a:88:16:71:57:bb:fe:6f:bb:
                    fc:41:9c:29:e7:73:35:a5:88:ec:21:e0:2e:53:4e:
                    d8:97:0e:16:d4:31:1d:34:f5:e3:28:e3:db:7a:7a:
                    be:31:08:44:54:4c:46:99:1b:ff:de:12:eb:01:35:
                    62:c9:a2:0e:df:63:0d:d1:8d:3c:47:a2:f4:4e:93:
                    29:a6:51:59:a4:75:de:f2:d6:be:a9:9b:5b:3d:24:
                    89:a2:ab:7c:60:ff:e2:83:85:24:d7:b9:b4:a2:95:
                    fb:75:43:cd:7f:0e:6c:d0:32:98:56:62:86:03:ab:
                    5c:50:f4:33:28:fa:7a:e8:49:e9:62:21:87:a2:94:
                    af:aa:81:db:9a:a8:f9:35:94:a9:4b:6f:d4:9a:ca:
                    67:24:40:bf:20:a1:82:08:03:ef:89:6f:29:b1:11:
                    73:48:4c:d6:14:55:bd:73:23:a4:02:f2:22:83:ee:
                    df:4d:2a:be:3c:ec:67:77:90:f6:85:67:62:6e:87:
                    d0:e9:0f:b9:27:34:4d:51:ac:fe:ee:9c:53:dd:c9:
                    c1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                56:9B:1A:49:B7:C3:4A:F9:FA:BB:8A:50:66:0A:14:D1:E8:C1:84:AD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/569B1A49B7C34AF9FABB8A50660A14D1E8C184AD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.64.0/22
                IPv6:
                  2804:8b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262389

    Signature Algorithm: sha256WithRSAEncryption
         56:37:0e:13:55:a5:8a:cb:52:e0:de:f1:a3:98:1d:de:23:7b:
         e4:fc:71:22:07:b2:52:d9:5a:ea:b4:ae:89:9d:fc:8f:d3:b6:
         86:1e:2a:20:50:2a:b4:74:56:bd:86:ba:df:69:47:c2:25:5b:
         f9:41:c0:e5:05:f7:07:bd:c6:cf:0d:9c:6d:71:4a:af:30:79:
         67:9d:8c:07:6b:f4:99:aa:b5:8e:9b:3d:a9:f8:87:40:81:3a:
         fc:e1:4c:56:72:6a:8c:65:28:af:2b:b7:6c:30:a2:9a:d7:0d:
         d2:dd:22:70:65:7f:e8:e4:9e:38:0a:7a:78:8e:47:1c:12:95:
         37:0d:d4:c8:b9:eb:18:75:e7:36:f8:63:29:2e:e8:2c:6d:7c:
         30:1c:91:0a:20:7d:3b:cb:6e:04:a2:82:af:51:f2:93:f4:2e:
         c4:53:34:8f:a7:90:eb:58:09:81:9c:b1:78:01:6b:8d:3f:46:
         fc:fb:45:88:c1:1f:52:c8:b1:67:94:10:1e:d4:82:96:8e:9d:
         ae:70:b5:2c:c6:6d:d8:22:3a:68:e7:f7:7b:9c:81:55:ab:96:
         81:34:9c:ae:11:ed:27:58:1f:94:7f:14:08:8a:0b:86:1a:4a:
         d3:2c:5f:70:19:f6:60:62:78:f5:43:85:78:bc:d5:0b:7c:aa:
         6d:e6:a9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:55 2024 by rpki-client on console.sobornost.net